Fortinet FortiSASE
 

Overview:

Enterprise Grade Security

Web and email are the two most common attack vectors for the delivery of malware into an organization and when users are out of the office, they are not as well protected as when within the organizational network. It is critical to ensure that the same level of security is employed while the user is remote as when they are within the organizational network.

Optimized Remote Workforce Security

FortiSASE SIA provides security-as-a-service for remote users while they are outside of the protection of the corporate network. FortiClient detects that the user is outside of the network and tunnels the traffic to the FortiSASE SIA Service where the corporate security policy can be enforced – removing the risk of corporate managed devices being unprotected on the internet.

Highlights

• SASE Delivery Model

  FortiSASE SIA is a cloud-delivered security-as-a-service solution provided by Fortinet utilizing components of the Fortinet Security Fabric that allows users, regardless of location, to take advantage of firewall-as-a-service (FWaaS), secure web gateway (SWG), and other security features in an easy-to-consume package.

• Powered By FortiOS

  The FortiOS operating system is the heart of the Fortinet Security Fabric. It enables multiple security and networking technologies to work together seamlessly across all environments protecting users based on best-in-class threat intelligence along with improving user experience. This holistic approach eliminates security gaps for remote workforces and hastens responses to attacks and breaches.

• World-Class Protection

  FortiSASE SIA is powered by industry leading FortiGuard Labs research organization, delivering real-time protection to remote workforces. It does this by constantly analyzing real-world threat intelligence gathered from over 5.6 million globally deployed sensors. Advanced AI is then applied to identify abnormalities and suspicious patterns to generate new protections that are automatically distributed via native integration with FortiOS. This fully integrated and automated approach ensures timely and coordinated protection of known and unknown threats across the entire attack life cycle.

• Scalable OPEX Model

  Based on a per device, per annum pricing model, organizations can now predict a cost-to-business growth correlation and use of security instead of tying up capital in excess hardware.

Features:

Malware and Exploit Prevention

Antivirus with automated content updates, the latest malware and heuristic detection engines, and a proactive threat library protects against all known threats and variants. Content Pattern Recognition Language and new patented code recognition software protects against unknown variants and guaranteed SLAs to address severe malware threats

Encrypted Traffic Analysis

With 95% of Internet application traffic being encrypted, attackers try to take advantage and attempt to slip threats into the network without being detected. SSL/TLS Inspection is the ability to look inside encrypted traffic to inspect the contents in order to detect attacks that would otherwise be invisible. Deep inspection certificates are automatically distributed to endpoints to provide simplified management.

Continuous Threat Monitoring

Intrusion Prevention (IPS) FortiGuard Automated updates provide latest defenses against network-based threats. You get the latest defenses against stealthy network-level threats, a comprehensive IPS Library with thousands of signatures, flexible policies that enable full control of attack detection methods to suit complex security applications, resistance to evasion techniques proven by NSS Labs.

Filtering Services

The Internet has become a critical part of conducting business, however inappropriate Internet usage has led to lower productivity, inappropriate use of company resources, harassment, legal liability, and human resource issues. Fortinet’s FortiGuard Web Filtering Service regulates and provides valuable insight into all web activities allowing customers to meet new Government Regulations, Educational Compliance, HR Policies, and Corporate Internet Usage Policies

Application Control

FortiGuard’s App Control protects managed assets by controlling network application usage. The sophisticated detection signatures identify Apps, DB applications, web applications and protocols, both blocklist and allowlist approaches can allow or deny traffic. Flexible policies enable full control of attack detection methods.

Risk Detection

Data Loss Protection (DLP) monitor network traffic looking for sensitive information that should not leave the network. FortiSASE SIA scans the traffic against file format and content definitions, leveraging both standard data types as well as custom entries by the admin, to identify and stop files from leaking out.

Event Log Management

Real-time Logging and Analytics are provided by FortiSASE SIA which can be used to troubleshoot connectivity problems, investigate an incident, and audit for compliance. To help adhere to local regulations, you can select a specific geographic region in which to store logs. All logs can optionally be forwarded to an external logging service.

Documentation:

Download the Fortinet FortiSASE Datasheet (PDF).