Fortinet FortiOS 5 Presentation

1 CONFIDENTIAL – INTERNAL ONLY 1 Fortinet ConfidentialMay 2, 2023

Introducing FortiOS 5More Security, More Control, More Intelligence

2 CONFIDENTIAL – INTERNAL ONLY

Network TrendsWired Connectivity Moving Beyond 10GUbiquitous Wireless ConnectivityMobile Devices EverywhereVideo and Audio ContentIPv6 a Reality

Background


Security TrendsVisibility of TrafficAccuracy of DetectionPolicy ExplosionLog ExplosionThreats Scale

Background


No ChangeBudgetDepartment Size

Background

5 CONFIDENTIAL – INTERNAL ONLY 5 Fortinet Confidential

FortiOS 5

6 CONFIDENTIAL – INTERNAL ONLY 6 F O R T I N E T C O N F I D E N T I A L

FortiOS 5

More SecurityMore SecurityMore ControlMore ControlMore IntelligenceMore Intelligence


Over 150 New Features & Enhancements

Fighting Advanced Threats--------------------------------------Client ReputationAdvanced Anti-malware Protection

More Security

Securing Mobile Devices------------------------------------Device IdentificationDevice Based PolicyEndpoint Control

More Control

Making Smart Policies--------------------------------------Identity Centric EnforcementSecured Guest AccessVisibility & reporting

More Intelligence

FortiOS 5 Highlights


Fighting Advanced Fighting Advanced ThreatsThreatsClient ReputationAdvanced Anti-malware Protection

More Security


Ranking

Client Reputation

Identification

Policy Enforceme

nt

Multiple Scoring VectorsReputation by Activity Threat Status

Real Time, Relative,Drill-down, Correlated

Identify potential … zero-day attacks

Score Computati

on

Zero Day Attack Detection


Multi-pass Filters

In-box Enhanced AV Engine Cloud Based AV Service

Hardware Accelerated& Code optimized

Real time updated, 3rd party validated Signature DB

Local LightweightSandboxing

Behavior / Attribute Based Heuristic Detection

Application Control – Botnet Category

FortiGuard Botnet IP Reputation DB

Cloud BasedSandboxing

Improves threat …. … detection

Advanced Anti-Malware Protection


Client ReputationThreat profiling to quickly identify most suspicious clientsEffective zero-day attacks detection

!

Advanced Anti-malware ProtectionMutilayered: Combines best-in class local AV Engine with additional cloud based detection systemDetects and block Botnet clients and activitiesImproves malware detection capabilities

More Security


Securing Mobile DevicesSecuring Mobile DevicesDevice IdentificationDevice Based PolicyEndpoint Control

More Control


See It… Control IT

Seamless integration!

BYOD – Device Identity & Policies

Device BasedIdentity Policies

AgentlessAgent based

Device Identification

Access Control Security Application

UTM Profiles

Awareness


Authorized Device

Device Based PolicySecurely adopt BYODSetup different security and network usage policies based on device types

Personal Device

✔DMZ ✔INTERNET

✗DMZ ✔INTERNET

More Control


“Off-Net” Protection

Endpoint Control: FortiClient 5

INTERNET

LAN

OFF

ON

• Client enrolls into the FortiGate and then receives its end point policy. It will receive any updates when connected again.

• Client uses last known security policies and VPN configurations.

1

2


Securing Remote DevicesProtect mobile hosts against malicious external threatsEnforce consistent end point security policies, anywhere all the timeSimplified host security and remote VPN management

Endpoint Control: FortiClient 5


Making Smart PoliciesMaking Smart PoliciesIdentity Centric EnforcementSecured Guest AccessVisibility & Reporting

More Intelligence


Identity = Policy

External Radius Service

Windows AD

Citrix Environment

= M.Jones = = S.Lim = = V.Baker == J.Jackson =

Captive Portal

802.1x

Users identified without additional logins

FortiClient

DMZ

DMZ

Users assigned to their policies

Identity-Centric Enforcement

FSSO Identity based Policies


Single Sign-On and Role Based PoliciesAuthorized network access based on user credentials secure network right at entry pointReuse captured information for security policies unifies security configurations and offers better user experience. Reduce administrative tasks & configuration errors

Marketing, Management

Operation, Staff

✔CMS ✔INTERNET

✗CMS ✔INTERNET

M.Jones

S.Lim

SSID: STAFF

SSID: MGMT

Identity-Centric Enforcement


Temporary Network Access Guest Administration PortalCredential Generation & DeliveryTime Quota

Ad hoc access without compromising security

Integrated Guest Access

Identify and track guest activities Time limits prevent unnecessary exposure to exploits


Network & Threat StatusKnowledge is Power !

Drill-Down StatisticsFilter & SortingObject DetailsContextual Information

Visibility & Reporting


Deep InsightsNew PDF FormattingDrill-downsPer User Summary

FortiManagerFortiCloud

Comprehensive reports

Visibility & Reporting


EnhancementsEnhancementsUsability / WebUIIPv6UTMWirelessFortiGuard Services

Highlights


Usability

Wizards

Improved Policy Editor

Contextual Pictograms

Enhancements


IPv6NAT64 / DNS64IPS (Forwarding Policy)Explicit ProxyHA Session Pickup

DHCP ClientPer-IP Traffic ShapingPolicy RoutingDHCPv6 Relay

Enhancements


UTMSSL Inspection of IPS & App ControlDNS-based Web FilteringCIFS (Flow-AV) & MAPI ScanningSSH proxyDLP Watermarking

Enhancements


WirelessWireless IDSWireless MeshLocal Bridge Mode (Remote sites)SSID & Port Bridging

Enhancements


User NotificationNotify Users in Real-Time• Blocked Applications• Denied Traffic• Quotas• Notifies via FortiClient if Host is Registered

Additional Enhancements


FortiGuard Services

DNS-based Web Filter DB Query

DDNS Service

NTP ServiceBYOD Signature Updates

Geography Updates

USB Modem Updates

Vulnerability Scan DB Updates SMS Messaging

FDN

Real time protection & new services

Enhancements


Supported Platforms

Desktop

Mid Range

3000 Series

5000 Series

FortiGate-VM * Available on patch release


Feature Matrix for Desktop Models

* Requires FMG/FAZ, FortiCloud for Monitoring, available in near future


Services, Licenses & Subscriptions

*Registration Required** Available on selected Models

Included with FortiGate•DNS Service •DDNS Service•NTP Service•2 FortiTokenMobile License*•10 FortiClient Endpoint License*•10 VDOMs License•FortiCloud Service (trial)*

FortiCare Subscription Required•Geography Updates•BYOD Signatures Updates•USB Modem DB Updates•Vulnerability Scan Signature Updates•Firmware Update

+ FortiTokenMobile License + Endpoint License** + VDOM License**

+ SMS Top-up+ FortiCloud Storage Top-up

BOLD: New Offerings


Services, Licenses & Subscriptions

FortiGuard AV Subscription•Botnet IP reputation DB•FortiGuard Analytics Service•Proxy & Flow based AV signatures

FortiGuard Web Filter Subscription•Botnet IP reputation DB•FortiGuard Analytics Service•Proxy & Flow based AV signatures

FortiGuard IPS Subscription•IPS Signature Updates•Application Control Signature Updates

FortiGuard Anti-spam Subscription•Anti-spam Services

BOLD: New Offerings

Fortinet FortiOS 5 Presentation

Devices & Hardware

Transcript of Fortinet FortiOS 5 Presentation