Fortinet has expanded the Fortinet Security Fabric with new real-time response and automation capabilities to transform detection to real-time protection. John Maddison (pictured), Fortinet CMO and EVP, products, detailed the new products and enhancements at the Accelerate 2023 partner and customer conference taking place in Orlando, Fla., this week. Including the new FortiOS 7.4, enhancements across the Security Fabric are in the areas of endpoint security, SOC automation, threat intelligence, identity and access, and application security.
Unveiled at conference is the new FortiNDR Cloud offering which combines artificial intelligence with analysis and breach protection technology. The solution provides 365-day retention and visibility into network data, with built-in playbooks, and threat hunting capabilities to detect anomalous and malicious behavior on the network. Customers can also now choose from a self-contained, on-premises deployment powered by Fortinet’s Virtual Security Analyst or a new guided SaaS offering maintained by advanced threat experts from FortiGuard Labs.
Fortinet also announced FortiDevSec, a new application security testing solution incorporating SAST, DAST and SCA, for early vulnerability and misconfigurations detection, and protection including secret discovery. The tool scans application code in CI/CD pipelines and provides actionable remediation information to developers. The tool natively integrates with Jenkins, Bamboo, Azure DevOps, and more.
Fortinet now offers AI-assisted incident triage through its FortiGuard SOC-as-a-Service offering, as well as new SOC operations readiness and compromise assessment services from FortiGuard Labs.
Other enhancements across the Security Fabric include:
- FortiEDR and FortiXDR, built on a cloud-native foundation, now provide additional interactive incident visualization with enriched contextual incident data using multiple threat intelligence feeds to simplify and expedite investigations.
- FortiRecon, supported by threat experts from FortiGuard Labs, now delivers enhanced proactive threat intelligence into critical risks associated with supply chain vendors and partners, including external exposed assets, leaked data, and ransomware attack intelligence.
- FortiDeceptor now offers a new attack exchange program thatallows FortiDeceptor customers to anonymously exchange valuable intel on the most current attacks and take proactive steps to avoid a breach.
- FortiAnalyzer enables more sophisticated event correlation across different types of log sources using a new intuitive rules editor that can be mapped to MITRE ATT&CK use cases.
- FortiSOAR now offers a turnkey SaaS subscription option, inline playbook recommendations driven by ML, extensive OT security features and playbooks, and unique no/low code playbook creation enhancements.
- FortiSIEM now includes new link graph technology which allows for easy visualization of relationships between users, devices, and incidents. The solution is also now powered by an advanced machine learning framework, which enhances protection by detecting anomalies and outliers that may be missed by traditional methods.
- FortiGuard AI-powered Device Security Services has enhanced automated virtual patching for both OT and IT devices based on global threat intelligence, zero-day research, and CVE query service. Granular OT security at the industry level is enhanced with Industrial Internet of Things and Internet of Medical Things device convergence.
- FortiPAM, an integral component of Fortinet’s Identity and Access Management portfolio also comprised of FortiAuthenticator and FortiToken, now includes zero-trust network access (ZTNA) controls when users try to access critical assets. The ZTNA tags can be applied to check device posture continuously for vulnerabilities, updated AV signatures, location, and machine groups.
Image: Courtesy of Fortinet
