Network Security

Next-Generation Firewall

FortiGate enterprise firewalls offer flexible deployments from the network edge to the core, data center, internal segment, and the Cloud. FortiGate enterprise firewalls leverages purpose-built security processors (SPUs) that delivers scalable performance of advanced security services like Threat Protection, SSL inspection, and ultra-low latency for protecting internal segments and mission critical environments.

FortiGate NGFW provides automated visibility into cloud applications, IoT devices and automatically discovers end to end topology view of the enterprise network. FortiGate is a core part of security fabric and validated security protect the enterprise network from known and unknown attacks.

Secure SD-WAN

FortiGate SD-WAN transforms branches to increase productivity and application performance without compromising on security.  With the help of application steering, business-critical applications are always given priority.  Granular WAN patch information is collected to automatically fail over to the best available WAN link. A centralized controller with a single pane of glass simplifies management and monitoring, allowing enterprises to quickly provision branches and scale easily.  FortiGate SD-WAN has been adopted worldwide in industries as diverse as finance, retail, manufacturing and customer service.

IPS

Zero-day, advanced targeted attacks, ransomware, polymorphic malware and distributed denial-of-service attacks all require sophisticated detection engines not available in traditional standalone IPS or in most firewalls. FortiGate IPS includes multiple inspection engines, threat intelligence feeds and advanced threat protection options to defend against these unknown threats. Packaged in powerful FortiGate platforms (hardware, virtual, cloud) with advanced analytics and workflows through FortiAnalyzer, FortiGate IPS is a cost-effective network security solution to feed incident response needs in your SOC.

Crypto VPNs

Organizations select FortiGate scalable and high-performance Crypto VPNs to protect users from man-in-the-middle attacks and ultimately data from breaches that can occur while high-speed data is in motion. Fortinet VPN technology provides secure communications across the Internet between multiple networks and endpoints, through both IPsec and Secure Socket Layer (SSL) technologies, leveraging FortiASIC hardware acceleration to provide high-performance communications and data privacy.

Secure Web Gateway

Fortinet Secure Web Gateway defends users from internet-borne threats and helps enterprises enforce policy compliance for internet applications.

With FortiGate SWG, you can deploy industry-leading Fortinet Next Generation Firewalls as a proxy.  FortiGate SWG consolidates NGFW and SWG services, helping enterprises manage their network security solution with ease.  It supports all proxy deployment modes, and uses multiple detection techniques such as web filtering, DNS filtering, data loss prevention, antivirus, intrusion prevention and advanced threat protection to protect employees from internet threats.  FortiGate SWG is best suited for enterprises looking to consolidate network security services and optimize the workload of security teams.

Management & Reporting

Fortinet has purpose-built NOC-SOC into central security management products. This NOC-SOC approach simplifies security management and reporting both during initial deployment as well as with ongoing adjustments to keep Fortinet’s Security Fabric tuned to the optimal security posture. Three products – FortiAnalyzer, FortiManager and FortiCloud – are part of NOC-SOC-based central security management and reporting.

Threat Detection & Prevention

Sandbox

Today’s threats are increasingly sophisticated and often bypass traditional malware security by masking their malicious activity. A sandbox augments your security architecture by validating threats in a separate, secure environment. FortiSandbox offers a powerful combination of advanced detection, automated mitigation, actionable insight, and flexible deployment to stop targeted attacks and subsequent data loss. It’s also a key component of our Advanced Threat Protection solution.

FortiSIEM

Security management only gets more complex. Endpoints, IoT, Infrastructure, Security Tools, Applications, VM’s and Cloud – the number of things you need to secure and monitor grows constantly. FortiSIEM – Fortinet’s Multivendor Security Incident and Events Management solution brings it all together. Visibility, Correlation, Automated Response and Remediation in a single, scalable solution. Using a Business Services view, the complexity of managing network and security operations is reduced, freeing resources, improving breach detection. Worldwide 80% of breaches go undetected because of skills shortage and event information ‘noise’. FortiSIEM provides the cross correlation, applies machine learning and UEBA to improve response, to stop breaches before they occur.

Infrastructure Protection

Endpoint Protection

FortiClient is more than advanced endpoint protection. As an integrated agent, FortiClient contains three key modules: Fabric Agent for security Fabric connectivity, the endpoint security modules, and the secure remote access modules. Fabric Agent shares endpoint telemetry with the Security Fabric and delivers broad endpoint visibility, compliance control, and vulnerability management. It provides advanced endpoint protection with pattern-based anti-malware, behavior-based exploit protection, web-filtering, and an application firewall. FortiClient natively integrates with FortiSandbox to detect zero-day threats and custom malware. FortiClient also provides secure remote access with built-in VPN, single-sign-on, and two-factor authentication for added security.

Wireless

The challenges associated with enterprise class Wi-Fi security continue to grow.  With BYOD, a highly mobile workforce, and now IoT devices being brought into the enterprise space, it’s critical for IT organizations to manage their access while also dealing with evolving security threats. Fortinet offers a variety of wireless solutions, from management integrated into a FortiGate to dedicated WLAN controllers to ensure every user has the right solution for their network needs.

Switching

Fortinet’s Ethernet switches can be managed standalone or integrate directly into the Fortinet Security Fabric via the FortiLink protocol. FortiLink is a key supporting technology of the FortiSwitch, that enable its ports to become extensions of the FortiGate security appliance. When connected via FortiLink the security polices of the FortiSwitch can mirror the FortiGate making Firewall interfaces and Switch ports equally secure. Centralized management through the FortiGate simplifies deployment and provisioning of FortiSwitch with no touch auto-discovery, one click VLAN and security policy assignment. With an integrated access layer, the FortiGate provides consolidated visibility and reporting easing management and troubleshooting. Lastly, FortiLink enables stacking of up to 300 switches per FortiGate, depending on the model. All of these features are included and have no licensing fee.

Email Security

Fortinet’s Ethernet switches can be managed standalone or integrate directly into the Fortinet Security Fabric via the FortiLink protocol. FortiLink is a key supporting technology of the FortiSwitch, that enable its ports to become extensions of the FortiGate security appliance. When connected via FortiLink the security polices of the FortiSwitch can mirror the FortiGate making Firewall interfaces and Switch ports equally secure. Centralized management through the FortiGate simplifies deployment and provisioning of FortiSwitch with no touch auto-discovery, one click VLAN and security policy assignment. With an integrated access layer, the FortiGate provides consolidated visibility and reporting easing management and troubleshooting. Lastly, FortiLink enables stacking of up to 300 switches per FortiGate, depending on the model. All of these features are included and have no licensing fee.