SASE delivery model
FortiSASE is a cloud-delivered security-as-a-service solution provided by Fortinet utilizing components of the Fortinet Security Fabric that allows users, regardless of location, to take advantage of firewall-as-a-service (FWaaS), secure web gateway (SWG), and other security features in an easy-to-consume package.
Excellent protection
FortiSASE is powered by excellent FortiGuard Labs research organization, delivering real-time protection to remote workforces. It does this by constantly analyzing real-world threat intelligence gathered from over 5.6 million globally deployed sensors. Advanced AI is then applied to identify abnormalities and suspicious patterns to generate protections that are automatically distributed. This fully integrated and automated approach ensures timely and coordinated protection of known and unknown threats across the entire attack life cycle.
Flexible and scalable OPEX pricing models
Based on a per device or per user, per annum pricing model, organizations can now predict a cost-to-business growth correlation and use of security instead of tying up capital in excess hardware.
Malware and exploit prevention
Antivirus with automated content updates, the advanced malware and heuristic detection engines, and a proactive threat library protects against all known threats and variants. Content Pattern Recognition Language and patented code recognition software protects against unknown variants and guaranteed SLAs to address severe malware threats. FortiSandbox Cloud provides protection against unknown attacks using dynamic analysis and provides automated mitigation. FortiSandbox Cloud is able to take suspicious files and see what they do when executed. If they are malicious, FortiSandbox Cloud will create a signature so that the firewall can stop future attacks immediately. Millions of FortiClient and FortiSandbox users worldwide share information about known and unknown malware with FortiGuard's cloud-based threat intelligence platform. FortiGuard automatically shares the intelligence with FortiClient endpoints to protect against emerging threats FortiClient Anti-Ransomware uses behavioral analytics to detect suspicious, ransomware-like behavior. If such behavior is detected, FortiClient can stop ransomware in its tracks, alerting the administrator and optionally auto-quarantine the infected endpoint so it is disconnected from the network and cannot infect other endpoints.
Encrypted traffic analysis
With 95% of Internet application traffic being encrypted, attackers try to take advantage and attempt to slip threats into the network without being detected. SSL/TLS Inspection is the ability to look inside encrypted traffic to inspect the contents in order to detect attacks that would otherwise be invisible. Deep inspection certificates are automatically distributed to endpoints to provide simplified management.
Continuous threat monitoring
Intrusion Prevention (IPS) FortiGuard Automated updates provide latest defenses against network-based threats. You get the latest defenses against stealthy network-level threats, a comprehensive IPS Library with thousands of signatures, flexible policies that enable full control of attack detection methods to suit complex security applications, resistance to evasion techniques proven by NSS Labs.
Filtering services
The Internet has become a critical part of conducting business, however inappropriate Internet usage has led to lower productivity, inappropriate use of company resources, harassment, legal liability, and human resource issues. Fortinet's FortiGuard Web Filtering service regulates and provides valuable insight into all web activities allowing customers to meet Government Regulations, Educational Compliance, HR Policies, and Corporate Internet Usage Policies. FortiGuard's cloud delivered and continually updated web content rating database with over 80 content categories powers one of an accurate web-filtering services.
Application control
FortiGuard's app control protects managed assets by controlling network application usage. The sophisticated detection signatures identify Apps, DB applications, web applications and protocols, both blocklist and allow list approaches can allow or deny traffic. Flexible policies enable full control of attack detection methods.
Risk detection
Data Loss Protection (DLP) monitor network traffic looking for sensitive information that should not leave the network. FortiSASE scans the traffic against file format and content definitions, leveraging both standard data types as well as custom entries by the admin, to identify and stop files from leaking out.
Event log management
Real-time Logging and Analytics are provided by FortiSASE which can be used to troubleshoot connectivity problems, investigate an incident, and audit for compliance. To help adhere to local regulations, you can select a specific geographic region in which to store logs. All logs can optionally be forwarded to an external logging service.
ZTNA
With integrated ZTNA, FortiSASE offers secure private access to applications - whether they are in private datacenter or public clouds. Each session is initiated with an automatic, encrypted tunnel to FortiSASE for user and device posture check enabling enabling granular policies based on specific user and application. It integrates with popular identity providers such as Azure AD and Okta, and you can also use multifactor authentication to provide an additional layer of security.
