Fortinet FortiNDR VM
Network Detection and Response with Virtual Security Analyst

Overview:

FortiNDR represents the future of AI-driven breach protection technology, designed for short-staffed Security Operation Center (SOC) teams to defend against various threats including advanced persistent threats through a trained Virtual Security AnalystTM that helps you identify, classify, and respond to threats including those well camouflaged. FortiNDR employs patent-pending* Deep Neural Networks based on Advanced AI and Artificial Neural Network to provide sub-second investigation by harnessing deep learning technologies that assist you in an automated response to remediate different breeds of attacks. FortiNDR significantly reduces the time to identify network anomalies and malicous content on your network and mitigate with Fortinet Security Fabric and third Party integration.

---

Deployment:

Highlights:

Network Detection Response

Responsibilities

DETECT

• Detect encrypted attack, malicious web campaigns, weaker ciphers, vulnerable protocols, IP and DNS-based botnet attacks with advanced analytics
• Profile network traffic with ML models to identify anomalies with user feedback mechanism
• Detect malicious files in sub-seconds through neural network analysis including NFS file shares

RESPOND

• Integrate Fortinet Security Fabric and third party (via API) with FortiGate inline blocking, FortiSwitch/FortiNAC quarantine, FortiAnalyzer, and FortiSOAR

Virtual Security Analyst™

Responsibilities

ANALYZE

• Identify and classify attack scenarios that determines malware attacks with chain-on-infection and big picture analyses
• Investigate the attack source by tracking the original source of infection with time stamps
• Emulate a FortiGuard malware analyst and scientifically determine the type of malware based on an evolving neural networks that constantly learns and matures over time and experience

SECURE

• Search for outbreaks on networks and look for traces of malware based on hashes and similar variants

FortiNDR can be placed in network to detect threats among high volume of network and file transfers, to strengthen threat detection, and tosecure network segments. Assisting security operations by mimicking human analysis experience as well as tracing outbreaks. Coupled with mitigation via Fortinet Security Fabric as well as third party solution based on APIs.

State-of-the-Art Artificial Neural Network (ANN) for Malware Detection

• The state-of-the-art ANN is pre-trained in FortiGuard labs with 20M+ clean and malicious files and further learning is done on premises; updates of the ANN model are available from FortiGuard network to ensure customers areprotected against the latest threats
• Responsible for classifying malware types into 20+ attack scenarios and AI-based engine for tracing source of attacks, emulating how a human brain operates
• Pre-trained in FortiGuard labs with millions of known clean and malicious samples forming billions of clean and malicious features, which is used to scientifically decide malware and attack type specific to your organizations’ security environment

Features:

Specifications:

	FortiNDR VM 16	FortiNDR VM 32
Technical Specifications
vCPU Support (Recommended)	16	32
Memory Support (Minimum / Recommended)	128 GB / 256 GB
Recommended Storage	1 TB to 8 TB
Default RAID level (software RAID)	Hypervisor Hardware Dependent
System Performance
Malware Analysis Throughput (files per hour)2	14,000	22,000
Sub-second verdict	✔
NDR Sniffer Throughput	Hypervisor Hardware Dependent
Hypervisor Support	ESXi 6.7 U2+ and KVM

Documentation:

Download the Fortinet Forti NDR Series Datasheet (PDF).