FORTIOS: ENABLING THE FORTINET SECURITY FABRIC€¦ · The Fortinet Security Fabric provides a more...

4
SOLUTION BRIEF FORTIOS: ENABLING THE FORTINET SECURITY FABRIC Control all the security and networking components of your Fortinet Security Fabric with one intuitive operating system. Improve your protection and visibility while reducing operating complexity and saving time with a truly consolidated, next-generation enterprise firewall solution. FortiOS provides the foundation for the Fortinet Security Fabric, with enhanced protection from IoT to the cloud. SECURITY CHALLENGES Organizations today are faced with growing complexity everywhere they turn—from increasingly destructive, advanced attacks to an increasingly large and permeable attack surface to a constantly expanding selection of security products. The transition to a digital business model is requiring networks to evolve rapidly, calling for applications, data, and services to flow faster across an increasingly diverse landscape of users, domains, and devices. As a result, today’s networks and their related security are progressively more borderless. IoT and cloud applications, services, and infrastructure now require organizations to worry about an attack surface that may not even be visible to IT. SECURITY FABRIC APPROACH There are approaches that attempt to use multiple point and platform solutions to address these challenges. But what if instead the data and security elements across all of an organization’s various environments could be well-integrated, cohesive, and coherent, like a seamlessly woven fabric? Such an approach would allow companies to see, control, integrate, and manage the security of their data across their entire organization, even into the cloud, enabling a secure digital business model. Such an approach would also allow security to dynamically expand and adapt as more and more workloads and data are added, and at the same time, easily follow and protect data, users, and applications as they move back and forth between IoT and smart devices, borderless networks, and cloud- based environments. The Fortinet Security Fabric provides a more effective alternative to point and platform solutions. All security components within the security fabric are made available to each other in real time to provide broad, powerful, and automated protection against sophisticated threats. FortiOS is the network security operating system to establish this Security Fabric. NOC/SOC Cloud Partner API Access Client/ IoT Advanced Threat Intelligence Application Network

Transcript of FORTIOS: ENABLING THE FORTINET SECURITY FABRIC€¦ · The Fortinet Security Fabric provides a more...

Page 1: FORTIOS: ENABLING THE FORTINET SECURITY FABRIC€¦ · The Fortinet Security Fabric provides a more effective alternative to point and platform solutions. All security components

SOLUTION BRIEF

FORTIOS: ENABLING THE FORTINET SECURITY FABRIC

Control all the security and networking components of your Fortinet Security Fabric with one intuitive operating system. Improve your protection and visibility while reducing operating complexity and saving time with a truly consolidated, next-generation enterprise firewall solution. FortiOS provides the foundation for the Fortinet Security Fabric, with enhanced protection from IoT to the cloud.

SECURITY CHALLENGES

Organizations today are faced with growing complexity everywhere they turn—from increasingly destructive, advanced attacks to an increasingly large and permeable attack surface to a constantly expanding selection of security products. The transition to a digital business model is requiring networks to evolve rapidly, calling

for applications, data, and services to flow faster across an increasingly diverse landscape of users, domains, and devices. As a result, today’s networks and their related security are progressively more borderless. IoT and cloud applications, services, and infrastructure now require organizations to worry about an attack surface that may not even be visible to IT.

SECURITY FABRIC APPROACH

There are approaches that attempt to use multiple point and platform solutions to address these challenges. But what if instead the data and security elements across all of an organization’s various environments could be well-integrated, cohesive, and coherent, like a seamlessly woven fabric? Such an approach would allow companies to see, control, integrate,

and manage the security of their data across their entire organization, even into the cloud, enabling a secure digital business model. Such an approach would also allow security to dynamically expand and adapt as more and more workloads and data are added, and at the same time, easily follow and protect data, users, and applications as they move back and forth between IoT and smart devices, borderless networks, and cloud-based environments.

The Fortinet Security Fabric provides a more effective alternative to point and platform solutions. All security components within the security fabric are made available to each other in real time to provide broad, powerful, and automated protection against sophisticated threats. FortiOS is the network security operating system to establish this Security Fabric.

NOC/SOC

Cloud

Partner API

Access

Client/IoT

Advanced ThreatIntelligence

Application

Network

Page 2: FORTIOS: ENABLING THE FORTINET SECURITY FABRIC€¦ · The Fortinet Security Fabric provides a more effective alternative to point and platform solutions. All security components

2

SOLUTION BRIEF: FORTIOS: ENABLING THE FORTINET SECURITY FABRIC

BROAD: VISIBILITY AND CONTROL

The Security Fabric, empowered by FortiOS, is designed to cover the entire attack surface. Security solutions deployed across the network cannot stand alone as isolated devices. To secure today’s networks, administrators must have visibility and control across the entire environment, including endpoints, access points, network elements, the data center, the cloud,

and even the applications and the data itself. Combined with dynamic network segmentation that logically separates data and resources, the Security Fabric can cover all attack vectors to discover threats and contain them as they attempt to move from one network zone to the next. Such broad deployment, along with deep visibility and control, aids in compliance, helps monitor internal traffic and devices, prevents unauthorized access to restricted data

and resources, and controls the spread of intruders and malware.

FortiOS 5.6 offers deeper visibility and control throughout the Security Fabric to reduce the attack surface from IoT to the cloud. It offers even more security device visibility, which leads to improved segmentation and the ability to reduce the risk of incidents and their impact.

POWERFUL: ACCELERATED PERFORMANCE

While the Fortinet Security Fabric, empowered by FortiOS, addresses the strategy of intelligence with an aware and open system, it must also be powerful to run the deeper security inspection anywhere across the organization without impacting performance or productivity. It must be able to scale from the smallest branch deployments to the largest, most complex and data-intensive campus and data-center environments—and it must also be available virtually to protect the private,

hybrid, and public cloud. Wherever security is deployed across the environment, it must operate at the speed of the network. Fortinet security solutions are based on the fastest, purpose-built security processors in the industry to reduce the burden on infrastructure, allowing organizations to establish comprehensive security without affecting performance. They also include software optimizations and cloud platform integrations for superior performance in IaaS and PaaS environments.

FortiOS 5.6 enables not only accelerated security processor-based appliances but

also cloud-scale to provide maximum threat protection without affecting performance, even when logging is turned on. FortiOS 5.6 leverages a performance-optimized, security-engine architecture and custom security processors in the FortiGate platform to deliver faster throughput performance—up to 10 times faster than equivalent firewalls from other vendors. With FortiOS 5.6, you have the power to deploy exactly the capabilities and form factor you need for your environment, scaling performance from IoT to the cloud.

Page 3: FORTIOS: ENABLING THE FORTINET SECURITY FABRIC€¦ · The Fortinet Security Fabric provides a more effective alternative to point and platform solutions. All security components

3

SOLUTION BRIEF: FORTIOS: ENABLING THE FORTINET SECURITY FABRIC

AUTOMATED: EFFICIENT OPERATIONS

The Fortinet Security Fabric, empowered by FortiOS, enables a fast and coordinated response to threats, allowing all elements to rapidly exchange threat intelligence and coordinate actions. While perfect prevention is the goal, it is not a reality. The Security Fabric needs to be able to block as much as it can but also respond at the speed of the attacker as needed. Not only does the Fortinet Security Fabric correlate

threat intelligence to determine the level of risk, it also automatically synchronizes a coordinated response. Specifically, the Security Fabric can share intelligence about newly discovered threats, dynamically isolate affected devices, partition network segments, update rules, push out new policies, and remove malware.

FortiOS 5.6 offers more efficient operations with key features like the new Security Fabric Audit, which dynamically assesses each Security Fabric element

and its configuration in order to make recommendations and automate actions that improve security. It also includes enhanced local and global sharing of Indicators of Compromise (IoCs) and a single pane of glass with network operations center (NOC) views to better manage your network. FortiOS 5.6 seamlessly integrates with Fortinet centralized management and offers SIEM APIs for extended management and orchestration.

Page 4: FORTIOS: ENABLING THE FORTINET SECURITY FABRIC€¦ · The Fortinet Security Fabric provides a more effective alternative to point and platform solutions. All security components

SOLUTION BRIEF: FORTIOS: ENABLING THE FORTINET SECURITY FABRIC

Copyright © 2016 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.

GLOBAL HEADQUARTERSFortinet Inc.899 Kifer RoadSunnyvale, CA 94086United StatesTel: +1.408.235.7700www.fortinet.com/sales

EMEA SALES OFFICE905 rue Albert Einstein06560 ValbonneFranceTel: +33.4.8987.0500

APAC SALES OFFICE300 Beach Road 20-01The ConcourseSingapore 199555Tel: +65.6513.3730

LATIN AMERICA HEADQUARTERSSawgrass Lakes Center13450 W. Sunrise Blvd., Suite 430Sunrise, FL 33323Tel: +1.954.368.9990

April 3, 2017

SUMMARY

The transition to an evolving digital business model raises a number of security challenges for an enterprise. As significant trends in computing and networking continue to drive changes across critical business infrastructures, architectures, and practices at a time when the cyber crime ecosystem continues to mature and compliance obligations continue to evolve, organizations are looking for innovative security solutions and indeed new architectures to help them embrace that evolution. The Fortinet Security Fabric, empowered by FortiOS 5.6, is an intelligent framework designed around scalable, interconnected security combined with high awareness, actionable threat intelligence, and open API standards to protect even the most demanding enterprise environments.

Fortinet’s security technologies have earned the most independent certifications for security effectiveness and performance in the industry. The Fortinet Security Fabric closes gaps left by legacy point products and platforms by providing the broad, powerful, and automated protection that today’s organizations require across their physical and virtual environments, and from endpoint to the cloud.

FortiOS 5.6 is the latest version of Fortinet’s network security operating system. It expands the Security Fabric with deeper visibility and control across the breadth of an organization’s entire attack surface, accelerated performance to run the necessary security technologies at any given point of the organization, and more efficient operations through automation that helps quickly identify and resolve security issues.

67823-0-A-EN