Zero touch provisioning
Initial configuration of firewalls, switches, and access points can be a tricky proposition, often requiring expert staff on-site to configure each device individually. Zero touch provisioning greatly simplifies local or remote onboarding of devices for the initial configuration. FortiCloud key provides an easy mechanism to import FortiGates into FortiGate Cloud with the automatic connection of FortiGates to be managed by FortiGate Cloud. Hundreds of FortiGates can be provisioned using a bulk FortiCloud key in distributed environments, such as large retail or education networks. Once a communication tunnel is established, FortiGate Cloud provisions the FortiGate to the designated account, enabling settings, cloud logging, and device management from the cloud.
Configuration and device management from a single pane of glass
Consistent configuration of devices within your network is essential for ensuring that security policies are correctly applied. FortiGate Cloud provides a web-based management console to control FortiGates and downstream connected devices. Device settings such as SD-WAN interfaces/SLAs/rules, IP addresses, or service set identifiers (SSIDs) can be configured for FortiGate Cloud managed devices. Configuration backups are kept in FortiGate Cloud to assist with replacement or recovery efforts. Device firmware updates and scripts can be performed on multiple FortiGates, enabling automation and allowing customers to take advantage of the latest features.
Fabric integration with FortiSwitch, FortiAP, and FortiExtender
FortiGate Cloud has the added benefit of provisioning, configuring, and managing your extended infrastructure through the FortiGate. Not only can you manage your entire infrastructure from a single cloud management interface, but by allowing FortiGate to manage your FortiSwitch, FortiAP, and FortiExtender, it can extend its functionality into them. For example, the switch ports inherit the same properties as the firewall, making them extensions of the firewall - the same principle goes for the FortiAP. This unique Fabric integration enables this cross-product functionality. It can further allow automation in the face of a threat. When an infected client is detected through Indicators of Compromise (IOCs), the switch or AP can block the device until the problem is remediated.
Deployment and management of SD-WAN
Deploying SD-WAN need not be a complicated and expensive endeavor - FortiGate Cloud allows you to roll out and manage your SD-WAN deployment easily using zero touch deployment through its interface either manually or automatically as the FortiGates come online. Once your interfaces are up, you can move on to setting up the SD-WAN rules to optimize application prioritization on the WAN interfaces.
SD-WAN Overlay as a service
IT teams are expected to keep up with ever-expanding networks and new technology deployments, often without the skills or experience to work efficiently. Setting up secure overlay networks may require complicated approaches using a variety of technologies such as IPsec and BGP to facilitate communication across the WAN. FortiGate Cloud offers streamlined and swift provisioning of a new SD-WAN region, taking the burden off overwhelmed IT staff. Operating as a cloud-hosted service, it significantly reduces deployment time and costs, while also eliminating expenses associated with hosting and management.
Account and user management
Providing secure access to administrators for managing the FortiCloud account, assets, and services is a key factor in efficient operations. FortiGate Cloud provides granular resource-based access controls to reduce security risks by assigning only the necessary permissions to carry out specific tasks for designated personnel. Integrated with FortiCloud IAM (Identity and Access Management), secure 2FA authentication, permission profiles for authorization, admins can securely control access to FortiCloud assets and features for your users. Additionally, integrated with FortiCloud external IdP, customers can leverage external IdP user management and manage access to FortiGate Cloud.
Instant security intelligence and analytics
To place better security controls on your network, you must first know how it is being utilized. FortiGate Cloud's extensive set of dashboards gives you an immediate view of FortiGate usage, including a breakdown of network traffic and bandwidth usage. FortiGate Cloud analytics provides you with drill-down and filtering functionality to instantly determine how applications, websites, users, and threats impact your network.
Indicators of Compromise
Identifying suspicious usage and artifacts on the network and intrusions with higher confidence is critical to keeping the systems secure. FortiGate Cloud Indicators of Compromise (IOC) feature provides intelligence and information to help security analysts identify risky devices and users based on these artifacts. The IOC package includes a large number of indicators and delivers it via Fortinet Developers Network (FNDN). Analysts can also rescan historical logs for threat hunting and identify threats based on new intelligence, as well as review users' aggregated threat scores by IP addresses, hostname, group, OS, overall threat rating, a location Map View, and a number of threats.
