Container technologies are rapidly expanding as an application infrastructure and services platform. However, the risks they introduce are often not adequately addressed by traditional security tools.
It is essential for organizations deploying applications and services on any container infrastructure, whether on a device, network, or cloud, to have access to a comprehensive security solution compatible with a broad range of container platforms and orchestration systems.
Container FortiOS (cFOS) provides enterprise-grade network security from FortiOS, tailored to suit the requirements of container platforms. With its lightweight and modular architecture, network administrators can efficiently deploy only the necessary network security functionalities for an application or service, reducing resource requirements and management complexity, thus ensuring the security of the business.
Intrusion prevention system
The intrusion prevention system (IPS) identifies, and blocks known malicious traffic from accessing critical or vulnerable systems within the network using deep packet inspection (DPI) and IPS signatures that are updated frequently throughout the day to include newly discovered threats.
Network segmentation
Internal traffic can be segmented to ensure that permitted communication is allowed, while broadcast and multicast traffic are contained as appropriate.
Next-generation firewall
Traditional Layer 4 firewall capabilities block traffic between interfaces based on source or destination IP address and port. Furthermore, next-generation firewall (NGFW) deploys advanced security services.
SSL inspection
SSL inspection can decrypt all encrypted traffic, providing other components of the security platform with complete visibility into network communications and preventing hackers from using encrypted SSL tunnels to deliver malware or steal data.
Virtual patching
Virtual patching provides an immediate fix to address vulnerabilities that arise in container platforms. The IPS engine can prevent malicious traffic from exploiting the vulnerability, allowing OEMs and suppliers time to provide a software update.
Virtual private network
Secure communication between container platforms and external applications and services is ensured using IPsec VPN tunnels with high levels of encryption.
