Fortinet’s Robust Multi-Cloud Portfolio Secures Migration to Cloud Environments

Fortinet secures the migration to multi-cloud with native integration, broad protection and management and automation capabilities for every cloud environment

SUNNYVALE, Calif. - Jun 3, 2019

 
 

John Maddison, EVP of products and solutions at Fortinet
“Hybrid Networks and multi-cloud are major tenants of the enterprise architecture for the next 10 years. Fortinet customers are deploying our Security Fabric for visibility across their entire digital attack surface, enabling high quality operations and rapid, orchestrated response to any potential threats.”

News Summary:
Fortinet® (NASDAQ: FTNT), a global leader in broad, integrated and automated cybersecurity solutions, today announced that Aspire Global, MediaKind, MLP Finanzberatung SE, and Nubank have chosen Fortinet’s multi-cloud security offerings to implement secure connectivity and consistent visibility and control across their cloud environments. These organizations confidently rely on Fortinet’s multi-cloud security solutions to ensure that applications and/or workloads have consistent security across physical, virtual and cloud footprints and can be centrally managed whether they reside in a private cloud, public cloud, hybrid cloud or on-premises. 

Migrating workloads and applications to cloud environments, building cloud native applications and consuming SaaS applications have many benefits for organizations looking to stay agile, flexible and reduce operational costs. However, this transition to multi-cloud also raises security concerns that if left unaddressed can be detrimental and offset these benefits. Gartner predicts that “by 2021, 50% of enterprises will unknowingly and mistakenly have some IaaS storage services, network segments, applications or APIs directly exposed to the public internet, up from 25% at YE18.” [1]

To address these concerns, Fortinet’s depth and breadth of multi-cloud security products and solutions that are part of the Fortinet Security Fabric offer the following solutions:  

• Visibility and control: Organizations need a single-pane-of-glass to gain visibility and define consistent security policies throughout the entire cloud infrastructure to effectively manage risk. Fortinet’s FortiCASB-Cloud allows customers to leverage the public cloud management APIs to monitor activity and configuration of multiple cloud resources as well as eliminate blind spots across an expanding attack surface. It continuously evaluates configurations across regions and public cloud types while dynamically analyzing activity in the public cloud infrastructure to identify potentially malicious activities. FortiCASB-Cloud dashboards are pluggable into Fortinet Security Fabric FortiView, uniquely offering Security Administrators a single-pane-of-glass view of the entire attack surface in multi-cloud infrastructures. Through FortiView dashboards, administrators can see both inline security as well as cloud configuration security to build a comprehensive view of risk.
   
• Application security: The growing number of cloud-based applications that organizations are building either for direct web access or as backend applications for various mobile and business applications increases security risks and threats. Fortinet provides advanced application layer security controls so customers can choose cloud platforms based on their business priorities, not security limitations. Through  FortiWeb-VM, customers are able to secure web APIs and front-end web application to protect from known and unknown threats. FortiWeb is easy to use and delivers high accuracy powered by on-device machine learning capabilities, as well as the flexibility of form factors from containers to virtual machines to SaaS. FortiWeb also integrates with FortiGate-VM through FortiView dashboards and shares security intelligence information to consistently enforce security policies and provide increased visibility. FortiCloud Sandbox Service is integrated to perform dynamic analysis of files and storage services in order to identify previously unknown malware.
   
• Secure connectivity: As organizations deploy an array of cloud infrastructure and shift toward multi-cloud, secure connectivity across these various environments is critical to protect sensitive information and confidential communication. FortiGate-VM provides the most flexible and scalable offerings in the industry supporting small point workload connectivity designed to scale out. It also supports larger data connections that require a scale-up VPN connection to multiple Gbps of VPN traffic. FortiGate-VM’s virtual security processor (vSPU) technology accelerates performance in both private and public clouds, enabling customers to confidently migrate their high-performing applications to the cloud.

Aspire Global - the complete iGaming Platform, MediaKind - a global media technology leader, MLP Finanzberatung SE – the partner for all financial matters, and Nubank - the leading Fintech in Latin America, are among the most recent Fortinet customers realizing the benefits of multi-cloud without compromising security. Some of the benefits customers gain from leveraging the Fortinet Security Fabric for multi-cloud are:

• Consistent security controls and policies regardless of application infrastructure.
• Single-pane-of-glass visibility for multi-cloud security to comprehensively manage risk in a dynamic and diverse environment.
• The ability to leverage existing security personnel skillset when securing the cloud.
• The confidence to deploy any application on any cloud supporting the desired business velocity and choices.

Customer Supporting Quotes:
“MediaKind chose to work with Fortinet for its commitment to the cloud and its native integration of security capabilities into any cloud computing platform. Fortinet gives us the freedom to deploy any application on any cloud without compromising security. This was critical for MediaKind as we chose to reduce the number of physical data centers and transition our workloads and applications to the cloud. With Fortinet’s robust portfolio, we are able to stay agile to our customer needs while protecting sensitive information and intellectual property in both a cloud and on-premise setup.”
-Ravinder S. Jarral, Head of Global Security at MediaKind

“Aspire Global views cybersecurity as a top priority. It’s important for us to offer a safe, mutli-cloud secured platform in order set the groundwork to have a smooth business continuation from the start of the process to finish with network users. Fortinet’s cloud security solutions are a dynamic resource that gives Aspire Global the technology edge in the digital sector enforced across all environments.”
- Ziv Shtaeinberg, Chief Technology Officer at Aspire Global

Fortinet has demonstrated its performance for a multi-cloud environment – without compromising ease-of-use when it comes to manageability. We have deployed Fortinet cloud security solutions in all three – AWS, Azure, and Google – of our cloud environments and Fortinet delivers the necessary visibility and control across cloud infrastructures, enabling secure applications and connectivity from data center to cloud.
- Erik Vellmete, Head of IT Infrastructure and Basic Applications at MLP Finanzberatung SE

"The main benefit for Nubank when purchasing Fortinet security solutions was the security itself. We were looking for solutions that would serve our internal security Red Team, as well as improving integration with our AWS cloud environment. For this, we adopted Fortinet's Security Fabric for AWS. Further, with Fortinet’s cloud security solutions, we now have a record of activities for each engineer and for each user that uses one of our services, allowing us to understand all the activity being carried out – a very important safety point for us and for our clients. This was only the first step in blueprinting what we want to achieve.”
- Gabriel Diab, software engineer at Nubank Brasil

Additional Resources

• Learn more about Fortinet’s multi-cloud security solutions here.
• Read more about our Network Security Expert program and Network Security Academy program.
• Read more about the Fortinet Security Fabric or the Third Generation of Cybersecurity.
• Follow Fortinet on Twitter, LinkedIn, Facebook, YouTube, and Instagram. 

 

1 Gartner, Innovation Insight for Cloud Security Posture Management, Neil MacDonald, 25 January 2019.

 

資料來源:
https://www.fortinet.com/corporate/about-us/newsroom/press-releases/2019/multi-cloud-portfolio-secures-migration-to-cloud-environments.html

Fortinet Recognized as Best Security Company at 2019 SC Magazine Awards

ast week at RSA Conference 2019, Fortinet won an Excellence Award for "Best Security Company" and a Trust Award for “Best UTM Security Solution” at the 2019 SC Awards held in San Francisco during RSAC.

“The Excellence Award honors those organizations and individuals whose relentless pursuit of data security, innovation and customer service places them in a league of their own. Fortinet has demonstrated its commitment to improving the industry and has rightfully earned this recognition,” said Illena Armstrong, VP, editorial, SC Media. “And as a winner in the Trust Award category, Fortinet's UTM solution stands out for its innovative approach to protecting businesses against the ever-changing threat landscape. This is a significant achievement and one that shows Fortinet’s dedication to improving the IT security industry as a whole.”

Trust: Fortinet’s UTM Solution

Fortinet has consistently delivered the industry’s most robust Unified Threat Management (UTM) solution since its initial release. Its tight integration of network connectivity, wireless access, and endpoint security with its top-rated protection, simplified management, and rich reporting provides a powerful solution for customers around the world.

Excellence: Fortinet Security Fabric

Fortinet’s growing portfolio of security, networking, and business productivity solutions are tightly integrated to ensure that today’s organizations can confidently build the digital business infrastructure they need without compromising on security. By combining custom security processors, an intuitive operating system, and applied threat intelligence, Fortinet customers receive proven security, exceptional performance, and better visibility and control, along with easier administration to reduce overhead and TCO.

This Security Fabric architecture approach also provides seamless protection across and between different networked environments, whether physical or virtual, and can adapt as business requirements and technologies continue to evolve without compromising on performance of functionality. This holistic approach to security, which is broad, integrated, and automated, sets Fortinet apart from the rest of the security industry, and those efforts are reflected in these industry-recognized awards. 

For more information and a detailed list of categories, finalists, and winners of this year’s, SC Awards, you can visit https://scawardsus.com/.

Learn more about how Fortinet's Security Fabric provides a unified security solution to seamlessly protect organizations for the Third Generation of Network Security. 

資料來源:
https://www.fortinet.com/blog/business-and-technology/fortinet-recognized-as-best-security-company-at-2019-sc-magazine.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+fortinet%2Fblogs+%28Fortinet+All+Blogs%29
 

Fortinet 網路威脅報告顯示，勒索軟體轉向劫持電腦進行挖礦

全方位整合與自動化網路安全廠商 Fortinet，日前公布了 2018 年第一季全球網路威脅報告。該研究指出，網路犯罪份子不斷升級攻擊手法，以提高成功率並加速感染的擴散。雖然勒索軟體持續嚴重影響企業組織，但有跡象顯示，一些網路犯罪份子現在更喜歡劫持電腦系統，將其用於加密貨幣挖礦，而不是直接勒索贖金。

 

Fortinet 資安長 Phil Quade 表示，「我們正面臨資安領域令人不安的趨勢融合。網路惡行者利用不斷擴大的受攻擊面，藉由新發布的零日威脅與擴大惡意軟體的散布，來展現其攻擊的效率和敏捷性。此外，IT 和 OT（操作技術）團隊通常沒有所需的資源，得以適當地強化和保護系統。因此，建置一個安全織網（security fabric）架構，能夠依序優先處理效能、整合、先進分析與風險決策，就能提供全方位的安全防護。」

Fortinet 亞太區網路安全策略師 Gavin Chow 指出，「2018 年第一季，台灣地區最普遍的攻擊，是針對包括執行於 Apache Struts、Oracle WebLogic Server 和較舊的 IIS 6.0 網站系統上的已知漏洞；另外則是物聯網設備上的舊漏洞，例如 Linksys 和 D-Link 家用路由器。傳統 Windows 執行檔和 PowerShell 的惡意軟體，則是此區域最流行的惡意軟體；另外則是利用微軟 Office 已知漏洞，取得受害系統控制權執行其他惡意行為的惡意軟體。」

更多詳細的研究發現與重點可造訪 Fortinet 的部落格。以下是 2018 年第一季網路威脅報告的重點摘要：

網路攻擊手法不斷進化以確保在速度與規模上成功

資料顯示，網路犯罪份子越來越熟練使用惡意軟體，能利用新發布的零日漏洞在攻擊速度和規模上獲得成功。儘管 2018 年第一季每家公司檢測到的漏洞下降了 13%，但獨特的漏洞卻增加超過 11%，而 73% 的公司都遭受過嚴重的漏洞攻擊。

• 劫持挖礦（cryptojacking）激增：惡意軟體不斷進化，越來越難以預防和檢測。劫持電腦進行挖礦的勒索軟體相較前一季倍增，從 13% 上升至 28%。此外，劫持挖礦病毒在中東、拉丁美洲和非洲非常普遍。此種相對較新的威脅，卻顯示出令人難以置信的多樣性。網路犯罪份子正在建立更隱蔽的無檔案攻擊手法，能將遭感染的程式碼直接注入到瀏覽器中，大大降低被偵測出的機率。礦工現在針對多種作業系統，同時挖掘不同的加密貨幣，包括比特幣（Bitcoin）、達世幣（Dash）和門羅幣（Monero）。他們同時也會根據攻擊成功率，調整和採用遞送和傳播的技術。
• 目標化攻擊造就最大的衝擊：破壞性惡意軟體帶來的衝擊仍然很大，特別是將它與精心設計的攻擊結合的時候。對攻擊目標發送攻擊之前，進行深入的偵查，有助於提升攻擊的成功率。一旦滲透到網路之後，攻擊者就會在網路中橫向擴散，然後觸發計劃攻擊中最具破壞性的部分。奧運毀滅者（Olympic Destroyer）惡意軟體和最近的 SamSam 勒索軟體，都是網路犯罪份子將精心設計的攻擊與破壞性有效載荷（payload）相結合，以造就最大衝擊的例子。
• 勒索軟體持續破壞：勒索軟體數量和複雜性的成長，仍然是企業面臨的重大安全挑戰。勒索軟體不斷進化，利用社交工程等新興傳播管道，以及多階段攻擊等新技術來逃避檢測，加速感染系統。1 月份所出現的 GandCrab 勒索軟體，是第一個要求以 Dash 加密貨幣付款的勒索軟體。 BlackRuby 和 SamSam 則是另外兩種勒索軟體變種，在 2018 年第一季成為主要威脅。
• 多種攻擊媒介：儘管在第一季， Meltdown 和 Spectre 的旁路攻擊（Side Channel Attack）占據了新聞版面，但一些主要的攻擊針對的則是行動裝置，或是路由器、Web 或 Internet 技術上的已知漏洞。21% 的企業組織回報行動惡意軟體增加了 7%，這顯示物聯網設備仍然被鎖定攻擊。網路犯罪份子也持續了解到尚未修補的已知漏洞價值，以及利用新發現的零日漏洞增加攻擊機會。此外，微軟繼續成為攻擊的頭號目標，路由器在攻擊總量中占第二位。內容管理系統（CMS）和 Web 導向技術也成為主要目標。
• 潔淨網路，而不僅是修補：依據持續通訊的連續天數，來測量殭屍網路的感染時間，顯示網路的潔淨不僅只涉及修補漏洞。第一季的資料顯示，58.5% 的殭屍網路在感染同一天被發現和清理。17.6% 連續存在兩天，7.3% 會存在 3 天，大約 5%則 會存在一個星期以上。例如，2017 年第四季，仙女座殭屍網路（Andromeda botnet）被取締，但今年第一季的資料顯示，它在數量和流行率仍展現其頑強的生命力。
• 針對操作技術（Operational Technology，OT）的攻擊：儘管 OT 攻擊在整個攻擊環境中所占比例較小，但趨勢不容忽視。工業生產網部門越來越多與互聯網相連，對安全產生嚴重的潛在影響。目前，絕大多數攻擊活動針對兩種最常見的工業通信協議，因其被廣泛部署，具有高度針對性。資料顯示，亞洲比其他地區在針對工業控制系統（ICS）的網路攻擊活動更為普遍。

對抗不斷演化的網路犯罪需要整合的安全防護

本季報告中的威脅資料，與 FortiGuard 安全防護中心所發布的 2018 年預測趨勢相吻合。這顯示針對智慧與自動化威脅的最佳防禦，應是一個整合、廣泛的自動化安全織網架構，具備高度意識與主動安全防禦的系統，才能因應新一代自動與人工智慧化的攻擊。

研究方法

Fortinet 的全球網路威脅報告，整合了 FortiGuard Labs 團隊於 2018 年第一季所收集的情報，資料來源涵蓋 Fortinet 廣泛的網路設備和感測器，遍布全球、各地區、各行業和不同組織。報告專注於 3 個核心方面：應用程式漏洞、惡意軟體和殭屍網路。

（首圖來源：pixabay）

資料來源:
http://technews.tw/2018/06/20/fortinet-report-ransomware/
 

Fortinet Delivers Third Generation of Network Security with the Evolution of its Security Fabric

FortiOS 6.0 delivers more than 200 new capabilities across Security Fabric to automate security operations and protect the digital attack surface

LAS VEGAS, Nevada – Accelerate 18 - Feb 27, 2018

 
 

Michael Xie, founder, president and chief technology officer at Fortinet
“Digital transformation is creating new operating and service delivery models that provide undeniable value to users through technologies such as IoT, mobile computing and cloud-based services, generating a vast digital attack surface. As the speed and scale of cyber threats expands, security must take on its own transformation by integrating into all areas of digital technology and be able to translate user intent into automated business response. FortiOS 6.0 delivers hundreds of new features and capabilities that were designed to provide the broad visibility, integrated threat intelligence and automated response required for digital business.”

News Summary
Fortinet (NASDAQ: FTNT), a global leader in broad, integrated and automated cybersecurity solutions, today announced at its global partner and user conference, Accelerate 18, the evolution of its Security Fabric architecture with the release of FortiOS 6.0, the world’s most deployed network security operating system. With more than 200 new features and capabilities, enterprises will benefit from new levels of security operations automation and advanced protections for their expanding digital attack surfaces.

• Fortinet introduces new security capabilities across the key solution areas within its Security Fabric architecture, including management and analytics, multi-cloud, network, advanced threat protection, unified access, web applications, email, IoT and endpoint security. 
• Industry-leading secure SD-WAN functionality, threat detection services, and expanded visibility from IoT to multi-cloud networks protect the vast attack surface resulting from digital transformation (DX) strategies.
• New automated lifecycle workflows, attack surface hardening services, with customized ranking and industry benchmarking, deliver the next level of NOC/SOC management.
• Business, network and entity level tagging functionality enable business precise segmentation, providing the critical building blocks for intent-based network security. 

Broad Visibility, Integrated Detection and Automated Response
According to a Gartner survey, in EMEA, 47 percent of the CIO respondents have a dedicated digital business team. It also revealed that few of these teams (16 percent) are made up of IT associates only. "While IT delivery is still a responsibility of the CIO, achieving revenue growth and developing digital transformation were identified most often as top business priorities for organizations in 2018," according to Gartner.*

As companies look to transform everything from their business operating models to service delivery methods, they are adopting technologies such as mobile computing, IoT and multi-cloud networks to achieve business agility, automation and scale. The increasing digital connectedness of organizations is driving the requirement for a security transformation, where security is integrated into applications, devices, and cloud networks to protect business data spread across these complex environments.

The Fortinet Security Fabric is an integrated and automated security framework designed to protect today’s dynamic networks. It provides the broad visibility, integrated detection of advanced threats, and automated response, combined with the continuous trust assessment required to secure today’s digital business.

Available in Q1 2018, the FortiOS 6.0 release provides critical capabilities required to secure the growing attack surface spurred by digital transformation. Some key new features and capabilities across the Security Fabric solution areas include:

Network Security:

• Enhanced SD-WAN path controller measures application transactions for business-critical applications. These granular transactions are key in achieving better performance for SaaS, VoIP and other business applications with built-in automated fail-over capabilities. New one-touch VPN and zero-touch deployment further reduce complexity and rapidly enable enterprise branches.

Multi-Cloud Security:

• Expanded Cloud Connectors within the Security Fabric now include visibility of multiple clouds, spanning private cloud connectors (support for VMware NSX, Cisco ACI and Nokia Nuage), public cloud connectors (support for AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud), and SaaS clouds with CASB connectors (support for Salesforce.com, Office 365, Dropbox, Box, AWS and more). These Cloud Connectors enable organizations to have complete visibility of their security posture across all cloud networks to correlate both on and off network traffic through a unified security management console.
   
• FortiCASB 1.2 delivers Fabric integration with AV and ForitCloud Sandbox, extended protection and detection capabilities, as well as shadow IT discovery reporting. Additionally, FortiCASB offers expanded support for AWS to provide advanced compliance, reporting and analysis tools for enhanced visibility and control for AWS users.

IoT Endpoint Security:

• FortiClient 6.0 will include expanded operating system support for Linux, sharing actionable insight about these systems with the Security Fabric. FortiClient will also provide richer intelligence about all types of endpoints, including the application inventory on each device.
   
• A new Fabric Agent can send telemetry data from the endpoint to the Security Fabric for deeper insight on what is running on a network’s endpoint devices and quickly identify vulnerabilities. It is also certified compatible to work with a range of Fabric-Ready endpoint security partners. 

Advanced Threat Protection (ATP):

• GDPR regulations in May 2018 will further increase regulatory mandates on global businesses, making automated audit best practices across an enterprise’s security network critical. The new FortiGuard Security Rating Service provides expanded audit rules, customized auditing based on network environments, and on-demand regulatory and compliance reports.
   
• New FortiGuard Virus Outbreak Service (VOS) closes the gap between antivirus updates with FortiCloud Sandbox analysis to detect and stop malware threats discovered between signature updates before they can spread throughout an organization.
   
• New FortiGuard Content Disarm and Reconstruction Service (CDR) proactively strips potentially malicious content embedded in Microsoft Office and Adobe files to sanitize the most common file formats used to spread malware and help close the opportunity for infection from social engineering or human error.
   
• New FortiGuard Indicators of Compromise (IOC) Service uses a continuously updated list of known bad elements and scans devices connected to the Security Fabric to identify compromised devices for immediate action.
   
• FortiSandbox ATP for Amazon Web Services, available as on-demand and BYOL, allows organizations to defend against advanced threats natively in the cloud, working alongside network, email, endpoint and other security, or as an extension to their on-premises secure architecture.

Email & Web Applications:

• FortiMail now supports the new FortiGuard VOS and CDR Services. These new services prevent the spread of fast emerging attacks and extract active content to thwart attacks using embedded code execution.
   
• New widgets provide a comprehensive, centralized view of all email and web applications on a network, with advanced threat protection integrated into the apps within the Fabric.

Security Management & Analytics:

• New Incident Response (IR) lifecycle capabilities across the Security Fabric allow users to automate responses based either on predefined triggers (system events, threat alerts, user and device status) or through direct ITSM integration. Response methods such as quarantine, notifications, configuration adjustments, and custom reports provide organizations with real-time control of their workflow environments.
   
• Automated attack surface hardening feature provides recommendations and trending data on security compliance and best practice adoption, with benchmarking that ranks organizations against similar firms in terms of size, industry and region.

Unified Access:

• With FortiOS 6.0, integrated security in Fortinet switches and wireless access points enables automation of security response to events, such as quarantine, segment or block, when an infected switch or access point is in violation of a configured policy.

Business Precise Segmentation Delivers Foundation for Intent-Based Network Security
Fortinet introduces business precise segmentation through tagging, delivering the building blocks enterprises need to move towards intent-based network security. Organizations can tag devices, interfaces and objects at the business, entity, and network level and set global policies for automatic enforcement when new objects are created on the network. This level of tagging is foundational to intent-based network security architecture as it enables business precise segmentation, automated management and control of all network elements.

Fortinet Accelerate 18 Global Partner and User Conference
Fortinet also announced today at its annual global partner and user conference, Accelerate 18, its FortiGuard Artificial Intelligence (AI) advanced threat detection system.

Supporting Quotes
“We know our customers demand reliability, speed and a high level of service. We chose Fortinet in our move to an SD-WAN based network because of their combination of cutting-edge networking capabilities and world-class security, all through one management interface for both LAN access and SD-WAN. And most importantly, with Fortinet’s Security Fabric, we know we’ll stay protected against evolving security risks from the local area network to the cloud, thanks to proactive threat detection and mitigation. With Fortinet as our partner and its commitment to security innovation as demonstrated with its FortiOS 6.0 release, we know we’ll have secure power for today and be powerful enough for tomorrow.”
- Jonathan Merrell, chief information officer at Alorica

“Our customers’ already find managing their IT environments a challenge.  With deployment of multi-cloud environments, technologies like SD-WAN making waves in the industry, and the influx of IoT devices onto corporate networks, the task of management is only increasing in complexity. Ensuring consistent visibility, effective control, and seamless management across these ever-expanding environments has become a top priority for many IT leaders.  Fortinet is a leader in the security space, and a trusted partner, who brings a high level of value to the equation with their unique Security Fabric Architecture approach; an architecture which allows for unification of management panes, and integration into not just Fortinet technology, but third party technologies as well. With their latest release of FortiOS 6.0, we can now more effectively meet the evolving demands of our customer base, by providing technologies that enable more advanced, integrated and certainly automated security capabilities into their dynamic environments.”
- Josh King, director of Security Solutions at Carousel Industries

“Using a single partner for integrated protection across multiple threat vectors, from public cloud workloads to email SaaS applications, is a key priority for ShipServ. Fortinet is an all-in-one cyber security company with a common, intuitive security management interface across all the Fortinet Security Fabric solutions, making it much easier to support. Protecting a hybrid cloud and on-premise environment can be very complex and we couldn’t achieve this level of integrated, automated security without the Fortinet Security Fabric solutions we’ve implemented.”
- Dominic Aslan, vice president of IT operations at ShipServ

Additional Resources

• Blog: Executive Insights: The Third Generation of Security is Here, by Ken Xie 
• Blog: Digital Change Requires a New Approach to Security, by Michael Xie
• Blog: Innovation Insights: Our Security Fabric Vision is Reality, by John Maddison
• Follow Fortinet on Twitter, LinkedIn, Facebook and YouTube.  

*Gartner Press Release, “Gartner Survey Shows Digital Business Is Turning CIOs Into Business Leaders,” 7 November 2017. https://www.gartner.com/newsroom/id/3824763.

資料來源:
https://www.fortinet.com/corporate/about-us/newsroom/press-releases/2018/third-generation-network-security.html

Fortinet Security on the Google Cloud Platform: The Future is Multi-Cloud

Fortinet Cloud Security Now Available Across Top Five Cloud Providers 

We’re excited to announce that our flagship FortiGate virtual machine is now available for Google Cloud Platform (GCP) through the Cloud Launcher marketplace. The FortiGate VM helps Google Cloud customers securely achieve the scale and elasticity of the public cloud with the integrated security, control, and visibility of on-premises infrastructure. This announcement also marks the first time that a single enterprise firewall solution is available across the top 5 cloud providers.

Protecting corporate and consumer data and users is critical, not just for those organizations adopting cloud computing models, but for our increasingly Internet-connected lives. Which is why providing critical firewalling, intrusion prevention, and other Layer 7 threat protection for the users of Google’s infrastructure-as-a-service (IaaS) and PaaS platforms – one of the top tier public clouds being used by leading enterprises and startups today – is critical.

Google Cloud Platform has been one of the pioneers and innovators in cloud computing, with key innovations such as per-second billing, container services, and machine learning.  All of these serve to enhance the scalability and elasticity of the cloud, and are helping to drive and accelerate digital transformation and digital business initiatives in enterprises large and small.  Also noteworthy is that Google Cloud was one of the fastest-growing public clouds in 2017, in year-over-year percentage terms, increasing their enterprise penetration by 50% compared to 2016. 

As public cloud adoption increases, and organizations gain confidence in migrating workloads and applications to the public cloud, they have begun to aggressively adopt a multi-cloud model for their workloads and infrastructures because they are choosing to use more than one IaaS/PaaS provider. In fact, a recent survey found that enterprises now use an average of 1.8 infrastructure-as-a-service (IaaS) clouds, while another discovered that companies use an average 16 cloud-based software-as-a-service (SaaS) applications to help run their business. While these organizations often leverage one provider for specific functionality and another for location or cost, often choosing to use the right cloud for the right application, cloud diversification also provides a measure of redundancy, which also helps enterprises meet their business continuity commitments while avoiding cloud vendor lock-in.

Of course, migrating to a multi-cloud model raises additional security concerns for many organizations. Enterprises already grappling with securing their hybrid cloud environments, i.e. both on-premises data centers and public clouds, now have to deal with an expanded digital attack surface that spans across multiple IaaS clouds. Furthermore, they also need to consider their multiple SaaS application providers as part of their multi-cloud model as well, as SaaS is really just another form of public cloud with enterprise data in a hosted and shared multi-tenant environment.

While many cloud providers like Google have a variety of security measures in place, they generally apply to the security of the cloud itself. Subscribers usually bear the responsibility for their activities in the cloud, especially when data and workloads span multiple cloud environments. Which is another reason why this latest Fortinet announcement is an important milestone: it marks the first time that a single enterprise firewall has been made available across all five top public cloud platforms!

Fortinet is proud to be unique in offering the same FortiGate security in the marketplaces of ALL of the top public cloud platforms of choice, including single pane-of-glass management and orchestration through the Fortinet Security Fabric, to consistently protect the entire digital attack surface, including physical, virtual, and multi-cloud environments.

Read the full news release online.

Download our paper on securing dynamic cloud environments.

 

 

by Warren Wu  |  Feb 05, 2018  |  Filed in: Business and Technology

資料來源:
https://blog.fortinet.com/2018/02/05/fortinet-security-on-the-google-cloud-platform-the-future-is-multi-cloud
 

Why the Fortinet Security Fabric Is the "Secret Sauce" for Managed Security Services Providers

To cut to the chase, the technical features of Fortinet solutions are only half the story when it comes to the Fortinet Security Fabric's unmatched ability to deliver managed security services. Its secret sauce for managed security services providers (MSSPs) is really about adaptability, integration, and automation, as expressed through six properties of Fortinet-based managed security solutions:

1. Security Control Breadth. MSSPs are often required to combine offerings from several different security manufacturers to create an effective defense. This can be an expensive and difficult prospect to scale, especially when it requires building and maintaining custom tools that bridge the gap between separate solutions. The Security Fabric provides broad capabilities for defense across the attack surface from a single vendor, which reduces support costs and complexity.
2. Single-Pane-of-Glass Visibility and Control. MSSPs and their clients can see and control all of their significant security vital signs across their infrastructure from a single, central interface. This unified visibility and control function extends beyond Fortinet-branded elements to include third-party security solutions integrated into the Security Fabric, as well as customer infrastructure.
3. Shared Threat Intelligence and Automated Security Updates. Sharing threat intelligence between different Fortinet security technologies through telemetry reduces enterprise-wide response times while expanding breadth of coverage. Consolidating the update process speeds the change cycle, improves thoroughness and first-pass-success levels, and builds greater confidence that desired changes have in fact taken hold on remediated assets.
4. Single Network Operating System. Service providers can use a common language to configure, control, and customize Fortinet solution elements.
5. Native Multi-Tenancy. The Fortinet Security Fabric treats multi-tenancy as a matter of course, making it easier to set up and administer multi-client solutions while maintaining assured client confidentiality and compartmentalization.
6. Scalability. Along with multi-tenancy, MSSPs can deliver solutions for client infrastructures of any size, from small-medium businesses to global multinational enterprises.

Note that four of the six MSSP secret sauce ingredients share “single” as a common theme. The “single” theme enables high degrees of process consolidation and unification. This reduces redundant wheel spinning in solution operations, increases operator/administrator productivity and effectiveness, and enables greater clarity of action in solution operations processes.

When MSSPs tap the varied possibilities offered by the Fortinet Security Fabric, a number of service outcomes emerge. These include:

Increased Situational Awareness. The ability to see what’s going on in an infrastructure in a near real-time basis serves as a precondition for detecting, diagnosing, and remediating behavioral anomalies that signal malfeasance in an infrastructure. This is increasingly important in a rapidly evolving threat environment where the most dangerous attacks are the ones that no one has seen before.

Broad Solution Reach. Native multi-tenancy and scalability work together to enable solutions for client infrastructures that cover private and public cloud environments, Internet of Things (IoT) devices and networks, and everything in between (e.g., data center, endpoint, mobile, etc.).

Rapid Attack Response. Today’s exploits can infiltrate an infrastructure, do their damage, and then disappear within minutes. Unfortunately, the vast majority of infrastructures suffer from detection and response latencies that are measured in weeks, months, or even years. Needless to say, radically stepping up the speed of detection, including inspecting secure sockets layer (SSL) traffic, and response is critical to enabling effective cybersecurity solutions.

Pervasiveness. Defenders need assurances that changes and updates execute quickly and completely, both on dedicated security solution elements and protected infrastructure. Incomplete execution of changes and updates can create unknown coverage gaps. Defenders can also waste a lot of time and resources re-validating and re-installing changes that should have executed when they were first distributed.

Inherent Security. At the very least, security solutions should never introduce new points of vulnerability into an infrastructure, whether through sloppy user access processes or unintentional backdoors. More positively, MSSP managed elements should be architected to facilitate least-privilege approaches to solution sign-on and resource access.

Developmental Headroom. In the here-and-now timeframe of MSSP design, implementation, operation, and maintenance solution elements should be easily adapted to meet customer requirements. Longer term, security solutions should anticipate the need to keep pace with dynamic (and often surprising) changes in the threat environment.

For clients of MSSPs, these service outcomes contribute to more cost-effective solutions and higher returns-on-expenditure. For MSSPs, these benefits translate to competitive advantages in winning new business, client satisfaction, and optimal profitability.

There’s one final X-factor that sets the course for MSSP solutions that use the Fortinet Security Fabric. Fortinet backs MSSPs with a strong partner program that we actively evangelize to customers and prospects. From the very beginning, Fortinet has demonstrated an unwavering commitment to a partner-centric sales and service business model and serves as a pillar of its customer value proposition.

With the Fortinet Security Fabric at the foundation of their strategy, MSSPs have a tremendous opportunity to enable their clients to turn security from an inhibitor of digital transformation to an enabler. For more information on how MSSPs can ride the service wave of digital transformation, check out our white paper, “How Digital Transformation Is Impacting MSSPs.” It’s truly an exciting time for MSSPs.

 

by  Stephan Tallent  |  Jan 30, 2018  |  Filed in: Business and Technolog

資料來源:
https://blog.fortinet.com/2018/01/30/why-the-fortinet-security-fabric-is-the-secret-sauce-for-managed-security-services-providers

 

 

 

 

Fortinet Certified by ICSA for Advanced Threat Defense

The start of 2018 provided an important reminder about the duality of cyber attacks. On the one hand, the Spectre and Meltdown vulnerabilities highlight yet again that there will always be new ways for cybercriminals to enter organizations. On the other, frequent news of data loss at businesses or government organizations reminds us that existing avenues of attack – like email – rarely go away. In fact, you might recall that in the 2017 Verizon Data Breach Investigations Report (DBIR) the most common attack vector, responsible for 66% of installed malware, was in fact email.

That’s why Fortinet continues to urge organizations to look closely at their email security effectiveness, and respected analysts note that “Advanced threats (such as ransomware and business email compromise) are easily bypassing the signature-based and reputation-based prevention mechanisms that a secure email gateway (SEG) has traditionally used.” They then recommend that organizations “supplement gaps (if replacement is not an option) in the advanced threat defense capabilities of an incumbent SEG by adding a specialized product that is tailored for this purpose.”

The challenge is that most all email security vendors say the same thing: “99.9% catch rate, no false positives, easy to manage” and so forth, which is why Fortinet is firmly committed to regular participation in independent testing. Consider, for example, the Advanced Threat Defense certification testing conducted by ICSA Labs.

For much of this year their sample set, collected from in-progress campaigns each quarter, has contained a healthy dose of ransomware and a common technique of compressed archives.

And Fortinet Advanced Threat Protection closed out the year by demonstrating 100% detection with 0% false positives against these advanced email threats. You can see the full results here.

Specific results aside, the true importance of this analysis is that:

1. ICSA runs one of only two independent and recurring tests of email security effectiveness that I know of. (The other is run by Virus Bulletin.)
2. ICSA has been running this test quarterly for more than a year, and only two solutions (kudos to Trend Micro as well) have earned their certification for Advanced Threat Defense for Email.
3. Fortinet views this and similar independent testing as a critical decision making resource for customers, as well as an important input process to help us continually improve our products.

Late last month, Fortinet released a new version of FortiMail. It includes improvements to previous enhancements, like our Virus Outbreak Service that speeds protection against emerging cybercriminal campaigns (that incidentally came out of findings from ICSA testing), as well as significant new features like Content Disarm and Reconstruction. This capability effectively neutralizes email attacks that embed malicious code into otherwise benign document formats by removing the active content and then delivering a safe attachment. To learn more about Fortinet’s FortiMail secure email gateway offering, please visit our product resource center.    

Going forward, I hope that all organizations are able to keep their two eyes on the duality of the threat landscape, both the brand new as well as the existing and recurring/morphing. And that they will leverage the insights and resources available through truly independent third-party testing to guide them through the process of selecting or replacing essential security tools.

Read important takeaways about the threat landscape in our Global Threat Landscape Report. Also, view our video (above) summarizing valuable data points from our most recent report.

Sign up for our weekly FortiGuard intel briefs or to be a part of our open beta of Fortinet’s FortiGuard Threat Intelligence Service.

For more information, download our paper and learn about the top threats that enterprise security leaders are being forced to address and the security approaches to evalutate to protect against them.

 

by David Finger  |  Jan 16, 2018  |  Filed in: Business and Technology

資料來源:
https://blog.fortinet.com/2018/01/16/fortinet-certified-by-icsa-for-advanced-threat-defense
 

Fortinet Security Fabric Earns NSS Recommendation for Breach Prevention

NSS Labs recently unveiled a new test of Breach Prevention System (BPS) technologies in December 2017, designed to assess the ability of security solutions to not only simply detect, but also actually prevent unknown (and little known) threats within 15 minutes. This is a critical capability for organizations concerned with today’s sophisticated threats, especially for IT teams that are accountable for securing business initiatives and yet are understaffed to provide continuous monitoring, investigating, and manual response to security incidents.

What this new testing process found (among other things) is that the Fortinet Security Fabric – with its integration of advanced threat detection into a broad set of security solutions deployed across the distributed attack surface – dramatically changes the game from traditionally time consuming detection and response to automated and highly granular detection, prevention, and response. Specifically, the Fortinet solution – comprised of FortiSandbox, FortiGate, FortiMail, and FortiClient – demonstrated a block rate of 99.6%, with 0 false positives.  Combined with outstanding performance and exceptional TCO, Fortinet earned another NSS Recommended rating. This Recommended rating for BPS is in addition to existing 2017 NSS recommendations for NGFW, DCFW, WAF, NG-IPS, BDS, and AEP.

Threats Evolve

Failure is the Mother of Success. How true that is when applied to cyber threats. Every failed and half-baked cyber campaign contributes to the evolution of these attacks, both in terms of sophistication and persistence. Which is why attacks today are so difficult to detect and repel. We are now increasingly seeing complex, exploit-driven malware combined with automated, self-evolving, and persistent attacks delivered via a wide range of attack vectors, including phishing, malvertising, worms, infected watering-holes, and more to establish a toehold within an organization. In fact, Verizon’s’ 2017 DBIR shows that 99% of all malware are distributed over email and web. Combine this with a rapidly evolving network ecosystem of clouds, mobile devices, IoT, and applications and today’s understaffed IT Security teams have their hands full with managing a multitude of disparate security policies, isolated security products, management consoles, and alerts. It can certainly be overwhelming at times. To effectively respond, defense systems need to evolve as well.

So Does Technology

Fortinet built the Security Fabric to augment an organization’s security architecture to correlate threat intelligence to quickly identify sophisticated and highly evasive threats, simplify threat response management, and accelerate threat response times. This begins by providing protection across a broad set of threat vectors through the integration of Fortinet and non-Fortinet products so they can share local and global threat intelligence through a central intelligence hub. Second, fully automating the prevent-detect-mitigate lifecycle across the entire attack surface not only provides an effective mechanism to counter even highly automated attacks, it also goes a long way towards solving the cyber security talent shortage.

Breach Prevention vs. Detection

The advent of this new group test from NSS is a reflection of the fundamental maturation of advanced threat capabilities, requiring security to expand beyond detection to detection and prevention. Over the past four years of BDS testing we have seen solutions improve significantly in terms of accuracy and efficacy as well as in affordability. The maturation of this technology is reflected in the results of this new Breach Prevention test.

Keep in mind, an organizations security posture determines how prevent-detect-mitigate threat response lifecycle is applied. There are organizations that have a higher risk tolerance while focusing more on user productivity/experience and there are others that are more risk adverse while fully aware the small burden of inconvenience placed on its users. Fortinet ATP solutions such as email and endpoint security integrated with sandbox by default allow users to run their day-to-day applications and based on sandbox detections to automatically apply mitigating actions. However, a good security practice to eliminate "patient zero", is to allow pre-inspection before users have access and this is easily enabled via one-click “hold for sandbox” option in our solutions.

An important nuance between BPS and BDS

The BDS group test measures the detection of exploits, malware and evasions within 24 hours, which is used to calculate the security effectiveness in the BDS Security Value Map (SVM). The BPS group test, on the other hand focuses on blocking exploits, malware and evasions within a 15 minute window that is used to calculate the security effectiveness in the BPS Security Value Map (SVM). Furthermore, the BPS total cost of ownership calculations factors in samples that were additionally detected by the solution since it helps reduce the operational burden associated with the cost of remediating infections and breaches.

BDS v4.0 Test methodology

BPS v1.1 Test methodology

Proven Technology.

For this new, rigorous BPS test, Fortinet submitted FortiGate, FortiMail, FortiClient, and FortiSandbox, which are all part of the Fortinet Security Fabric solution. Based on the default configurations of our solution, the NSS Labs BPS result highlights include:

• 99.6% Block rate
• 100% in blocking and additionally detecting across all malware categories except HTTP (at 99.8%)
• 0% for False Positives
• Low 3-year TCO

FortiSandbox had already proven itself effective in the 2017 BDS test with a 99% Breach Detection rate, earning a Recommended rating four out of four years. And now, integrated with other Security Fabric components – namely, FortiGate, FortiMail, and FortiClient – it has achieved another NSS Recommended award with this latest 2017 BPS test. This latest accolade, combined with our growing list of Recommended awards for other Fortinet solutions, is a testament not only to Fortinet’s commitment to independent testing, but also an assurance that we are committed to continually evolving Fortinet’s Security Fabric technologies to enable organizations to securely achieve their digital transformation objectives.

Report: The full BPS report can be downloaded here.

Learn more about Fortinet’s Security Fabric. See how customer’s benefit from adopting the Security Fabric. To understand how Fortinet’s ATP solution works, read more.

Also, for more information, download our paper and learn about the top threats that enterprise security leaders are being forced to address and the security approaches to evalutate to protect against them.

資料來源:
https://blog.fortinet.com/2018/01/08/fortinet-security-fabric-earns-nss-recommendation-for-breach-prevention

New FortiGate 300E and 500E, the Next Era of NGFW Has Arrived

The sheer amount of data being communicated and processed around the world continues to grow at a staggering rate. The Internet stands as the primary driver of the global data explosion. But newer technologies that ride on the Internet, such as cloud computing, X-as-a-Service offerings, and Internet of Things (IoT), means that more sensitive and business critical information than ever is in motion within and beyond the traditional boundaries of individual enterprise IT infrastructures.

Security Challenges of SSL Encryption

As a result of this dynamic expansion and reach of information, encrypted Secure Sockets Layer (SSL) communications has become the most-used way for enterprises to protect their data from unauthorized exposure. In fact, at this writing, SSL encrypted communications accounts for 60% of data flowing in and among enterprise IT infrastructures. Unfortunately, as the percentage of businesses and government agencies adopting SSL encryption grows, the more adversaries also use it for infiltration and exfiltration—sneaking in malware, and tunneling stolen and confidential data out—of enterprise infrastructures and networks.

The standard remedy to prevent the adversarial abuse of SSL communications is to inspect SSL encrypted packets for exploits, malware, and purloined data. Currently, up 10% of mid- and large-scale enterprises practice some degree of encrypted data packet inspection as a security measure, with this number expected to rise to at least 50% by the early 2020s. While packet inspection has become a mainstream security technology, Next Generation Firewalls and other devices performing this function can a) be overwhelmed by the amount of traffic they need to handle, b) become bottlenecks due to the resource-intensive process of inspecting encrypted traffic that degrades overall infrastructure performance, and c) add yet more complexity and expense to the IT mission.

End-to-End Infrastructure Visibility Beyond Applications

The ever-expanding attack surface also makes it increasingly difficult for organizations to maintain transparent visibility and control across all of their assets. The Internet of Things (IoT), which is difficult to defend and protect, complicates an already difficult undertaking internally—particularly considering the exponential growth rates that are projected for them. At the same time, cloud adoption, coupled with the fact that multi-cloud services are quickly becoming commonplace, further extends the potential attack surface outside of the traditional network perimeter.

As organizations move to address these new security challenges, end-to-end, transparent visibility and control emerges as both a real necessity and a real problem. They must be able to monitor security across all of their assets—both those internal and those external—in real time, while also managing security policies and controls from a single pane of glass. Silo-based security infrastructures that leverage isolated point products or platforms lack the capabilities an integrated, automated security fabric offers.

New FortiGate 300E and 500E – Redefines Next Generation Firewalls

Organizations require a robust and extensible Next Generation Firewall (NGFW) solution designed to address this new security landscape. Fortinet is tackling these challenges head on with the release of the FortiGate 300E and 500E NGFW appliances.

Some of the specific security requirements met by the FortiGate 300E and 500E appliances include:

Fast and Agile

The FortiGate 300E and 500E firewalls are incredibly fast. The secret is Fortinet’s purpose-built CP9 content processor and parallel path processing that significantly outmatch competing products that are based on off-the-shelf components, to deliver best-in-class threat protection and SSL inspection performance. It also includes innovative collaborative learning capabilities, giving it the ability to share information and workloads with other security devices and systems in the same network, while also remaining visible and manageable through a single pane-of-glass for communications and control. This enables organizations to detect and block malevolent content before it can attach itself to vulnerable assets.

Security Efficacy

Advanced threat protection is critical in stopping zero-day exploits. FortiGuard Labs has repeatedly demonstrated its thought leadership in this critical area, and continues to excel in third-party tests (see below). In addition, with Cloud FortiSandbox seamlessly integrated into the FortiGate 300E and 500 firewalls, organizations have the ability to activate sandboxing to quickly and easily detect unknown threats.

SD-WAN Ready

The FortiGate 300E and 500E appliances deliver capabilities that meet new requirements driven by the transformation of branch network traffic and Software-as-a-Service (SaaS) application utilization. Specifically, they include key networking features such as an efficient wide area network (WAN) Path Controller and a dynamic SaaS-based database that enables secure SD-WAN.

Price-Performance Advantages

Price-performance is an important requirement for nearly every organization today. This means that a solution must deliver maximum threat protection performance, reliability, and manageability at the lowest possible total cost of ownership (TCO). To this end, the FortiGate 500E delivers 10GbE connectivity with 4.7 Gbps threat protection and 6.8 Gbps SSL inspection throughput. Pound for pound, this is the best price-performance capability on the market today.

FortiGate 300E and FortiGate 500E, Part of the Fortinet Security Fabric

Like all of Fortinet’s solutions, the FortiGate 300E and 500E seamlessly integrate into the Fortinet Security Fabric, making it extremely easy for organizations to integrate them into their larger security framework environments. They also share data and balance workloads to maximize seamlessness and timeliness when defending infrastructures from attack. Importantly, this means that user of Fortinet solutions can extend comprehensive, uniform controls across any environment.

Don’t Take Our Word for It

Gartner placed Fortinet in the “Leaders” Quadrant in its 2017 Enterprise Firewall Magic Quadrant report. Read FortiGate Enterprise Network Firewall customer reviews. And Fortinet’s FortiGate is one of the only vendors to receive “Recommended” ratings from NSS Labs NGFW group test for four consecutive years.

What makes the FortiGate 300E and FortiGate 500E firewalls winners? The real measure of their success is in the eyes – and experience – of their customers and end users. To that end, in a future post I will report more from the front lines of customer experience with the FortiGate 500E and FortiGate 300E products. In the meantime, I recommend a visit to the Fortinet NGFW product pages for a full overview of these and other members of the FortiGate product family. You can also download the FortiGate 300E and FortiGate 500E data sheets from these embedded links.

 

by Nirav Shah  |  Nov 13, 2017  |  Filed in: Business and Technology

資料來源:
https://blog.fortinet.com/2017/11/13/new-fortigate-300e-and-500e-the-next-era-of-ngfw-has-arrived

When It Comes to Intrusion Prevention, FortiGate IPS Stands Alone in the IPS Market

Malicious Intrusions Remain a Problem—and One That is Growing

Malicious intrusions are a big problem. 42% of security leaders in a recent Forrester Consulting study said they have experienced a security breach during the past two years. Another study by ISACA found that 80% of security leaders believe their organization will experience a security attack this year. This projection makes sense, considering that over half of those same security leaders believe the number of attacks is going to increase.

While defense and protection most certainly need to be tied to advanced threat detection and mitigation capabilities, intrusion prevention systems (IPS) still remain a critical detection linchpin in an enterprise’s security strategy. But to be effective, IPS should be integrated into the broader security fabric, giving organizations visibility into users, devices, endpoints, and applications across the distributed and elastic network of physical and virtual ecosystems. This is exactly our approach with the FortiGate IPS, which serves as a critical component of the Fortinet Security Fabric.

NSS Labs “Recommended” Rating for FortiGate IPS

Fortinet takes industry recognition and evaluations seriously, and we were very pleased when in their 4th Next Generation Intrusion Prevention System (NGIPS) Test report and Security Value Map, NSS Labs rated Fortinet FortiGate IPS as “Recommended,” their somewhat understated way of according a product their highest rating. For organizations concerned about intrusion prevention, the FortiGate IPS is a solution you should seriously consider. Let’s take a look at some of the findings from NSS Labs.

To begin, the NSS Labs NGIPS test is tough, encompassing more types and methods of attack and evasion than any other IPS test we’ve seen. Compared to other IPS solutions that were tested, the FortiGate IPS surpassed most other vendors, blocking 100% of all evasions thrown at it. In addition to being one of the most effective IPS solutions, FortiGate was also rated as the most cost-effective IPS solution NSS Labs tested, with a total cost of ownership of approximately $4 per Megabits/Second (Mbps) of throughput.

FortiGate IPS: Engineered to Be the Best

If this sounds a little too good to be true, there are solid reasons behind the FortiGate IPS solution’s outstanding performance. For example, Fortinet has engineered custom silicon-based security processors for the FortiGate line of security appliances and integrated them in a unique parallel processing architecture to speed deep and thorough traffic inspection and intrusion detection functionality. Specifically, Fortinet’s network processors accelerate assembly and normalization, while our content processors speed content inspection and decryption. Architecting these elements to perform packet processing, policy management, and content inspection in parallel not only results in unmatched raw performance, but it gives our designers plenty of headroom to keep the FortiGate IPS line at the forefront of the industry in the years ahead.

Unknown Becomes Known in the IPS Space

While we are (as yet) not the most well-known vendor in the IPS space, we are gaining good customer traction for our FortiGate IPS systems. For example, a global automobile manufacturer recently replaced an incumbent standalone IPS vendor’s solution with FortiGate IPS. A large aerospace manufacturer in Europe seeking greater flexibility and performance also recently elected to use FortiGate IPS to replace its longstanding traditional IPS products. Stories like this are becoming more and more common as organizations see the advantages that Fortinet’s IPS brings to them in terms of power, performance, and efficiency.

We’re clearly gaining ground in the IPS marketplace, but it’s been a quiet, steady rise. While I couldn’t say we’re taking the world by storm, we have been stealthily delighting customers with outstanding performance combined with a compelling total cost of ownership, which are clearly making a name for Fortinet in the IPS arena—not to mention helping organizations protect their systems and information from bad actors around the globe.

For more information on the NSS Labs Test Report and Security Value Map, download a copy today.

by Nat Smith  |  Nov 07, 2017  |  Filed in: Business and Technology

資料來源:
https://blog.fortinet.com/2017/11/07/when-it-comes-to-intrusion-prevention-fortigate-ips-stands-alone-in-the-ips-market

Fortinet extends security fabric to IIoT

Fortinet has extended its FortiGuard threat intelligence service to the industrial IoT (IIoT).

The new FortiGuard Industrial Security Service (ISS) builds on the threat intelligence services of FortiGuard Labs by providing application control and defensive signatures specific to critical infrastructure and industrial sector organizations.

The company is particularly targeting the utility, oil and gas, transportation, and manufacturing sectors.

FortiGuard ISS protects the most widely-used industrial control system (ICS) and supervisory control and data acquisition (SCADA) devices and applications. The service provides vulnerability protection, visibility and granular control over ICS and SCADA systems and is backed by real-time threat intelligence updates.

Enterprise and consumer demand has created an explosion in the number of IoT devices connecting to global networks. McKinsey estimates that 20 to 30 billion IoT devices could be connected globally by 2020, up from 10 billion to 15 billion devices in 2015. However, as devices proliferate, security risks also increase.

Traditionally, commercial and industrial networks and their IoT devices have operated in isolation, but the mainstreaming of things like smart cities and connected homes have begun to merge these devices within local, national and global infrastructures.

This is requiring organizations to rethink how they secure increasingly converged IT, OT and IoT networks and devices. Integrating distinct security tools into a unified Security Fabric enables organizations to collect and correlate threat intelligence in real time, identify abnormal behavior and automatically orchestrate a response anywhere across this complex IoT attack surface.

First published in NetworksAsia

資料來源:
https://www.telecomasia.net/tag/industrial-iot

FortiCloud Now Manages FortiGate UTM Appliances

FortiCloud Now Manages FortiGate UTM Appliances

by Peter Newton  |  Aug 01, 2017  |  Filed in: Industry Trends

 

We are proud to announce that full cloud-based management will be available on August 14th for our FortiGate UTM products through the FortiCloud services.  We have seen impressive growth in the adoption of our FortiCloud solution over the past several years that has validated the value of a cloud management model for Fortinet customers.  FortiCloud started 10 years ago as a cloud-based solution for log storage and analytics.  Over the years, we’ve improved those analytics and added the ability to mass deploy devices (FortiDeploy), independently manage wireless access points, discover zero day threats (FortiCloud Sandbox), and apply big data analysis to identify infections (Indicators of Compromise). The result is a powerful platform that allows customers to add, scale, and remove features and capabilities as their needs change. 

Over 280,000 security devices are now supported through FortiCloud management from data centers located in Europe, North America and Asia.  And now, with the new management capabilities that have just been added to this Software-as-a-Service (SaaS) platform, customers will be able to deploy, manage and service the Fortinet Secure Fabric architecture from the cornerstone of their network security foundation, the FortiGate UTM appliance.  By adding management of FortiGate UTM appliances to FortiCloud, customers can now manage their entire threat surface from the cloud. 

These new FortiCloud capabilities are ideal for helping Small and Medium Businesses (SMB) manage and secure their expanding networks. SMB companies are the leading market for UTM appliances and this new, easy to use, and efficient management method for FortiGate appliances aligns with their needs. Cloud management offers flexibility, low cost of entry, and scalability. The FortiCloud service also provides an intuitive interface to keep the learning curve short for users. 

This solution is also ideal for Managed Service Providers who need to support and manage the security solutions deployed across multiple customers or tenants. With the power of the cloud, MSP IT administrators can now access their customers’ Fortinet-based networks from any browser on any device, from anywhere, and at any time. This means they can do things like configure new sandboxing capabilities without having to visit their customer’s site. Fortinet switches and wireless access points can also be remotely configured, troubleshot, or upgraded efficiently and effectively through the cloud. And by using our MultiTenancy capabilities, MSPs can monitor all their customers through a single pane of glass, knowing that if they need to further optimize a customer’s network, it is simply a few clicks away, not an hour’s drive.

As you can see, there is a lot to be excited about this. But this is just the beginning. Stay tuned for additional announcements about the growing capabilities and features available on the FortiCloud platform. We are committed to continued investment in our SaaS solutions and in keeping Fortinet UTM appliance the most popular SMB security solution in world. Read the full news release from today here. 

by Peter Newton  |  Aug 01, 2017  |  Filed in: Industry Trends


資料來源:
https://blog.fortinet.com/2017/08/01/forticloud-now-manages-fortigate-utm-appliances