Fortinet Now Integrates with AWS CloudFormation Registry and CLI to Enhance Cloud Security

By Ali Bidabadi | November 18, 2019

Many organizations have adopted Infrastructure as Code (IaC) methodologies and are now leveraging IaC tools to create and manage complex deployments that would otherwise take days or weeks to implement. With the REST APIs and integration with popular IaC tools such as Terraform, Fortinet has enabled organizations to automate the provisioning of security services to various virtualization and cloud platforms.

Recently, Fortinet became an official Terraform provider, allowing users to directly create and manage Fortinet-specific resources, such as system interfaces and firewall policies. Additionally, Fortinet has taken advantage of cloud native IaC tools such as AWS CloudFormation service to build solutions, including CloudFormation templates, that allow automatic deployment of its products along with the required AWS resources. While those ready-made templates automate provisioning of the AWS resources, organizations often need to rely on AWS services and constructs such as User Data and AWS Lambda Function to create third-party specific resources.

Now, with the integration of its newly-launched AWS CloudFormation third-party resource provider framework, Fortinet has taken its IaC and AWS automation offerings to the next level.

What is the AWS CloudFormation Third-Party Resource Provider Framework?

Today, if customers want to automate the configuration of their third-party security services running in AWS accounts, they either rely on User Data and custom scripts to push the configuration during the bootstrapping process, also known as day 0. Or, they need to leverage services such as AWS Lambda Function to interact with third-party resources via an API at some later stage of the application lifecycle.

For example, in order to create a new firewall admin account, after the VM boots up, AWS users would have to run a custom script. However, the recent enhancement to the AWS CloudFormation service allows vendors to model and automate third-party resources, such as a FortiGate admin account, by enabling them as resource providers for the CloudFormation service.

Resource providers are treated as first-class citizens within CloudFormation. One can use CloudFormation capabilities to create, provision, and manage these resources in a safe and repeatable manner, just as you would any AWS resource. Using resource providers for third-party resources provides users a way to reliably manage these resources using a single tool, without having to resort to error-prone and time-consuming methods like manual configuration or custom scripts. An end user would only need to declare these resources in the same manner as they would declare native AWS resources such as EC2 instances.

Third-Party Vendors Can Build Resource Providers Within CloudFormation

A resource provider includes a resource type specification, as well as handlers that control API interactions with the underlying AWS or third-party services. There are three major steps in developing a resource provider:

Model – create and validate a schema that serves as the definition of a resource. The first step in creating a custom resource is modeling that resource, which involves generating a schema that defines the resource, its properties, and their attributes.

Develop – add logic that controls what happens to the resource at each stage in its lifecycle. Once a resource type is modeled its schema is validated, the next step is to develop the resource which consists of implementing “Create”, “Read”, “Update”, and “Delete” handlers.

Register – register the resource provider with CloudFormation in order to make it available for use in CloudFormation templates. Once registered, custom resource providers can be viewed in the CloudFormation registry section of the AWS CloudFormation console.

Additionally, runtime logging via AWS CloudWatch can be enabled. This enables the accessing of resource logs to help diagnose and debug any issues.

Fortinet is Now an Official AWS CloudFormation Provider

As automation has long been one of the main pillars of the Fortinet cloud security strategy, we have now integrated our offerings with the AWS CloudFormation third-party resource provider framework.  The goal is to provide organizations with a seamless experience in automating the creation of Fortinet-specific resources such as system interfaces, and admin accounts.

CRUD handlers for each of these resources have also been implemented to ensure full support for every stage of the lifecycle of a resource. For example, “Create” stack applied to a CloudFormation template that includes a FortiGate (Fortinet Next Generation Firewall) DNS System as a declared resource, will invoke the create handler of that resource. Similarly, “Update” stack operation will result in the invocation of the update handler of the System DNS resource provider.

This new integration simplifies many use cases that have historically relied on manual and/or custom invocation of third-party resources. In the first release, creating three FortiGate resources within the CloudFormation will be supported. These resources are System Interface, System DNS, and Admin Account.

For example, customers can now take advantage of the Fortinet “Admin Account” resource provider to directly create admin accounts on a FortiGate. In the future we plan to support creating Tunnel interfaces on a FortiGate to provision VPN IPsec tunnels between FortiGate devices and AWS-managed services such as the AWS Transit Gateway. Without this resource provider, users would have to write error-prone User Data scripts or custom Lambda Functions triggered by certain events in their AWS accounts.

How This Offering Helps Your Organization

Fortinet’s CloudFormation resource provider support provides organizations with a seamless way to create, update, and delete firewall resources in AWS accounts. It abstracts away the underlying complexity, thereby allowing customers to deploy Fortinet firewall resources in the same way as they would deploy any native AWS resource.

Read about how Fortinet integrates with HashiCorp Terraform.

Visit our AWS resources on GitHub here and read this post on the AWS blog for more information on this integration.

Learn more about how Fortinet’s multi-cloud solutions provide visibility and control across cloud infrastructures to secure applications and connectivity. 

Source:
https://www.fortinet.com/blog/business-and-technology/fortinet-now-integrates-with-aws-cloud-formation.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+fortinet%2Fblogs+%28Fortinet+All+Blogs%29

Going into 5G, don't forget security

Allan Tan

 

May 10, 2019

telecomasia.net

sharePrintEmail

For years telco revenues as measured in Average Revenue Per User (ARPU) have been on a decline. As consumers and business acquire a taste for broadband and mobile broadband connectivity, operators are pressured to offer bigger and faster pipes, and to do so more cheaply lest competition from OTTs and mobile virtual network operators (MVNO) take home the bacon. We have reached a point where telcos are finding themselves becoming almost exclusively connectivity vendors– what some call “the pipe business”.

As Gunter Reiss (pictured), vice president of strategy at A10 Networks, tells it, that a lot of operators want to get out of being labeled a telco – a connectivity provider.

He cites the comment made by Johan Johan Wibergh, chief technology officer at Vodafone: “We want to become a technology provider. We want to become a service provider to the enterprise community.”

Based on what we understand about 5G technology, this may just be what the industry is praying for. Some believe that 5G features like network splicing, enhanced mobile broadband, ultra reliable low latency communications and massive machine type communications, are all geared towards the performance requirements of enterprises.

To date, a number of telcos in Asia and around the world are making significant investments in 5G with the intent to target enterprise opportunities. One area that has always lagged when it comes to understanding and planning for is around security.

At the 2019 Total Security Conference, a chief security officer speaking at a panel noted that “if you want to stay secure from cyber threat, then stay out of the internet.” However, the reality is that internet has become so embedded into everyday living [and business] that it would be a business suicide if any business stays out of it.

So for telcos, the challenge is building infrastructure, including 5G-based connectivity solutions, that appeal to the risk appetite of their enterprise customers.

In an exclusive interview with Telecom Asia, Reiss opens up to the threats and opportunities operators must face as they rise to the 5G challenge.

Given that operators will need to invest more around security as part of their 5G rollout. How do they monetize in these investments?

Gunter Reiss: There are two ways: 

First, every operator has to protect their own infrastructure because the system is their bread and butter.

Secondly, we see a lot of operators today starting to offer a managed security services to enterprises. Cloud providers are doing the same thing.

Instead of buying a DDoS appliance directly for your premises, you want a DDoS service – literally just buying it as part of your connectivity, or part of any of the other specific IoT services you would buy from a mobile operator. You would add the security services on top of it.

This is why service providers and mobile operators in the 5G world will finally become a true service providers and partner to the enterprise community.

This is how they will monetize their investments, including security.

As operators near 5G rollout, what remains their biggest concern?

Gunter Reiss: That would be – “How can we protect our mobile infrastructure?”

It's the same as what they have now with 4G – just with 5G, they realize that they have more points to protect. If you think about it in 4G it was the GI-LAN infrastructure they just needed to protect – and it doesn’t scale. Scale requirements just weren’t there.

But what we see now, they have to protect the peer points. They have to protect the mobile edge – this is what they are building the architecture for. That's the conversations we have with them.

There is another aspect – our latest DDoS weapons report revealed more than 23.5 million DDoS weapons all around the world. The largest number is more than 6 million in China, followed by 3 million in the US. And as you go into each country, we can actually highlight how many DDoS weapons there are. This is important for operators because this is proactive defense of your infrastructure.

So that's basically how we help these operators to protect the infrastructure. And again, it doesn't really matter if they're on 4G right now. They are realizing that they have to protect the infrastructure. They have to start planning, investing and allocating budgets for the protection of the mobile infrastructure along the journey to 5G.

You don't want to wait and suddenly say, “Now that I’m launching 5G, it’s time for me to adjust my security architecture or infrastructure, and how I deal with [connectivity] suppliers.”

As operators look to harness the non-traditional business opportunities presented by 5G, including areas like Smart Cities, what should I be looking at as an operator?

Gunter Reiss: What you should look at is in order to support – ultimately as an operator – you need to increase your ARPU, you want to sell more services.

Now, particularly then with 5G, you need to build relationships with the various industries from smart cities, to governments, to hospitals, to whatever industry it is. And, of course, in that way, industry explosion of the IoT endpoints – depending on what data you trust – up to 35 billion over the next years.

When you take all that into consideration, you have to protect your infrastructure all the way, obviously, to where the IoT endpoints get connected, and as a consequence you need a comprehensive security architecture.

And the only way to really be able to manage the scale requirements is with Intelligent Automation.

And this is where you leverage machine learning algorithms, any AI type of capabilities and analytics to get more visibility about your network and your application environment in order to really be able to secure your infrastructure. The complexity is just getting that much larger than what these operators are dealing with today.

This is basically the straightforward message I try to explain to them.

It's not about how cyberattacks will come through the internet anymore. They come through those peering partners, and they come directly from the IoT devices which get weaponized from the phones. So, you have to have protection right away at the mobile edge.

And for this, you need to leverage automation capabilities.

As activities around 5G accelerate in 2019, what's your expectation?

Gunter Reiss: 5G is still in its early stage. I think we will see over the next 12 months a lot more operators commercially launching 5G services with various used-cases.

And I would say that at least within this year, we’ll see between 20 and 30 mobile operators launching new commercial services around the world.

But 2020 is going to be, I think, that big push where more operators will come with 5G commercial services. And this, from an A10 perspective, is the opportunity. We are working with a lot of them already right now under 4G virtualization developments and securing the 4G virtualized and NFV type of environment.

Now that they are future proof and ready, from a scale perspective, to take that all the way into this full 5G architecture.

As I mentioned before, for some time, we will see a hybrid type of 4G / 5G network architecture. Then some of those early adopters will go out with the 5G standalone, network architecture.

Even if the operator is not launching 5G yet in 2019, they're already working and starting to work with us on their plans towards 5G and how to protect that infrastructure. This is why we are super thrilled and excited about it.

資料來源:
https://www.telecomasia.net/content/going-5g-dont-forget-security?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+tarss+%28Telecom+Asia+RSS%29

Fortinet Doubles Down on Mobile Core Security and Managed Security Services at Mobile World Congress

he Mobile Security and Managed Security Services Zone area that we’re setting in up in our booth at this year’s Mobile World Congress (MWC) places Fortinet at the center of one of the most innovation-intensive sectors of Communication Service Providers (CSPs). The dawning era of 5G is about much more than speeds and availability. Rather, it opens a new era of much richer applications, services, and user experience. While it would be great to have the specifics when it comes to what will be possible, these are still developing—namely, we must remain vague in terms of what 5G will ultimately deliver because it is impossible to predict what will emerge from it. In short, when it comes to 5G, the future is unwritten.

Although 5G standards are still being defined and wide-scale commercial deployments are not expected before 2020, one safe bet is that paving the way to the market acceptance and success of 5G services will require a step-function improvement in security safeguards. Any perception that 5G rests on uncertain security foundations will eat away at user confidence and expose system operators and service providers to disappointing investment returns, not to mention legal and regulatory repercussions.

So, what are some of the 5G security challenges? Following are some of the most prevalent:

• How to secure an agile and virtual mobile core with 5G.

• How to integrate security services in the innovative new services offered with 5G such as Mobile Edge Computing (MEC) and network slicing. 

• How to provide a complete ecosystem of security services to generate new revenue, create competitive advantage, and increase customer loyalty.

5G holds the promise for increased bandwidth, multitenant-edge computing, and a multitude of innovative services, that will likely empower immersive virtual reality, autonomous ground and air vehicles, machine learning, and artificial intelligence. To successfully launch and maintain customer confidence in these new capabilities, 5G infrastructures will require security that is powerful, scalable, integrated, and agile.

Digital transformation at the CSP and their customers also amplifies the role of managed security service providers CSPs and MSSPs in safeguarding organizations infrastructures, applications,  and services. The complexity and dynamic nature of the threat landscape, the pace of adversary innovation, and the global security practitioner shortage provide CSPs and MSSPs an opportunity to provide more managed security services that add value and generate savings for their customers while enabling their digital transformation. To do so, MSSPs need to leverage a security-fabric infrastructure that enables the provisioning of a wider range of integrated and automated managed security services in a variety of delivery and consumption modes to satisfy their customers’ requirements.

In addition to engaging visitors to the Fortinet booth in productive conversations about the future of mobile core security and managed security services, we’re planning practical demonstrations of some core capabilities such as:

·LTE and 5G mobile core security

·Security service chaining

·Ways in which MSSPs can leverage the Fortinet Security Fabric as part of their services-delivery framework

We also plan formal presentations in our booth theater on topics focused on delivering services for next-generation mobile networks:

Security in LTE/5G Mobile Core

Synopsis: The mobile core network requires high performance security solutions to ensure service level attainment without compromising security. With the move to 5G and the virtualization of mobile infrastructure, bandwidth and data volumes will grow, and new services and technologies will take hold. Security must meet all these changes and provide an answer in this new environment. This presentation will briefly touch on the challenges and solutions in securing the mobile core.

Security Services for Mobile Edge Computing

Synopsis: Enabled by 5G and driven by the digital economic/social transformation, MEC will drive innovation in many industries and market segments. The promise of the mobile edge to provide multitenant, high bandwidth and low latency computing, cloud services, machine learning and more, can fully blossom only when security services are part of this environment. This presentation will look at different security services that cellular service providers must take into effect when delivering MEC.

The ABCs of Delivering Security as a Service (SECaaS)

Synopsis: The growing complexity and sophistication of threats and threat actors, stringent new government regulations, and a growing security practitioner shortage, pose significant challenges to organizations in achieving their security and posture goals. Organizations looking to CSPs/MSSPs to provide a growing number of security services, value-add, and knowledge, all in an integrated and automated fashion to meet needs for agility and security. This presentation will describe basic building blocks for delivering a powerful and competitive security-as-a-service (SECaaS) to enterprises and organizations of all sizes.

These presentations will take place once daily over the four main days of the Congress, February 26, 27, 28 and March 1, in the Fortinet Booth, Hall 7, Stand 91 at the Congress. For full details on Fortinet’s appearance at the 2018 Mobile World Congress, visit our webpage dedicated to this subject. You can also use this site to review to see our presentation schedule and set up meetings with Fortinet representatives. The Mobile World Congress website contains, of course, official information on the event itself.

Barcelona is one of the great cities of the world and should be on everyone’s “bucket list.” By visiting Fortinet at this year’s Mobile World Congress, you can combine business, pleasure, and cultural enrichment. And who can beat that kind of value proposition?

Source:
https://www.fortinet.com/blog/business-and-technology/fortinet-doubles-down-on-mobile-core-security-and-managed-security-services-at-mobile-world-congress.html

Financial Services Cybersecurity: Addressing the Horizontal Attack Surface

The financial services industry is a prime target for cybercriminals, yet significant security gaps persist. PwC’s Global State of Information Security® Survey 2017 notes that “41 percent of financial services respondents ranked assessment of security protocols and standards of third-party vendors as the top challenge to information security efforts”.

This is despite the fact that cybersecurity requirements for financial institutions are detailed and specific. Almost all financial services organizations are subject to the Gramm-Leach-Bliley Act (GLBA), requiring information security training, specific policies, scanning and other activities. The Payment Card Industry Data Security Standard (PCI DSS) applies only to companies that process card payments, and the Dodd-Frank Wall Street Reform and Consumer Protection Act was designed to protect consumer financial data. And now, the new General Data Protection Regulation (GDPR) adds another layer of privacy protection by imposing controls on any business that collects the personal data of EU citizens, including imposing the right of individuals to have their data wiped from systems. These new regulations are combined with severe financial penalties for failure to comply. The GDPR takes effect on May 25, 2018.

With industry-specific compliance requirements driving security spending and deployment, it’s natural to assume that best practices for securing access to sensitive data are different from vertical to vertical. However, that assumption may be changing. 

According to findings from Fortinet’s Global Threat Landscape report, much of today’s attack surface is shared across industries. This article describes today’s horizontal attack surface and shares best practices on how security leaders can mitigate network threats.

Cyber Crime Matures and Expands

Financial services organizations are adopting virtualization technology such as virtual private datacenters. They’re moving to the cloud. They’re adopting more and more IoT devices. More smart devices are connecting to the network. As they do so, the threat landscape continues to expand. The upshot is an increased overall potential of attack vectors that adversaries can take advantage of.

As this infrastructure broadens, financial services organizations are losing visibility and control into that infrastructure. Cyber criminals will use these blind spots to their advantage, and their success rate in penetrating the network will be much higher. At the same time, the cyber crime ecosystem is maturing. Crime-as-a-Service infrastructures enable adversaries to operate on a global scale at light speed. Malicious actors are using automation and sophisticated hacking tools that will increase the attack volume.

Three Key Trends

One report found that the median ratio of HTTPS (encrypted) to HTTP (non-encrypted) traffic hit a high mark of nearly 55 percent. This means that a higher percentage of communications are now encrypted. From a privacy perspective, this is great news. However, from a security perspective, organizations – including those in the financial services industry – don’t have visibility into that particular communication channel, which means it could be malicious. Adding to the problem, adversaries are using encrypted communications more and more as well, using what was created as a security measure to hide their activity.  

Encryption is the first important trend discovered in the latest report. The second is an increase in cloud applications. The median number of cloud applications used per organization was 62, which is roughly one-third of all applications detected. As financial services organizations use more and more of these cloud apps, their data is going to reside in the cloud. Again, this creates a loss of visibility into what’s happening to that data.  

The third trend, gleaned from cluster analysis, is that much of the attack surface is shared across all industries. With the exceptions of education and telco, the rest of the industries studied share that same attack surface. The analysis revealed that many of the same attack vectors bridged all regions as well as all industries. This makes it much easier for cyber criminals to leverage their automated tools across the entire attack surface that spans most industries than they would if the attack surfaces were different. The threat problem is truly a global as well as a horizontal problem now.

Best Practices

In light of attack capabilities that transcend traditional boundaries of region and industry, there are several best practices that will help financial services organizations mitigate network threats.

First, organizations must have visibility into the assets that they are responsible for securing. This involves reducing the attack surface, ensuring good vulnerability and patch management processes are in place, and—equally as important—understanding how assets are communicating with each other. It also involves situational awareness: a high degree of visibility into the network paired with a high level of understanding of the threats that the organization is facing.

Second, create a strategy for combatting the automated cybercrime ecosystem. Humans cannot operate at the speed and scale required to overcome automated threats, so organizations must fight automation with automation. That means getting technology controls working together and communicating across all attack vectors.

Finally, organizations will benefit from building relationships with peers outside of the region or the industry they operate in. Threat intelligence and successful mitigation tactics can be exchanged for the good of all.

Evolving the Security Landscape

The financial services industry today faces the same cyber threats as almost every other industry – the attack surface has truly become horizontal. Visibility and control over today’s infrastructures are diminishing as the number of potential attack vectors continues to grow across the expanded network landscape. This improves criminals’ chances of success, but IT finserv professionals can fight back with knowledge of the trends affecting the network and the implementation of sound practices – particularly automation. Going back to basics and expanding relationships beyond traditional boundaries will help create a more secure network.

Original article published in Banking.com and can be found here.

Read more on how to best prepare your organization for the General Data Protection Regulation (GDPR).

by Bill Hogan  |  Nov 03, 2017  |  Filed in: Industry Trends

資料來源:
https://blog.fortinet.com/2017/11/03/financial-services-cybersecurity-addressing-the-horizontal-attack-surface

Industry Leading Technology Partners Adopt Fortinet’s Open Security Fabric

Fortinet Delivers on Commitment to Open Ecosystem and Expands Actionable Threat Intelligence Across Multi-Vendor Solutions

SUNNYVALE, Calif. – September 26, 2016 –

John Maddison, senior vice president products and solutions, Fortinet
“It’s clear that isolated security devices don’t solve today’s cybersecurity challenges, companies need something different. They want integrated security, from IoT to the cloud, with actionable analytics across their multi-vendor networking and security solutions, all delivered through a single pane of glass view. Fortinet’s Security Fabric has delivered on this technology vision with a complete rethinking of security for customers to implement more strategic approaches, such as internal segmentation or automated universal policy to stay ahead of the threat landscape. By opening the Security Fabric to our partner ecosystem we accelerate our customers’ transition to integrated security strategies to address the full spectrum of challenges across the attack lifecycle.”

News Summary
Fortinet® (NASDAQ: FTNT), the global leader in high-performance cybersecurity solutions, today delivers on the Open attribute of the Fortinet Security Fabric through its new Fabric-Ready Partner Program and integration of FortiSIEM, providing threat intelligence visibility across multi-vendor cybersecurity solutions.

• The Fabric-Ready Partner Program builds on Fortinet’s robust ecosystem of technology alliances by opening the functionality of the Fortinet Security Fabric to complementary solutions. Partners in this program have validated technology integration with the Security Fabric, have committed to sharing roadmaps for consistent interoperability, and will benefit from joint go-to-market initiatives.
   
• Initial Fabric-Ready partners include Brocade, Carbon Black, Centrify, Nozomi Networks, Palerra, Pulse Secure, Qualys, Inc. (NASDAQ: QLYS),Tufin, UBIqube, VeriSign, Inc., WhiteHat Security and Ziften.
   
• Further extending the Security Fabric to multi-vendor environments, FortiSIEM, Fortinet’s Security Information and Event Management (SIEM) solution delivers a single pane of glass Security and Network Operations Center to provide complete visibility and actionable intelligence across the entire infrastructure.
   
• Extending the functionality and intelligence of the Fortinet Security Fabric with an open and cooperative ecosystem of partner and vendor solutions, helps customers avoid the rip and replace of existing infrastructure and consolidate, simplify and integrate their security posture.
   
• The open Security Fabric behaves as a single entity, offering the performance, visibility and automation required for intelligent end-to-end segmentation, from IoT to the cloud, and across physical and virtual environments.

Fortinet Extends Open, Integrated Ecosystem of Security Solutions
The Fortinet Fabric-Ready Partner Program demonstrates Fortinet’s commitment to an open, integrated Security Fabric, allowing enterprises the flexibility to deploy Fortinet solutions alongside their existing or new security technologies for truly integrated protection. The program brings together leading network security solutions to deliver pre-integrated, end-to-end offerings ready for deployment, reducing technical support burden and costs for enterprise customers.

Most organizations have deployed security devices from multiple vendors inside their networks. A Security Fabric lets customers maximize these existing investments with integration that goes beyond simply allowing third-party solutions to collect or redirect data and traffic. Partner solutions that integrate with the Fortinet Security Fabric are able to actively collect and share threat information and mitigation instructions in order to improve intelligence, enhance overall awareness, and broaden threat response from end-to-end.

Fortinet has developed a series of well-defined, open APIs (Application Programming Interfaces) that allow technology partners to become part of the Fortinet Security Fabric at a number of critical integration points, including at the hypervisor, the SDN orchestration controller, in the cloud, in the sandbox to detect zero-day threats, and through logging and policy management.

As part of the program, partners have undergone solution validation with an ongoing commitment to continued interoperability and roadmap reviews. Additionally, Fabric-Ready partners will benefit from joint marketing and go-to-market initiatives with Fortinet. The following new technology partners have joined the Fabric-Ready Program across its various API integration points:

• Cloud: Palerra, Verisign
• Endpoint & IoT: Carbon Black, Nozomi Networks, Pulse Secure, Ziften
• Management: Centrify, Tufin
• SDN orchestration: UBIqube
• Virtualization: Brocade
• Vulnerability Management: Qualys, WhiteHat Security

FortiSIEM Expands Visibility and Intelligence of Security Fabric to Multi-Vendor Solutions
Further delivering on Fortinet’s commitment to support multi-vendor security environments, FortiSIEM provides a single source of visibility and actionable intelligence across the entire Security Fabric, Fabric-Ready Partner solutions and more than one hundred additional third-party networking and security solutions.

FortiSIEM delivers capabilities unmatched by traditional SIEM solutions currently available and is the only solution that provides a single pane of glass for both Security and Network Operations Center analytics and features. FortiSIEM provides all of the traditional SIEM features defined by Gartner and expands on those capabilities with patented real-time asset discovery and analytics, rapid integration, multi-tenant architectures, and effortless architecture scale-out.

FortiSIEM is the only solution capable of delivering the actionable threat intelligence and complete visibility needed to manage and defend enterprise infrastructures against today’s exponentially expanding threat landscape.

Supporting Quote
“Enterprises today are constantly looking for the most effective cybersecurity solutions that address their evolving network requirements brought on by mobility, cloud and IoT. Most have solutions from multiple security vendors to safeguard their various IT elements, creating massive management and control challenges. As more enterprises move towards these hybrid IT environments, having a security fabric that can scale from IoT to cloud networks, and seamlessly collaborate with an open ecosystem of leading solutions, is critical for a truly integrated security strategy.” 
- Zeus Kerravala, principal analyst, ZK Research

Additional Resources

• Blog: Innovation Insights: Defining Open with the Fortinet Security Fabric
• Blog: Innovation Insights: Security Today’s Evolving IT Requirements Requires Three Things
• Blog: Going “Open” with the Fortinet Fabric-Ready Partner Program
• Learn more about the Fortinet Security Fabric.
• Follow Fortinet on Twitter, LinkedIn and Facebook. 
   

FABRIC-READY PARTNERS RESPOND TO THE NEW PROGRAM

“Today, Brocade enables service providers to build networks that are open, programmable and automated so they can deploy new services that strengthen their competitive advantage while reducing costs. Our collaboration with Fortinet combines the Brocade Vyatta® Network OS with the Fortinet Security Fabric to provide customers with the highest levels of security and threat intelligence for carrier-scale deployments.”
– Michael Bushong, vice president of product management, Software Networking, Brocade 

“The only way to win is through collaboration. Customers need to be able to see and act upon a complete picture, not just pieces of the puzzle, that weaves together insight and action. Together, Fortinet and Carbon Black are providing customers with a 360° degree view of cyber activity, from network to endpoint, and accelerating response times with a new automated protection solution designed for today’s threat landscape.”
– Tom Barsi, senior vice president of Business Development, Carbon Black

“Mobile devices and cloud applications have transformed the way that users access business data, creating an explosion of identities that need to be managed and controlled within the enterprise network. Compromised credentials continue to be a leading attack vector across cloud, mobile and on-premises IT infrastructure. Extending our partnership with Fortinet as part of its Fabric-Ready Partner Program further integrates and streamlines the end-to-end security, access control and device management for our joint customers’ hybrid IT environments.” 
– Ben Rice, vice president of Business Development, Centrify

“The convergence of IT and critical infrastructure requires robust security solutions that can scale to accommodate the complex interactions in these environments. By combining our non-intrusive anomaly detection, real-time visibility and advanced monitoring solutions with Fortinet’s advanced security and network segmentation capabilities, the partnership brings seamless protection to critical infrastructures worldwide.”
- Andrea Carcano, founder and CEO, Nozomi Networks

“While cloud computing brings a new level of efficiency and agility to an organization’s IT infrastructure, it also brings significant risk from both inside and outside of the enterprise. This is no small matter. Lapses in compliance and loss of company and customer data come with huge penalties. Partnering with Fortinet as part of it’s Security Fabric-Ready Program provides a validated joint offering to our customers, one that enhances cloud security and automation with integrated threat intelligence across the entire security lifecycle, from Cloud infrastructure to SaaS applications.” 
- Rohit Gupta, chief executive officer, Palerra

“It's undeniable that the cloud is the future of enterprise IT, yet many have concerns regarding the migration from on-premise deployments to the cloud, securing users and devices containing sensitive data, and protecting applications. As a Fortinet Fabric-Ready partner, we are further extending our leading secure access solution by providing joint customers an integrated offering that comprehensively protects corporate infrastructure from unauthenticated access, attacks and breaches.”
- Prakash Mana, head of product management, Pulse Secure

“As more and more critical business applications move to the cloud, the borderless network perimeter creates new types of security, vulnerability and compliance challenges. Together, Fortinet and Qualys are providing an integrated solution to protect web applications from cyber attacks through automated scans and virtual patching, helping customers ensure that their business data is always safeguarded, from the data center to the cloud.” 
- Sumedh Thakar, chief product officer, Qualys

“Tufin provides industry-leading network security policy orchestration capabilities, enabling enterprises to centrally visualize, manage, and control security policies across hybrid cloud and physical network environments. Becoming a validated Fortinet Security Fabric Partner signals to our joint customers that we have developed an integrated offering to better manage network security, report on and automate changes made in the organization, and ensure continuous compliance across heterogeneous environments from a single console.”
- Pamela Cyr, senior vice president of Business Development, Tufin

“With the increase in sophisticated cyber threats, the ever growing attack surface and today’s cybersecurity labor shortage, more and more organizations are starting to transition their security to managed services. By integrating the UBIqube MSActivator™ NFV/SDN orchestration and management technology into the Fortinet Security Fabric, the joint offering gives enterprise and service provider customers a simple solution to be able to rapidly deploy, manage, and assure advanced security services at scale to meet their evolving requirements.” 
- Laton Palmer, senior vice president of Sales and Strategic Partnerships, UBIqube 

“The number of applications being used to access critical business data is increasing at a staggering rate, making the risk for application vulnerabilities on enterprise networks very high. As a Fortinet Fabric-Ready partner, we can now offer an integrated solution that scans applications for vulnerabilities with high accuracy, while also enabling dynamic virtual patching of critical web applications. This reduces the risk of exposure especially for hard-to-patch and dynamically changing applications that require extremely robust uptime.” 
- Michael Goldgof, vice president of Marketing, WhiteHat Security

“The demand for flexibility in where and how employees conduct business, coupled with the proliferation of a variety of endpoints, such as mobile phones, tablets and laptops in today’s business greatly increases the attack surface for sophisticated cyber threats. Attackers can breach these endpoints and often hide for months at a time, traversing through the network to high-value systems within the enterprise. As a Fortinet Fabric-Ready Partner, Ziften combines its comprehensive visibility and analytics to provide robust, real-time endpoint context with Fortinet’s industry-leading threat intelligence and security protection so joint customers can benefit from scalable, end-to-end security, regardless of the devices being used to consume business data.”
- Josh Applebaum, vice president of Product Strategy, Ziften 

文章出處: Fortinet Website
https://www.fortinet.com/corporate/about-us/news-events/press-releases/2016/industry-leading-technology-partners-adopt-fortinet-open-security-fabric.html

Fortinet Announces Acquisition of AccelOps

 

Dear Partner,   As part of our commitment to build on our foundation of innovation, extend our Security Fabric vision, and maximize the business opportunity with our partners, Fortinet today announced the acquisition of AccelOps. Below is an overview about this strategic announcement and what it means for our important partnership together.   Extending the Security Fabric With Advanced Analytics and Security Intelligence Across Physical, IoT, Cloud and Multi-vendor Networks 1.    AccelOps is known as a leading provider of network security monitoring and analytics solutions. This announcement further extends our recently announced Security Fabric to enhance network security visibility, security data analytics and threat intelligence across multi-vendor environments. 2.    Our mutual customers are grappling with a lack of a holistic view across the entire distributed, multi-vendor network and the growing quantity of threat information creates a big data security challenge. 3.    AccelOps’s Security Operations Center (SoC) and Network Operations Center (NoC) capabilities will power managed security service providers (MSSPs) and Fortinet Support Services, including a new subscription service called FortiCare 360°. 4.    This acquisition opens up the $2 billion SIEM market as a new opportunity for you along with Fortinet. It also helps broaden the security conversation to the C-suite, as SIEM technologies are often a central part of the CISO’s technology strategy.    You can read more about the announcement in our news release or blog.   Join in the conversation! We encourage you to engage with us on social media and share the news. You can find existing social content already online on our company social channels on Twitter and LinkedIn and Facebook.     Anne Bourgeois International Sr. Channel Director

 

 

www.fortinet.com

Contact: international_partners@fortinet.com

Follow Fortinet

905, Rue Albert Einstein, 06560 Valbonne Sophia Antipolis, France, Phone: +33 (0)4 89 87 00

You are receiving this communication because you are a Fortinet customer or partner or because you have agreed to receive information from us. If this is not the case and you do not want to receive any further communication from Fortinet, please click here to unsubscribe.

© Fortinet 2016 Terms of Service & Privacy Policy. Fortinet is a leading provider of network security appliances and the market leader in Unified Threat Management. Our Certifications, awards and customer references reflect our ongoing Innovation in this sector. © Fortinet 2016 Terms of Service Policy

 

資料來源：Fortinet

FORTINET公佈SECURITY FABRIC網安架構

提供無所不在與高調適性的網路安全  保護全球企業的物聯網與雲端網路

Fortinet的Security Fabric網安架構能解決最複雜的網路安全難題，
藉由各種廣泛具延展性的威脅防護機制，佈建一個無縫而有效的安全防護架構。

全球高效能網路安全領導廠商Fortinet® (NASDAQ: FTNT)，公佈其最新的網路安全架構Security Fabric（安全織網），它具備整合、協同和調適性，專為賦予全球企業分散式安全而設計，從物聯網和遠端設備，到架構核心和雲端，提供抵禦威脅的安全防護。

Fortinet創辦人、董事長暨執行長謝青表示，「數位化的普及持續重新定義著企業，而物聯網和雲端運算等技術趨勢，則讓現今的網路邊界愈來愈模糊。可惜的是，許多企業現在依賴的仍是幾十年前所發展的安全策略，這些舊策略已無法支援企業不斷加快的發展速度。」

謝青進一步指出，「Fortinet的Security Fabric和鬆散組合的管理層級平台不同，它能高度整合精巧的軟、硬體，讓解決方案彼此能直接溝通，統一快速地針對威脅做出反應。Fortinet致力於提供安全防護沒有任何妥協，藉由Security Fabric，Fortinet將是業界唯一能為漸增的受攻擊面，提供無縫隙的安全防護。同時，不論現在或是未來，都能為無邊界網路所持續增加的效能要求，提供更強大的能力。」

新聞摘要
•        Fortinet同時也推出最新的FortiGate 6000E和2000E系列的企業防火牆，內建新世代的FortiASIC CP6內容處理器，能在整個Fabric架構中提供前所未有的網路安全效能。

•        Fortinet先進威脅防護 (ATP; Advanced Threat Protection) 框架所強化的新功能，可動態產生本地端的威脅情資，搭配新的FortiGuard全球威脅情報的服務，能自動針對威脅做出反應。

•        為求實現Security Fabric整合與開放的承諾，Fortinet宣佈與Carbon Black安全平台最新的技術聯盟，進一步加強防護，對抗現今最先進而持續性的攻擊。

猶如織布的安全防護網　對數位經濟的企業創新非常重要
相較以往，現今的數位經濟連結了更多的使用者、設備、應用程式和資料，也藉此展現企業的價值。數十億個具備IP但無使用者的新物聯網設備，將會透過有線、無線的存取點傳送大量的資料，它們會穿越公共和私有的網路，也會越過傳統和雲端的架構。要在新數位經濟時代追求成功，企業組織必須建立緊密協調的安全策略，能夠監看和管理通過整個無邊界網路的資料，而且不能影響敏捷性和效能。

Fortinet的安全織網Security Fabric　提供安全沒有妥協
為了因應數位經濟所帶來的挑戰，以及緊隨不斷發展的企業IT基礎建設，Fortinet的Security Fabric將傳統上分別獨立的系統，整合成為單一的架構，並具備五項重要且相互依賴的特性：延展性、感知、安全、隨時可用和開放性。

現今網絡不分邊界，為了偵測當中的威脅，Security Fabric不僅要動態地升級以滿足流量和效能需求，更需橫向升級，帶來無縫且無所不在的防護。Fortinet的安全技術解決方案領先業界，涵蓋所有的基礎建設，包括有線和無線網絡、終端用戶及物聯網裝置、存取層、公共與混合雲端模式、軟體定義網絡(SDN)及虛擬化。採用硬體加速的FortiASIC處理器和內嵌安全防護的網路設備（如虛擬及雲端個體）等高階技術，能確保網路功能、效能和延展性不受其防護方案本身所損害。

Fortinet的延展性擴及整個基礎建設，這為Security Fabric的第二個重要特質－感知性，奠下了基礎。將解決方案整合的安全織網，以單一實體的方式運作，能帶來全面的感知性，知曉進出網路的裝置、用戶、內容和資料，也能洞悉流量模式。這不僅降低複雜性和成本，同時改善管理效益，在實行新功能與創新安全策略時更為方便，例如抵禦進階威脅的點對點隔離等防護措施。

現今的威脅環境不斷演變，所牽涉的安全性正受基礎建設整體的可見度所影響。全球最為廣泛採用的安全作業系統FortiOS，則是Fortinet Security Fabric的單一控制視窗。Fortinet的進階威脅防護(ATP)框架等技術，能深入檢查流量，動態產生本地端的威脅情報，並將資料傳送至安全防護中心FortiGuard Labs，自動即時更新威脅情資，並派送至所有系統。這些廣泛的情報與精密、可延展的快速分析結合，打造了隨時可用的安全架構。只要威脅出現，這個架構就能迅速偵測，立即抑制。

Security Fabric的設計也能與第三方解決方案整合，形成廣大的合作體系，確保企業客戶能充份發揮現有基礎建設和資安的投資。Fortinet與全球聯盟合作夥伴及整個業界緊密合作，開發開放的APIs，貫穿整條安全織網，讓企業能彈性配置解決方案，使Fortinet解決方案與既有或新的安全技術並存，實現綜合防護。日前，Fortinet更與Carbon Black成為合作夥伴，透過進階威脅防護框架的整合，為企業提供安全自動化、資安情報及控管。

各方評價
「Carbon Black採取統合的策略，希望將自身與重要夥伴的產品相互整合，讓共同客戶感受到一流的安全產品在完美搭配後所發揮的優勢。Fortinet Security Fabric與我們的統合策略正好能完美結合。現在，只要Carbon Black發現新檔案，經辨識認定為有潛在惡意，這些檔案就會被傳送至FortiSandbox，進一步地深層分析和即時評價。這可為客戶提供更多一層保障，防止進階威脅和目標攻擊。」
–        Carbon Black業務發展部資深副總裁Tom Barsi

「行動、雲端與物聯網三者，已將安全的複雜度推向新的高峰。2015年一項ZK Research的資安調查顯示，43%的受訪者表示會關掉安全設備的功能，以改善系統效能，這證明了大多數端點產品已無法趕上進階和目標式攻擊的數量，傳統的防護方法因此失效。現在，企業應該採用統一的Security Fabric，獲得多重的必要防護，不用再因對抗日新月異的威脅環境，而承擔額外的複雜運算，或是使網路變得緩慢。」
–        ZK Research首席分析員Zeus Kerravala

Fortinet Security Fabric (安全織網圖)

資料來源：https://news.xfastest.com/news/19791/fortinet-security-fabric/



 

Fortinet’s New FortiGate 6040E Enterprise Firewall Delivers Unparalleled Next Generation Firewall Performance to Large Enterprises

SUNNYVALE, Calif., April 25, 2016 –
Michael Xie, founder, president and chief technology officer of Fortinet
“Enterprises are being disproportionally impacted as the adoption of cloud services and growth in remote access to corporate networks have eroded the network perimeter and steadily increased the demands on enterprise infrastructures. Facing the limitations of traditional security solutions, only the performance advantages of Fortinet’s next-generation processors powering our new FortiGate 6000 series enterprise firewalls will give large enterprises the freedom to deploy the advanced security solutions necessary to protect their organizations today and into the future.”
News Summary: 
Fortinet® (NASDAQ: FTNT), the global leader in high-performance cybersecurity solutions, today announced the expansion of its Security Fabric with introduction of the FortiGate 6040E enterprise firewall. First in Fortinet’s new 6000 series of ultra-high throughput enterprise firewalls, the FortiGate 6040E delivers the unprecedented next-generation firewall performance, effortless scale, and superior security so large enterprises don’t have to compromise between security features or network speed disruption.

• Fortinet’s new FortiGate 6040E enterprise next-generation firewall is designed to secure the vast amounts of mobile and cloud traffic for the largest of enterprises.
• Fortinet bolsters its Security Fabric with its new FortiASIC CP9 next-generation Content Processors. CP9 accelerates the inspection of computationally intensive intrusion prevention
• New FortiGate 2000E and 2500E enterprise firewalls deliver CP9 ASIC advantages to enterprise edge and internal segments.

Security Solutions Have Become the Gateway to the Cloud
Adoption of cloud services and the ease of remote access to network assets have created a perfect storm for large enterprises, drastically increasing external demands on IT networks and exponentially expanding the attack surface. As a result, the enterprise next-generation firewall has become the de facto gateway to the cloud.
Compounding on these challenges, security leaders must overcome the limitations of the technologies used in most next-generation firewall solutions available today – forcing them to choose between enabling security features or preserving the performance of their networks.
FortiASIC Hardware Acceleration Eliminates Security Compromise 
Overcoming the limitations of traditional next-generation firewall solutions, the FortiGate 6040E is built on an innovative new processing architecture, utilizing FortiASIC content and network processors to offload and accelerate the security performance of its dual CPUs. Integrating advanced security processing, intelligent controls, and high speed networking enable the FortiGate 6040E to deliver unprecedented security and network performance in a deceptively compact form-factor.
FortiGate 6040E Technical Highlights:

• 320Gbps enterprise firewall throughput.
• 80Gbps throughput with all next-generation firewall features enabled.
• FortiASIC CP9 brings enhanced SSL decryption performance to close gaps in the attack surface.
• Intelligent networking, security, processing, and management capabilities are all efficiently integrated within a small form-factor chassis.
• Six different interface configuration options tailored to match individual customer needs:

 

FortiGate-6040E	FW / NGFW Throughput	10GbE Interface	40GbE Interface	100GbE Interface
Option 1	320 Gbps / 80 Gbps	64 x 10GbE	-	-
Option 2	320 Gbps / 80 Gbps	-	16 x 40GbE	-
Option 3	320 Gbps / 80 Gbps	-	-	8 x 100GbE
Option 4	320 Gbps / 80 Gbps	32 x 10GbE	8 x 40GbE	-
Option 5	320 Gbps / 80 Gbps	32 x 10GbE	-	4 x 100GbE
Option 6	320 Gbps / 80 Gbps	-	8 x 40GbE	4 x 100GbE

Fortinet’s new FortiASIC CP9 content processor delivers the performance needed to secure the massive traffic demands of the largest enterprises and enables support for various firewall deployment modes including next-generation and advanced internal segmentation. This frees businesses to deploy security wherever it is needed without impacting network functionality. This enables the superior defenses of Fortinet’s innovative Security Fabric.
Fortinet also announced the launch of two new FortiGate 2000E series enterprise firewalls, bringing the enhanced capabilities of FortiASIC CP9 to enterprises requiring higher next-generation firewalling and increased SSL inspection capabilities. The new FortiGate 2000E and 2500E also leverage CP9 deliver increased VPN capabilities, deep content inspection and advanced application controls.
Supporting Quotes
Mobility, the cloud and IoT has raised the complexity of security to new heights. The number of advanced and targeted threats has rendered traditional approaches to security ineffective as most point products can no longer keep up. The 2015 ZK Research Security Survey revealed that 43% of respondents admit to turning features off in security appliances to improve performance. A unified security fabric that can provide the necessary layers of security without additional complexity or slowing down the network has become vital. It's critical that security professionals look at how security appliances are being built. A study by ZK Research conducted earlier this year found that ASIC based products consistently have an 18 to 24 month lead on price/performance over ones built on off the shelf silicon.
- Zeus Kerravala, principle analyst, ZK Research
Availability
The FortiGate 6040E, 2000E, and 2500E will all be available in Q2 2016. Please contact your authorized Fortinet channel partner for pricing and details.
Additional Information
Website: FortiGate Enterprise Firewalls, FortiASIC Processors
Blogs:Securing the New Enterprise Edge, Introducing the Fortinet Security Fabric, Securing the Cloud

 

About Fortinet

Fortinet (NASDAQ: FTNT) protects the most valuable assets of some of the largest enterprise, service provider and government organizations across the globe. The company's fast, secure and global cyber security solutions provide broad, high-performance protection against dynamic security threats while simplifying the IT infrastructure. They are strengthened by the industry's highest level of threat research, intelligence and analytics. Unlike pure-play network security providers, Fortinet can solve organizations' most important security challenges, whether in networked, application or mobile environments - be it virtualized/cloud or physical. More than 210,000 customers worldwide, including some of the largest and most complex organizations, trust Fortinet to protect their brands. Learn more at http://www.fortinet.com, theFortinet Blog or FortiGuard Labs.

資料來源: Fortinet Website

Fortinet NGFW獲NSS Labs推薦為業界最有效的企業防火牆

Fortinet整體的安全防護效度達99.6%；
在持續的實際測試中，威脅攻擊的封阻率領先業界達99.97%。

全球高效能網路安全領導廠商Fortinet® (NASDAQ: FTNT) 宣佈，根據NSS Labs最近的次世代防火牆(NGFW)產品評測結果，顯示Fortinet能提供最佳的安全防護。從2015年12 月1日到2016年1月31日所進行的持續性實際測試中，Fortinet封阻了99.97%的威脅攻擊。

Fortinet產品和解決方案行銷資深副總裁John Maddison表示，「NSS Labs的評測結果，能協助客戶更加清楚市場上產品的優劣，不被行銷充斥的雜訊所混淆。像NSS Labs這類的第三方測試，能讓廠商信守於產品規格和所宣稱的效能，讓客戶能在接收真正有用的訊息之後做出決策，而不是在網路部署解決方案後才去探索實際的效能如何。」

Fortinet評測的重要結果包括：
•        Fortinet企業防火牆在所有的測試類別中都獲得高分，贏得眾所渴望的NSS Labs「推薦」評等。

•        安全效度：Fortinet以99.6%的整體安全防護效度並列第一；在持續的實際測試中，則以99.97%的威脅攻擊封阻率，領先所有其它的次世代防火牆產品。

•        網路效能：評測結果顯示Fortinet的網路效能比規格書載明的還要快37%，延遲性為所有廠商中最低的，不管封包大小平均僅有4.2微秒；此外，Fortinet提供最多的TCP連線數（3千萬個），網路效能平均超過19 Gbps，排名第二。這些結果確保企業組織能因應未來新興技術可能急速倍增的網路需求，例如來自行動化或物聯網，同時現在就能建立最低延遲、最高效能的基礎架構。

•        價值：評測結果同時也顯示Fortinet在效度、效能和成本上，擁有最佳的綜效。整體擁有成本(TCO; Total Cost of Ownership)遠低於其它效能相近的同業，而且是唯二相較於規格書，以實際效能換算TCO更為降低廉的廠商之一。

Fortinet在各分類的評測結果卓越
NSS Labs針對頂尖的次世代防火牆廠商進行標準測試，將彼此競爭的解決方案置於嚴苛真實的環境中，評測產品的安全防護效度、網路效能和整體擁有成本。並依照這些結果製作安全價值圖(SVM; Security Value Map)和競爭報告。

Fortinet送測的產品為FortiGate 3200D企業防火牆，它100%通過了防火牆政策和應用程式控管測試，100% 的規避測試，以及100%的穩定性和可靠性測試，在效能、效度和價值評估皆領先同業。FortiGate在安全防護效度、網路效能和價值方面，所一貫展現的領先優勢，讓它贏得了NSS Labs眾所渴望的「推薦」評等。

持續的實際測試展現了Fortinet一貫的領先優勢
NSS Labs還進行了他們持續實際的網路評估預警系統(CAWS; Cyber Assessment Warning System)測試，讓各個受測的解決方案每天對抗數以百計的威脅攻擊。這項嚴格的測試，可以找出日復一日實際具備安全防護效度的解決方案。這對客戶來說是非常有用的資源，能讓他們在部署一項產品之前，就先知道它實際運作的結果。CAWS的測試結果顯示，Fortinet擁有最高的整體封阻率，在62天的測試中，有61天100%阻止了所有的威脅攻擊，整體封阻率為99.97%。

備受推薦的端對端網路安全平台
此次NGFW獲選為推薦產品，僅是Fortinet許多備受推薦的產品之一。過去Fortinet的FortiSandbox 入侵偵測系統(BDS; breach detection system)、FortiGuard次世代入侵防護系統(IPS; intrusion prevention system)、FortiGate企業防火牆、FortiClient端點防護，以及FortiWeb應用程式防火牆等等，都曾獲得NSS Labs的推薦。這些都確保了Fortinet的客戶，能夠從端點到雲端，或是在兩者之間建置非常優越的安全平台。

NSS Labs執行長Vikram Phatak表示，「網路安全市場的行銷術語和廠商單方面所宣稱的，對客戶在尋找有信譽且已獲實證的解決方案時，經常帶來極大的混淆，NSS Labs的使命便是協助客戶藉由實測數據來做決策。Fortinet向來皆會參與我們各種不同的產品實測，這是安全廠商的最佳典範，將資訊和數據透明化，並永遠以客戶為優先考量。」

資料來源: XFastest News

Fortinet and Hewlett Packard Enterprise Offer Innovative Security Bundle to Help Organizations Move Beyond the Firewall and Reduce IT Complexity

Expanded partnership to provide seamless security visibility, analysis and management for mid-size and enterprise customers

SAN FRANCISCO, Calif. – RSA Conference 2016 - March 1, 2016 – Fortinet® (NASDAQ: FTNT), a global leader in high-performance cyber security solutions and Hewlett Packard Enterprise (HPE) today introduced a new, integrated security bundle that addresses the evolving security requirements of mid-size and enterprise customers. The new offering delivers enhanced interoperability between the Fortinet FortiGate Network Security Platform and HPE Security Logger products, giving enterprise customers improved visibility, analysis capabilities and control of security threats.

Managing risk in today’s digital business is getting increasingly complex. More sophisticated and frequent cyber attacks, coupled with the cost and complexity of regulatory constraints and the transformation of enterprise IT puts enormous pressure on the limited IT staff in mid-size and enterprise organizations. The need for simple to use, cost-effective security solutions is critical for these types of organizations, as their security infrastructure needs to be easy to manage, intelligent and seamlessly adaptable to the changing threat landscape impacted by factors such as BYOD and cloud applications.

Fortinet and HPE Deliver Seamless Protection Across Expanding Attack Surfaces
The integrated, scalable solutions from Fortinet and HPE Security provide enterprise customers with a broad view of the security threats on their network with deep analysis reporting. The expanded technology partnership includes:

• New Solution Bundle Combines Next-Generation Enterprise Firewalls (NGFW) with the Leading Universal Log Management Platform: Bringing together the Fortinet FortiGate Enterprise Firewall and HPE Security Logger software into one bundle enables customers to benefit from the industry’s highest-performing firewall and log management capabilities to help seamlessly collect, store, identify, analyze and mitigate complex threats. The bundle comes packaged with Fortinet enterprise solutions, including FortiCare 24x7 support, NGFW, AV, web filtering and anti-spam to provide customers with a cost-effective, seamless way to deal with today’s evolving security threat landscape.
• Integration Assures Enhanced Performance and Security for Joint Customers: Improved integration between Fortinet FortiGate Enterprise Firewalls and HPE SecurityLogger provides customers with seamless security management, to address vulnerabilities as soon as they are found. Businesses benefit from less disruption due to security issues and reduced risk of exposure to threats.

"Cyber threats are continuously evolving and enterprises require multiple layers of security and forward-looking security solutions like internal segmentation that protect against these threats as they continue to grow in complexity and occurrence. Our expanding partnership with HPE Security further anticipates the needs of our joint customers, delivering increased network agility and lower OpEx costs, enabling enterprises to operate efficiently and securely."
- John Maddison, senior vice president of products and solutions at Fortinet

“Mid-size businesses face the same types of sophisticated security threats as large enterprises, but do not always have the resources to adequately address these threats and protect their digital assets due to distributed IT environments and limited staff. To help our joint customers address these challenges, the new security bundle brings together the Fortinet Enterprise Firewall security products together with our leading universal HPE Security Logger platform to integrate information correlation, application analysis and network-level defense in one, seamless solution.”
- Chandra Rangan, vice president marketing, HPE Security at Hewlett Packard Enterprise

"The tremendous growth of mobile devices and cloud applications brought into mid-size enterprises has accelerated the requirement to add network security to even the smallest network, yet most of these organizations have very constrained IT budgets. Having an integrated offering from industry-leaders like HPE Security and Fortinet opens the door for us to address the unique IT challenges of these customers with an out-of-the-box, security solution that is proven, cost-effective and will help users gain full control of their network security."
- Russell Zientek, vice president, Cybersecurity Division at Arrow Distribution

Availability
Initial offerings of single SKU bundles, which include Fortinet FortiGate Enterprise Firewalls and HPE Security Logger, will be available to channel partners through Arrow in the U.S. and Canada in March 2016 with plans to roll out the bundle to other regions in second half of 2016.

 

About Hewlett Packard Enterprise

Hewlett Packard Enterprise is an industry leading technology company that enables customers to go further, faster. With the industry’s most comprehensive portfolio, spanning the cloud to the data center to workplace applications, our technology and services help customers around the world make IT more efficient, more productive and more secure.

 

About Fortinet

Fortinet (NASDAQ: FTNT) protects the most valuable assets of some of the largest enterprise, service provider and government organizations across the globe. The company's fast, secure and global cyber security solutions provide broad, high-performance protection against dynamic security threats while simplifying the IT infrastructure. They are strengthened by the industry's highest level of threat research, intelligence and analytics. Unlike pure-play network security providers, Fortinet can solve organizations' most important security challenges, whether in networked, application or mobile environments - be it virtualized/cloud or physical. More than 210,000 customers worldwide, including some of the largest and most complex organizations, trust Fortinet to protect their brands. Learn more at http://www.fortinet.com, the Fortinet Blog or FortiGuard Labs.

資料來源:http://www.fortinet.com/press_releases/2016/fortinet-hpe-offer-innovative-security-bundle-help.html
 

Fortinet Uncovers Most Prevalent Undetected Cyber Threats Traversing Enterprise Networks

Fortinet Global Cyber Threat Assessment Program Provides Unparalleled Visibility into Security Threats, User Productivity and Network Performance

SUNNYVALE, Calif. – February 24, 2016

John Maddison, senior vice president of products and solutions, Fortinet
“Businesses are constantly under cyber attack. With the attack surface dramatically increased and a mature attackers ecosystem, companies have to be ever more vigilant across all their IT assets. Fortinet’s Cyber Threat Assessment Program has been designed to look deep into a company’s network traffic and look for Indicators of Compromise. It provides customers a blueprint on how to reduce risk and at the same time make their network more efficient.”

News Summary:
Fortinet (NASDAQ: FTNT),the global leader in high-performance cyber security solutions, today unveiled the most prominent, undetected cyber threats and bottlenecks impacting enterprise network security and performance, based on data analysis from the Fortinet Cyber Threat Assessment Program (CTAP).

• Fortinet CTAP issues its first end-user report with data collected from hundreds of U.S. Fortinet users and prospective customers across industries over a few month’s time span; analyzed millions of incidents to gain unmatched insight into the largest, unknown security threats traversing their networks.
• Results indicate that enterprises of every size and vertical continue to face a constant and consistently hostile threat landscape, with more than 32.14 million attempted attacks on these networks.
• Top threat types include malware, botnets and application exploits with 357,420 attempts to compromise networks within the top 10 application vulnerabilities alone, and 71 different malware and botnet variants detected across the networks.
• Key verticals analyzed include healthcare, financial services, education and technology companies, with banking being targeted by nearly 45% of all malicious activity, followed by education, which experienced 27.4% of all attack events.

Global Program Uncovers Unknown Risks, Provides Immediate Mitigation Strategies

Fortinet’s CTAP has expanded to global organizations, providing a free-of-charge program that enables companies to take a detailed look at their network’s current security accuracy, application usage, user productivity and performance through expert guidance from Fortinet. By installing a FortiGate high-performance enterprise firewall within the network, a user can instantly monitor the application traffic traversing the network for intrusions, malware and malicious applications that could cause massive risk to the network. Additionally, FortiAnalyzer provides a Risk Assessment Report with actionable mitigation recommendations at the end of the data collection period.

Key Findings Across Industries: Largest Network Threats and Usage Trends

The data highlighted in Fortinet’s initial end-user CTAP report demonstrates that organizations of all types constantly face threats from various angles and need to ensure that they have the right end-to-end security solution in place to mitigate the risks. With hundreds of organizations in North America already benefiting from the global threat intelligence of CTAP, some of the largest cross-industry vulnerabilities and network usage trends include the following:

• • Automated Attack Systems, Botnets and Malware take Center Stage
  • With 32.14 million attempted attack events in a 4-month span, it’s evident that attackers rapidly build automated systems and tools to probe networks for exploitable vulnerabilities.
  • Headline-generating Malware such as Conficker, Nemucod and ZeroAccess have made significant efforts to rebuild and infect machines, as the financial incentives for these owners are massive. With 5,230 instances of Conficker, followed by 4,220 instances of Nemucod and 3,210 instances of ZeroAccess traversing these networks, it’s evident that this threat type will only continue to grow.
  • In just the top 10 incidents analyzed, 357,420 attempts were made to exploit application vulnerabilities, as hackers continue to cast a wide net to try and compromise corporate data.
• Social Media, Video Streaming and Advertising Drain Corporate Networks
  • Social media and multimedia streaming activities account for 25.65% of all network traffic, exposing corporate systems and sensitive data to risks of infection from drive-by downloads, social engineering and malvertising. Facebook is the most dominant social media site representing 47.27% of all social media traffic, with YouTube contributing to 42.29% of streamed content.
  • Advertising content accounts for 19.1% of network traffic and has been shown to be a potential source of malware as third party advertising networks are subverted or tricked into delivering malicious ads.
  • Application control appears to be a continual challenge for administrators. A significant amount of Peer-to-Peer traffic, primarily Bittorrent and gaming activity opens the network to malicious content that piggybacks on top of applications and files downloaded through these popular sites. Enterprises should exercise caution when building application control policies on their networks.
• Financial Services, Education and Healthcare Rank Most Vulnerable Industries
  • Due to the lucrative financial data obtained when these networks are successfully infiltrated, banking and finance organizations are disproportionately targeted with 44.6% of all malicious activity. Hackers rely on high-velocity attacks and target financial institutions with sophisticated trojans and land-and-expand attack strategies to infiltrate and persist within the network.
  • Education organizations represent 27.4% of all attack events in this report and are the second largest at-risk vertical industry. Botnets are the dominant threat for educational institutions, with 7 out of top 10 infections, while XcodeGhost, the widely publicized iOS malware breaks into the top 10 vulnerabilities list in education.
  • Healthcare ranked third in overall malicious activity with 10.6% of attack events. The healthcare industry is unique in the appearance of automated exploit kits, notably targeting numerous vulnerabilities in Flash, Silverlight and Internet Explorer to compromise a system via a drive-by-download or infected website.

Takeaways and Actionable Insights to Protect Your Network

Attackers are targeting companies of every size in the hopes of gaining access to the valuable assets inside the corporate network. Vertical industries need to know what hackers are after and understand the unique strategies they employ.

• Banking and Finance organizations should bolster their networks against land-and-expand strategies and the predominant use of trojans. Deploying security platforms like Fortinet’s Advanced Threat Protection framework can combat sophisticated new variants of malware at the network edge, while implementing internal network segmentation can help contain insider threats and minimize risks to the most valuable data.
• Education security professionals should be mindful of the various devices that can access their network resources, utilizing threat intelligence like FortiGuard Mobile Malware services to detect threats that target student smartphones and tablets as vectors for an attack.
• Healthcare industry protections closely mirror those of banking organizations. Understanding that hackers may be looking to encrypt their data and hold the information hostage, instead of silently exporting data to sell on the dark web makes it even more imperative for healthcare to consider internal segmentation strategies to contain threats.
• Technology businesses are varied and hackers respond with diverse strategies and malware to cast the largest net. Security professionals in these organizations need to understand their devices, applications and platforms that connect to the web using analysis tools like FortiAnalyzer. Understanding their network utilization will help businesses tailor a security posture that matches their individual attack surface.

CTAP is part of a broader effort by Fortinet and its FortiGuard Labs threat research team to integrate risk and advisory capabilities with its end-to-end security platform to provide customers greater insight into dynamically changing cyber risks that threaten their businesses.

Supporting Quote
“As attacks against corporate data resources become increasingly pervasive, TierPoint is committed to providing a clear line of defense to secure our customers. As such, it’s critical that we know exactly what is going on inside their networks. Fortinet’s Cyber Threat Assessment Program has opened the door to many new business opportunities for TierPoint. CTAP offers deep analysis of existing or possible threats running on customer or prospect networks, helping us ensure that we can recommend the right Fortinet security solutions to mitigate the dynamically changing cyber risks that threaten their businesses.
- Scott Fuhriman, vice president and general manager, TierPoint, #1 CTAP US Partner

 

Additional Resources

• Report: 2016 CTAP Threat Landscape Report
• Whitepaper: Cyber Threat Assessment – Threat Landscape Report Executive Summary
• Infographic: A Look Behind the Firewall
• Follow Fortinet on Twitter and LinkedIn
• Join the conversation on the Fortinet blog

資料來源:http://www.fortinet.com/press_releases/2016/undetected-cyber-threats-enterprise-networks.html