Fortinet FortiAI VM
Ensuring availability of network resources

Overview:

FortiAI represents the future of AI-driven breach protection technology, designed for short-staffed Security Operation Center (SOC) teams to defend against various threats including advanced persistent threats through a trained Virtual Security AnalystTM that helps you identify, classify, and respond to malware including those well-camouflaged. FortiAI employs patent-pending* Deep Neural Networks based on Advanced AI and Artifical Neural Network to provide sub-second investigation by harnessing deep learning technologies to assist you in an automated response to remediate different breeds of synthesized AI and non-AI-based threats. Based on several years of FortiGuard Labs research, FortiAI reduces the “time to detect and respond” significantly to protect your organization.

Biggest SOC Challenges

AI-Powered Cyber Attacks

Innovative threat actrors disrupt cybersecurity through automated attacks designed to overwhelm or sneak past your SOC defenses

Digital Transformation

As organizations embrace various digital transformation initiatives, this creates burden for SecOps to identify new breeds of threats in an expanded environment

Masqueraded Malware

Carefully crafted cyber threats designed to bypass your existing security controls through the camouflage of malware behaviors

Shortage of Experienced SOC Analysts

Experience is the hardest thing to acquire in cyber security, especially in threat analysis, investigation and malware research experience

Key Features

• Virtual Security AnalystTM powered by a Deep Neural Networks AI model that augments your organizations’ Security Operations (SecOps) by mimicking an experienced Security Analyst to investigate threats and surface malware outbreaks
• Reduces malware detection and investigation time from minutes to sub-seconds
• Mature AI that applies 6+ million malware features to achieve sub-second verdicts for day-1 deployment with the capability to learn new features
• On-premise Learning to reduce false positives by analyzing an organization’s specific traffic and adapting to newly disguised threats
• Scientifically analyze known and unknown file and fileless threats and classifies them into 20+ malware attack scenarios
• Integration into Fortinet's Security Fabric by integrating with FortiGates to automatically quarantine attacks

Highlights:

Tracing the Source of a Worm Attack

Features:

Core Engine

• Patent-pending malware analysis with multiple artificial neural networks
• Pre-trained with millions of malware features
• Scenario-based engine to locate patient zero
• Outbreak search engine (hash, virus family)

Malware Classification

• AI-driven Security Attack Scenarios: Industroyer, Wiper, Downloader, Redirector, Dropper, Ransomware, Worm, Password Stealer, Rootkit, Banking Trojan, InfoStealer, Exploit, Clicker, Virus, Application, CoinMiner, DoS, BackDoor, WebShell, Search Engine Poisoning, Proxy, Trojan, Phishing, Fileless and more

File Types and Protocols

• 32bit and 64bit Portable Executables (PE) files, including DLLs, and self-extracting ZIP files
• Web based / text traffic such as HTML, Javascripts, VBS, VBA, Office documents and PDFs
• Sniffer: HTTP, SMBv2
  • With FortiGates: HTTP, HTTPS (with SSL decryption), SMTP, POP3, IMAP, MAPI, and FTP
• Manual/REST API upload: .tar, .gz, .tar.gz, .zip, .bz2, and .rar

Deployment Modes

• Standalone: Sniffer mode, Manual upload, and API submission § Integrated: FortiGates

Others

• Log and Report: MD5/SHA hashes, source/destination IP addresses, URLs, VDOM and timestamps § Networking: Static route and IPv4 support § Systems: Role based Administration Support (RBAC)

Deployment:

Specifications:

	FortiAI-VM16	FortiAI-VM32
Technical Specifications
vCPU Support (Recommended)	16	32
Memory Support (Minimum / Recommended)	128GB/256GB
Recommended Storage	1TB to 8TB
Default RAID level (RAID software)	Hypervisor Hardware Dependent
System Performance
Throughput (files per hour)	14,000	22,000
Sub-second verdicts	✔	✔
Sniffer Throughput	Hypervisor Hardware Dependent
Hypervisor Support	ESXi 6.7 U2+

Documentation:

Download the Fortinet FortiAI Series Datasheet (PDF).