FortiPAM 400G
Privileged Access Management for up to 25 users

Overview:

Privileged Access and Secure Remote Access

Privileged Access is defined as access to an account with privileges beyond those of regular accounts, typically in keeping with roles such as IT Managers and System Administrators. Examples of privileged access include Firewall and Network Administrators, Windows Domain and Enterprise administrators.

Importantly Privileged Account attacks remain a high-profile attack vector, and in many instances, detection alone is measured in hundreds of days, with recovery taking significantly longer.

Built on the firm foundations of FortiOS, FortiPAM provides robust privileged account management, session monitoring and management, and seamless Secure Remote Access to targets, all gated by strict role-based access control, securing your most sensitive assets. FortiPAM also supports operational technology (OT) use cases and connectivity standards, offering a variety of connectivity options, ranging from full ZTNA enforcement to Agentless connectivity with no client-side installation requisites.

With capabilities such as account discovery, secure password and certificate storage, password rotation, session monitoring and recording, and reporting, FortiPAM provides security teams with full visibility and control of privileged credential usage. FortiPAM is incredibly straightforward to deploy and maintain. While FortiPAM is fully capable of running in stand-alone mode, it also offers deep integrations with several Fortinet products.

Highlights

• Credential Security
• Scheduled Credential Management
• Remote Session Monitoring
• Certificate Storage
• ZTNA Integration
• Privileged Monitoring
• Automated Service Account Management
• Clientless option for Secure Remote Access
• Secure Access with MFA and SSO
• High Availability Support
• Comprehensive Reporting
• Fortinet Ecosystem Integrations

Key Features:

• Scalable, market-proven, enterprise-ready solution. Flexible solution with high availability and redundancy, as well as ‘break-glass’ to help ensure business continuity. Distributed network gateway support enables secret and session management across multiple networks and geographies, and the native REST API enables integration with third-party tools (e.g., Ansible, Terraform) for secret retrieval.
• Comprehensive session controls. With built in SSH command and Windows Application filtering in place, FortiPAM administrators can block harmful, or unwanted actions on their connected assets.
• Fully secure credentials. When a secret is saved in FortiPAM, that data is encrypted using advance AES256 encryption. When a FortiPAM session is launched to an asset, the credentials are completely obfuscated from the user. With this approach, regardless of what assets are being connected, credentials can never be captured or leaked by the user.
• Zero Trust Network Access (ZTNA). When integrated with FortiClient EMS, FortiPAM performs continuous ZTNA endpoint validation, ensuring connecting user devices are policy compliant before granting access to sensitive systems or data. ZTNA controls offer highly granular, real-time controls over connecting machines, thus ensuring only trusted users and devices are able to connect to targets.
• Privileged and remote session monitoring. Provides granular control of user activities by monitoring, recording, and auditing privileged user activity (e.g., login, keystrokes and mouse events). Authorized admins can restrict privileged user activities with command filtering or SSH Filter Controls. Admins can also monitor and terminate active sessions.
• Automated Service Account discovery and management of privileged accounts and credentials. Automatically discover, import, and rotate Service Account credentials based on policies, mitigating manual, error-prone processes. Admins can define granular policies (e.g., rotation frequency, password complexity) and hierarchical access approval processes, ensuring compliance and security requirements are met.
• Certificate storage. In addition to target and secret storage, FortiPAM also securely stores certificates and keys for future deployment and logs all certificate-related activities.
• Comprehensive reports. Centralized audit and reporting to meet required compliance mandates. Full tamper-resistant audit trail tracks all user activity and provides enhanced visibility and security.
• Secure privileged access with Multifactor Authentication (MFA) and Single Sign-On (SSO). FortiPAM offers extensive support for authentication protocols, including OOTB support for SAML, RADIUS, and LDAP, with Active Directory integration for assigning user roles and permissions. FortiPAM integrates seamlessly with FortiToken Cloud, enabling contextualized user authentication and a streamlined user access experience.
• Secure remote user for third-party privileged access. FortiPAM can easily be configured to enable visitor/guest access. With robust OOTB authentication, FortiPAM is the ideal solution to authenticate external, remote employees/vendors. Adopting a least privileged approach, external visitors may only access the resources explicitly declared by the administrator.

Specifications:

Documentation:

Download the Fortinet FortiPAM Datasheet (PDF).