Live webinar · Free · 45 minutes
FortiGate Firewall Modernization Webinar for Healthcare for hospitals, clinics and multi-site health systems replacing aging perimeter hardware
A working session for healthcare IT and compliance leaders who already know the firewall has to go and now need criteria they can defend to a board, an auditor and a biomedical engineering team. We walk through how a FortiGate replacement is scoped in a live clinical network — segmentation, encrypted traffic inspection, failover, and the logging that turns protection into evidence.
- Replacement criteria you can defendLeave with a short evaluation framework built around clinical outcomes instead of feature lists: what to segment, what to inspect, what to log, and what has to stay up during a cutover.
- A segmentation plan that respects biomedical constraintsMany connected medical devices run manufacturer-controlled software and cannot be freely patched, reconfigured or scanned. We treat segmentation and monitoring as the realistic compensating controls and show how IoMT, guest Wi-Fi and EHR traffic get separated without touching the devices themselves.
- A straight answer on encrypted inspection tradeoffsInspection performance changes sharply depending on which profiles you enable. We cover how to size and stage inspection so EHR, imaging and telehealth performance is measured rather than assumed — and we quote performance figures only from Fortinet's current published datasheet for the specific model under discussion.
- Evidence for auditors and underwritersCentralized logging and reporting shortens the legwork behind HIPAA risk analysis and gives you better material to answer cyber insurance questionnaires. Underwriting criteria vary by carrier, so we stay on what improves your answers, not what changes your premium.
- A failover design treated as a clinical requirementHigh availability pairs, change windows and rollback planning, on the premise that a firewall outage in a hospital is a patient-care event, not an IT ticket.
Reserve your seat
Free · 45 minutes · 12 seats per session
No sales sequence. One reminder before the session, and the recording after.
What we actually cover
What people bring to this session.
Our firewall is past end-of-support — do we have to rip and replace everything at once?
No. We map a phased sequence: replace at the perimeter first, then layer segmentation and inspection policy in stages you can validate against clinical workflows before enforcement.
Can we inspect encrypted traffic without slowing down imaging and telehealth?
That depends on sizing and on which inspection profiles you turn on. We show how to model it, how to pilot it on a limited segment, and what to measure before you enforce it broadly.
How do we segment devices we are not allowed to modify?
By changing the network around them. The session covers VLAN and policy design that limits blast radius for FDA-regulated equipment you cannot patch or agent.
Does a new firewall make us HIPAA compliant?
It does not. HIPAA compliance is an organizational program. A modern firewall supports controls required under the HIPAA Security Rule; risk analysis, policy and workforce obligations remain yours, and we will be clear about the line.
Before you register
Common questions
- Is this a product pitch?
- It is FortiGate-led, because that is the platform being evaluated, but the substance is evaluation criteria and design decisions. Any product-level performance or licensing figure comes from Fortinet's current official datasheet, not from us.
- Who should be in the room?
- CIO or IT director, the security or compliance lead, network engineering, and — ideally — someone from clinical or biomedical engineering, since they usually hold veto power over device-side changes.
- Will you cover the proposed HIPAA Security Rule updates?
- Yes, with the current rulemaking status stated as of the session date and cited to HHS.gov or the Federal Register directly. We do not work from secondhand summaries on regulatory questions.
- How does this fit the stack we already run?
- The session stays firewall-focused, but palmiq operates the adjacent layers too: Ruckus for clinical and guest wireless, Microsoft for identity, CrowdStrike or SentinelOne for endpoint, and Veeam or Acronis for recovery. Ongoing operation runs through a 24/7 SOC with a 15-minute response SLA on critical issues.
Rather talk it through first? Call 703-336-9700, or see the other sessions.