FortiAnalyzer BigData 4500F 简介
FortiAnalyzer BigData 4500F 能够为复杂的大型网络环境提供杰出高效性能的大数据网络分析。它专为大规模数据中心和高带宽部署而设计，借助超大规模数据获取能力和加速并行数据处理技术，可提供最先进的网络威胁防护。这款强大的 4RU 机箱与新型分布式软硬件架构以及 Fortinet 的下一代高性能防火墙结合使用，可提供超快性能、企业级数据弹性、内置横向可扩展性以及统一的设备管理。
立即观看
FortiAnalyzer 概述
随着数字攻击面的迅速扩张，防御高级威胁变得愈发困难。根据波耐蒙研究所最近的一项研究，近 80% 的组织推出数字创新技术的速度超过了其网络攻击防御能力的提升速度。此外，复杂且分散的基础设施所带来的挑战导致网络流量和数据泄露事件不断增多。部分企业使用的各种单点安全产品通常都是孤立运行，这使得网络运营团队和安全运营团队无法就整个企业的数据流量获得整体可视化检测。
具有日志分析和自动化功能的集成式安全架构可有效解决并显著提高流量可视性和自动化。作为 Fortinet Security Fabric 的一部分，FortiAnalyzer 提供安全架构分析和自动化功能，可帮助更有效地检测和响应网络风险。
FortiAnalyzer 新闻
FortiAnalyzer 视频
|
分析驱动型安全与日志管理
在最近的一项研究中，波耐蒙研究所通过对超过 2,200 名遭遇过数据泄漏的 IT 和安全专业人员进行采访，发现 48% 的数据泄漏是由于恶意或犯罪攻击造成的。通过本视频，了解 FortiAnalyzer 可如何助您解决这一根本问题并防御这些威胁。
立即观看
Features and Benefits
End-to-end visibility with event correlation and threat detection
Reduce time to detection by leveraging Indicator of Compromise (IOC) service to quickly identify threat across your network
Enterprise-grade high availability
Automatically backs up the FortiAnalyzer database to up to four nodes in a cluster that can be geographically dispersed for disaster recovery. One of the secondary nodes can easily become a primary node.
Advanced compliance reporting
Provides hundreds of pre-built reports and templates which are regulation-specific to make proving compliance easy.
Security automation
Reduces complexity and cost leveraging automation enabled via REST API, scripts, connectors, and automation stiches.
Enterprise-ready integrations
Provides turn-key integration with no extra charge for trusted partner products such as Splunk, IBM QRadar, ServiceNow, Tufin, and AlgoSec.
Multi-tenancy and administrative domains (ADOMs)
Separate customer data and manage domains leveraging ADOMs to be compliant and operationally effective.
Related Solutions
FortiAnalyzer 型号和规格
▼
分析持续速率（日志/秒） |
最少 300,000 |
存储 |
200TB |
外形 |
4 RU |
高可用性 |
内置高可用性 |
GB 日志/天 |
200 |
分析持续速率（日志/秒） |
6,000 |
存储容量 |
12TB |
GB 日志/天 |
5,000 |
分析持续速率（日志/秒） |
60,000 |
存储容量 |
96TB |
FortiAnalyzer 虚拟机适用于 AWS、Google Cloud、Oracle Cloud、Ali Cloud、Nutanix AHV、VMware vSphere、Citrix Xen Server、Xen、KVM 和 Microsoft Hyper-V。
GB 日志/天 |
1 |
存储容量 |
500 GB |
GB 日志/天 |
+1 |
存储容量 |
+500 GB |
GB 日志/天 |
+5 |
存储容量 |
+3 TB |
GB 日志/天 |
+25 |
存储容量 |
+10 TB |
GB 日志/天 |
+100 |
存储容量 |
+24 TB |
GB 日志/天 |
+500 |
存储容量 |
+48 TB |
GB 日志/天 |
+2,000 |
存储容量 |
+100 TB |
FortiAnalyzer-VM Subscription License with Support
| FC1-10-AZVMS-431-01-DD | Central Logging & Analytics subscription for 5 GB/Day logs. Include 24x7 FortiCare support, IOC, SOAR/SIEM services.
|
| FC2-10-AZVMS-431-01-DD | Central Logging & Analytics subscription for 50 GB/Day logs. Include 24x7 FortiCare support, IOC, SOAR/SIEM services.
|
| FC3-10-AZVMS-431-01-DD | Central Logging & Analytics subscription for 500 GB/Day logs. Include 24x7 FortiCare support, IOC, SOAR/SIEM services.
|
FortiAnalyzer Cloud
Cloud-based central logging and reporting service for all FortiGate devices. FortiCloud Premium customers can easily enable the FortiAnalyzer Cloud service and get real-time network insights leveraging the FortiGate deployment.
FortiAnalyzer 虚拟机适用于 Amazon Web Services 和 Microsoft Azure。
▼
Fortinet 通过 Security Fabric 架构和 FortiAnalyzer 实现了安全防护与合规的自动化
|
了解 Fortinet Security Fabric整体架构 如何通过为 Lagardère Group 复杂的分布式网络环境提供一款集成式解决方案，帮助他们优化安全现状、提高对整个 IT 基础设施的流量可视性和控制力，并降低运营成本。Lagardère Group 是一家跨国媒体集团，管理着世界各地的各种活动，主要专注于图书出版、广告、旅游零售、旅游必需品、娱乐、广播、电视、杂志和报纸。
我们的客户在 Gartner Peer Insights 评论中肯定了 FortiAnalyzer 对其 SD-WAN、NGFW 和整合项目的重要价值。
★★★★★
“易于部署和配置，直接查看连接情况”
“易于配置、易于部署、易于集中管理，集 SD-WAN、高级路由和 NGFW 功能于一身，有助于我们整合其他单点产品。”
– 某制造业安全官
★★★★★
“FortiAnalyzer - FortiGate 设备的最佳搭档”
“我使用 Fortianalyzer 很长时间了，如果您部署了 Fortigate 设备，那么您一定要使用 Fortianalyzer，因为它能够为您提供更多信息，让您时刻掌握网络安全情况。Fortianalyzer 拥有自己的安全仪表盘和用户友好的 Web 界面，搜索流量日志既简单又轻松。”
– 高级网络安全工程师
★★★★★
“实时日志记录、分析和报告系统”
“识别分布式网络和用户组漏洞离不开有关网络使用情况和安全信息的实时和历史记录。网络和安全管理员们需要拥有一套全面的日志记录和报告工具，以便为构建完整的多层安全解决方案获取所有必要的信息。FortiAnalyzer 集实时记录、分析和报告系统于一体，是专门为这些流程而设计的网络硬件设备，可以安全地从 Fortinet 设备和第三方设备收集日志数据。”
– 安全工程师
★★★★★
“强大的合规与排障工具。”
“我们最初购买 FortiAnalyzer 只是为了进行检测控制。而现在，我们用它解决客户端 vpn 连接以及流量指标问题。”
– 合规顾问
Gartner Peer Insights 评论代表了最终用户根据自身经验表达的个人意见，不代表 Gartner 或其附属公司的观点。
FortiAnalyzer 用例
▼
Fabric 分析和报告
Fortinet 集中日志记录和报告
最佳实践合规性
在 Security Fabric 架构中实现合规自动化
安全情报
Fabric 实时安全情报
Fabric 自动化
在 Security Fabric架构 中实现策略修复自动化
资源
▼
电子书
网络研讨会和视频
白皮书
博客
▼
产品演示
FortiAnalyzer 为 Fortinet Security Fabric 架构提供集中式网络安全日志记录和报告功能。FortiAnalyzer 可接受来自多种下游 Fortinet 设备接入（例如 FortiGate、FortiMail 和 FortiWeb 设备等）的入站日志。FortiAnalyzer 的主要特性包括查看/过滤单个事件日志、生成安全报告、基于行为的警报以及深入的流量行为审查等。通过此演示，了解 FortiAnalyzer 如何为您提供网络可视性，例如应用、Web 使用情况以及潜在恶意网络行为的汇总可视化。
分析联盟合作伙伴
作为 Fortinet Security Fabric架构的一部分，FortiAnalyzer日志分析平台能够与许多友商的产品进行集成。
以下是当前产品联盟合作伙伴的名单：
Amazon Web Services
AWS services are trusted by more than a million active customers around the world – including the fastest growing startups, largest enterprises, and leading government agencies – to power their infrastructures, make them more agile, and lower costs.
Learn more on the Fortinet-AWS alliance
CyberArk
CyberArk is the global leader in privileged account security, a critical layer of IT security to protect data, infrastructure and assets across the enterprise, in the cloud and throughout the DevOps pipeline. CyberArk delivers the industry’s most complete solution to reduce risk created by privileged credentials and secrets.
D3 Security
D3 Security's award-winning SOAR platform seamlessly combines security orchestration, automation and response with enterprise-grade investigation/case management, trend reporting and analytics. With D3's adaptable playbooks and scalable architecture, security teams can automate SOC use-cases to reduce MTTR by over 95%, and manage the full lifecycle of any incident or investigation.
DFLabs
DFLabs IncMan SOAR leverages existing security products to dramatically reduce the response and remediation gap caused by limited resources and the increasing volume of incidents. Together with Fortinet, IncMan allows joint customers to respond to security incidents in a faster, more informed and efficient manner.
ForeScout Technologies
ForeScout Technologies is transforming security through visibility. ForeScout offers a highly scalable, heterogeneous platform that provides Global 2000 enterprises and government agencies with agentless visibility and control of traditional and non-traditional devices, including IoT devices, the instant they connect to the network.
Google Cloud Platform
Google Cloud Platform is a secure, dedicated public cloud computing service operated by Google which provides a range of infrastructure and application services that enable deployments in the cloud. Fortinet provides critical firewalling, advanced security and scalable BYOL protection for elastic compute, container, and machine-learning workloads in Google’s innovative public cloud.
IBM
IBM Security offers one of the most advanced and integrated portfolios of enterprise security products and services. The portfolio enables organizations to effectively manage risk and defend against emerging threats.
- Fortinet – IBM Security AppScan Solution Brief
- Fortinet – IBM Security QRadar Solution Brief
- Fortinet FortiGate and IBM QRadar Deployment Guide
- FortiGate App For IBM QRadar Technical Solution Guide
- Fortinet - IBM Resilient Technical Deployment Guide
- Fortinet - IBM Cloud Connector Solution Brief
- Fortinet FortiSOAR Connector for IBM QRadar
Microsoft Azure
Microsoft is the leading platform and productivity company for the mobile-first, cloud-first world, and its mission is to empower every person and every organization on the planet to achieve more.
Nutanix
Nutanix makes infrastructure invisible, elevating IT to focus on the applications and services that power their business. The Nutanix enterprise cloud platform leverages web-scale engineering and consumer-grade design to natively converge compute, virtualization and storage into a resilient, software-defined solution that delivers any application at any scale.
Oracle
Oracle offers a comprehensive and fully integrated stack of cloud applications and platform services.
Refactr
The Refactr DevSecOps automation platform is an all-in-one solution for designing and executing secure automation pipelines that include infrastructure delivery, application configuration, and security actions. Customers can quickly deploy Fortinet’s solutions through pre-built pipelines and leverage existing Fortinet automation content built with open DevOps and security automation tools.
Restorepoint
Restorepoint’s solutions help organisations and service providers reduce cost, manage unforeseen risks, and to accelerate change management across their multi-vendor network infrastructures. Using our cost-effective products, customers can quickly automate Network Outage Protection, Compliance Auditing, and Privileged Access Management and to simplify Bulk Change Management.
ServiceNow
ServiceNow makes work better. Our applications automate, predict, digitize and optimize business processes across IT, Customer Service, Security Operations, HR and more, for a better enterprise experience.
Spirent
Spirent’s CyberFlood Data Breach Assessment emulates attack, malware, and DLP scenarios to continually validate security policies and effectiveness in production networks. Together with Fortinet, Spirent provides users visibility into actual breach events and provides specific remediation recommendations to harden security policies in production networks.
Syncurity
Syncurity’s award-winning and patent-pending IR-Flow® SOAR platform reduces cyber risk by accelerating security operations processes, people and technology. Together with Fortinet, Syncurity reduces the time to detect, contain and remediate cyber risks leveraging standards-based APIs for alert enrichment, detailed investigation and automated incident response.
FortiAnalyzer 常见问题解答
FortiManager 能否管理 FortiAnalyzer？
可以，实际上我们也建议这么部署。当 FortiManager 管理 FortiAnalyzer 时，所有 FortiAnalyzer 界面都会和 FortiManager 并排呈现，支持设备所有数据流。
我应该选择 FortiManager/FortiAnalyzer，还是 FortiGateCloud？
FortiGate Cloud 是一项云服务，可简化 FortiGate 和统一访问产品的部署、管理和报告。它是一款简单的解决方案，只提供基础管理和配置。FortiManager（和 FortiAnalyzer）是面向 Fortinet 产品的全功能集中管理解决方案，可提供高级配置、工作流和报告（通过 FortiAnalyzer）。企业应视需求选择简化的云服务，或全功能设备（硬件或虚拟设备）。
我已经为 FortiGate 订购了 360 安全防护服务，现在可如何获得对 FortiManager Cloud 和 FortiAnalyzer Cloud 的访问权限？
在 2020 年 8 月 3 日之后（含当天）购买 360 安全防护的客户需要订阅 FortiCloud Premium 才能访问 FortiManager Cloud 和 FortiAnalyzer Cloud 门户。在此日期之前购买 360 安全防护的客户需要在续订时购买 FortiCloud Premium 许可证。