自动化驱动型统一管理平台
在最近的一项研究中，波耐蒙研究所通过对超过 2,200 名专业人员进行采访，发现 52% 的数据泄漏的根本原因是人为错误或系统故障。通过本视频，了解 FortiManager 帮助解决数据泄漏根本原因的 3 个用例。
立即观看
FortiManager 概述
层出不穷的数字化转型技术加剧了网络和网络安全的复杂性和脆弱性。恶意网络攻击问题依然严峻，但根据波耐蒙研究所最近的一项研究，去年，半数以上的数据泄露事件源自本可避免的漏洞。话虽如此，可如何避免呢？优先考虑自动化驱动型网络运营的安全策略可助以一臂之力。作为 Fortinet Security Fabric 的一部分，FortiManager 支持集中管理、最佳实践合规性和工作流自动化方面的网络运营用例，可帮助更有效地防范数据泄漏。
FortiManager 新闻
Features and Benefits
Centralized management
Provides a rich set of tools to centrally manage 100,000+ devices such as firewalls, switches, and access points from a single console
Enterprise-grade high availability
Automatically backs up the FortiManager database to up to five nodes in a cluster that can be geographically dispersed for disaster recovery
Secure SD-WAN provisioning and monitoring
Provision and monitor Secure SD-WAN from one console across all branch offices or campuses
Security automation
Reduces complexity and cost leveraging automation enabled via REST API, scripts, connectors, and automation stiches.
Enterprise-ready integrations
Provides turn-key integration with no extra charge for trusted partner products such as Splunk, IBM QRadar, ServiceNow, Tufin, and AlgoSec.
Multi-tenancy and administrative domains (ADOMs)
Separate customer data and manage domains leveraging ADOMs to be compliant and operationally effective.
Related Solutions
管理产品型号和规格
▼
设备/虚拟域（最多） |
300 |
GB 日志/天 |
2 |
存储容量 |
24 TB |
FortiManager 虚拟机适用于 AWS、Google Cloud、Oracle Cloud、Ali Cloud、Nutanix AHV、VMware vSphere、Citrix Xen Server、Xen、KVM 和 Microsoft Hyper-V。
设备/虚拟域（最多） |
10 |
GB 日志/天 |
1 |
存储容量 |
100 GB |
设备/虚拟域（最多） |
+10 |
GB 日志/天 |
2 |
存储容量 |
200 GB |
设备/虚拟域（最多） |
+100 |
GB 日志/天 |
5 |
存储容量 |
1 TB |
设备/虚拟域（最多） |
+1,000 |
GB 日志/天 |
10 |
存储容量 |
4 TB |
设备/虚拟域（最多） |
+5,000 |
GB 日志/天 |
25 |
存储容量 |
8 TB |
支持 FortiManager VM 订阅许可
| FC1-10-FMGVS-258-01-DD | 订阅由 FortiManager VM S 系列托管的 10 台设备/虚拟域。包含 FortiCare 24x7 全天候支持。
|
| FC2-10-FMGVS-258-01-DD | 订阅由 FortiManager VM S 系列托管的 100 台设备/虚拟域。包含 FortiCare 24x7 全天候支持。
|
| FC3-10-FMGVS-258-01-DD | 订阅由 FortiManager VM S 系列托管的 1,000 台设备/虚拟域。包含 FortiCare 24x7 全天候支持。
|
FortiManager Cloud
通过基于云的 FortiManager（Fortinet 网络管理解决方案）集中管理 FortiGate 设备。FortiCloud Premium 客户可轻松启用 FortiManager 云服务。
FortiManager 虚拟机适用于 Amazon Web Services 和 Microsoft Azure。
▼
Kordia 借助 Fortinet Security Fabric 为客户提供增值服务
Kennards Hire 借助 Fortinet 安全 SD-WAN 改善了客户体验
我们的客户在 Gartner Peer Insights 评论中肯定了 FortiAnalyzer 对其 SD-WAN、NGFW 和整合项目的重要价值。
★★★★★
“易于部署和配置，直接查看连接情况”
“易于配置、易于部署、易于集中管理，集 SD-WAN、高级路由和 NGFW 功能于一身，有助于我们整合其他单点产品。”
– 某制造业安全官
★★★★★
“简单的实施、强大的管理功能和丰富的配置选项”
“我们对 Fortinet NGFW 和 SD-WAN 解决方案非常满意。它们易于配置，CLI 功能强大，并且会定期添加新特性。虽然 Fortinet 不像其他厂商那样专攻 SD-WAN，但它拥有广泛的产品组合，并且通过将 NGFW 安全性和 SD-WAN 集成到单个平台中，简化了策略、镜像、故障排除和配置管理。尽管 Fortinet 主营安全产品，但其 SD-WAN 技术和特性也在快速赶上，相比其他专业的 SD-WAN 厂商不相上下。Fortinet 的 NGFW 解决方案功能强大，性能卓越，特性丰富，支持您能想到的所有自定义 NGFW 设置。这款解决方案比我们以前采用的知名解决方案好多了。”
– 某医疗行业高级网络工程师
★★★★★
“根据我个人的使用经验，Fortigate 下一代防火墙非常适用于 K1-12 教育行业”
“防火墙规则易于部署和迁移，并且与我以前使用的 iptable 等产品相比，更简洁明了。GUI 管理简单，易于理解，我只花了 3 个小时就设置完了与以前的防火墙相同的场景。此外，它运行起来特别稳定，可以在不重启的情况下连续运行一个月。”
– 教育技术总监
Gartner Peer Insights 评论代表了最终用户根据自身经验表达的个人意见，不代表 Gartner 或其附属公司的观点。
FortiManager 用例
面向 Security Fabric 的单个控制台
▼
零接触部署
简化 FortiGate 大规模部署
网络自动化
简化企业生态系统中的工作流
集中管理
统一的大规模 FortiGate 管理
FortiGuard 分发中心
面向 FortiGuard 更新的 Fabric Gateway
资源
▼
解决方案指南
白皮书
网络研讨会和视频
博客
▼
产品演示
FortiManager 支持 IT 人员通过易于使用的集中式“单一”管理控制台控制 Fortinet 的网络安全设备。管理员能够完全管理安全策略部署、FortiGuard 内容安全更新、固件版本及数千台 Fortinet 设备的单独配置。通过此演示，您将了解如何注册设备、如何制定策略和对象（以及策略包），以及如何轻松配置和更新设备。
管理联盟合作伙伴
作为 Fortinet Security Fabric架构的一部分，FortiManager 能够与许多领先厂商的产品进行集成。
以下是当前产品联盟合作伙伴的名单：
AlgosSec
The leading provider of business-driven security management solutions, AlgoSec helps over 1,500 enterprises align security with their business processes, to make their organizations more agile, secure and compliant.
Amazon Web Services
AWS services are trusted by more than a million active customers around the world – including the fastest growing startups, largest enterprises, and leading government agencies – to power their infrastructures, make them more agile, and lower costs.
Learn more on the Fortinet-AWS alliance
AppViewX
The AppViewX Platform is a modular, low-code software application that enables the automation and orchestration of network infrastructure using an intuitive, context-aware, visual workflow. Together with Fortinet, our combined solution enables SecOps teams to easily translate business requirements into automation workflows that improve agility and enforce compliance.
Arista
Arista Networks was founded to pioneer and deliver software-driven cloud networking solutions for large data center storage and computing environments.
Aruba
Aruba, a Hewlett Packard Enterprise company is redefining the intelligent edge with reliable mobility, network security, and IoT solutions for organizations of all sizes.
AudioCodes
AudioCodes Ltd. (NasdaqGS: AUDC) is a leading vendor of advanced voice networking and media processing solutions for the digital workplace. AudioCodes and Fortinet enable enterprises and service providers worldwide to build and operate secure and reliable all-IP voice and data networks for unified communications, contact centers and hosted business services.
BackBox
BackBox is the leading provider for Intelligent Automation for Network and Security devices. BackBox provides real-time inventory, task automation, pre-emptive health checks on critical devices, and is ideal for any organization, multi-tenant sites and service providers.
Cisco
Cisco is the worldwide leader in IT that helps companies seize the opportunities of tomorrow by proving that amazing things can happen when you connect the previously unconnected.
Claroty
Claroty's ICS Security Platform passively protects industrial networks and assets from cyberattack; ensuring safe and continuous operation of the worlds most critical infrastructures without compromising the safety and security of personnel or expensive industrial assets. 2018 S4 ICS Challenge winner!
CSPi
CSPi’s Myricom nVoy Series solution offers customers a new approach to cyber threat identification and investigation – a rapid breach response solution that identifies alerts associated with a specific asset and provides an extraction of the entire set of conversations associated with that breach. This detailed data is crucial in performing timely and accurate analysis needed to comply with data-privacy regulations.
Cyber Observer
Cyber Observer produces a holistic orchestration & awareness management solution for CISOs, CIOs & senior managers that integrates easily and quickly to provide an unprecedented & comprehensive analysis and visual representation of an enterprise’s entire cybersecurity ecosystem.
CyberArk
CyberArk is the global leader in privileged account security, a critical layer of IT security to protect data, infrastructure and assets across the enterprise, in the cloud and throughout the DevOps pipeline. CyberArk delivers the industry’s most complete solution to reduce risk created by privileged credentials and secrets.
D3 Security
D3 Security's award-winning SOAR platform seamlessly combines security orchestration, automation and response with enterprise-grade investigation/case management, trend reporting and analytics. With D3's adaptable playbooks and scalable architecture, security teams can automate SOC use-cases to reduce MTTR by over 95%, and manage the full lifecycle of any incident or investigation.
DivvyCloud
DivvyCloud protects your cloud and container environments from misconfigurations, policy violations, threats, and IAM challenges. Together with Fortinet cloud network security devices, this provides customers with a best-in-breed, end-to-end cloud security strategy.
FireMon
FireMon solutions deliver continuous visibility into and control over network security infrastructure, policies, and risk.
ForeScout Technologies
ForeScout Technologies is transforming security through visibility. ForeScout offers a highly scalable, heterogeneous platform that provides Global 2000 enterprises and government agencies with agentless visibility and control of traditional and non-traditional devices, including IoT devices, the instant they connect to the network.
Gigamon
Gigamon provides active visibility into physical and virtual network traffic, enabling stronger security, and superior performance.
Google Cloud Platform
Google Cloud Platform is a secure, dedicated public cloud computing service operated by Google which provides a range of infrastructure and application services that enable deployments in the cloud. Fortinet provides critical firewalling, advanced security and scalable BYOL protection for elastic compute, container, and machine-learning workloads in Google’s innovative public cloud.
HashiCorp
HashiCorp is the leader in multi-cloud infrastructure automation software. The HashiCorp software suite enables organizations to adopt consistent workflows to provision, secure, connect, and run any infrastructure for any application. HashiCorp open source tools Vagrant, Packer, Terraform, Vault, Consul, and Nomad are downloaded tens of millions of times each year and are broadly adopted by the Global 2000.
IBM
IBM Security offers one of the most advanced and integrated portfolios of enterprise security products and services. The portfolio enables organizations to effectively manage risk and defend against emerging threats.
- Fortinet – IBM Security AppScan Solution Brief
- Fortinet – IBM Security QRadar Solution Brief
- Fortinet FortiGate and IBM QRadar Deployment Guide
- FortiGate App For IBM QRadar Technical Solution Guide
- Fortinet - IBM Resilient Technical Deployment Guide
- Fortinet - IBM Cloud Connector Solution Brief
- Fortinet FortiSOAR Connector for IBM QRadar
Industrial Defender
Industrial Defender ASM® solutions deliver cybersecurity, compliance and change management for Industrial Control Systems (ICS). Over the last decade, the organization has successfully developed and delivered a single unified platform to secure and manage heterogeneous control environments for critical infrastructure operations.
IntSights
Revolutionizing cybersecurity with the first of its kind enterprise threat intelligence and mitigation platform that drives proactive defense by turning tailored threat intelligence into automated security action.
LiveAction
LiveAction’s network performance visualization and analytics solutions provide network professionals the insights needed to easily manage and control end-to-end performance of multi-fabric, multi-vendor, and multi-cloud environments. The LiveAction and Fortinet integration extends network performance visibility and situational awareness to the Fortinet network edge infrastructure.
McAfee
McAfee is one of the world’s leading independent cybersecurity companies. Inspired by the power of working together, McAfee creates business and consumer solutions that make the world a safer place.
Microsoft Azure
Microsoft is the leading platform and productivity company for the mobile-first, cloud-first world, and its mission is to empower every person and every organization on the planet to achieve more.
NEC
NEC Corporation is a leader in the integration of IT and network technologies that benefit businesses and people around the world.
Network Perception
Recognized as the standard in compliance and cybersecurity technology for critical infrastructure industries, Network Perception brings transparency to network configurations. The intuitive platform with off-line network visualization provides in-depth network verification, ensuring regulatory compliance, cyber security, and organizational resilience. Together with Fortinet, Network Perception can increase efficiencies, simplifying workflows and enabling continuous compliance verification.
Nutanix
Nutanix makes infrastructure invisible, elevating IT to focus on the applications and services that power their business. The Nutanix enterprise cloud platform leverages web-scale engineering and consumer-grade design to natively converge compute, virtualization and storage into a resilient, software-defined solution that delivers any application at any scale.
Oracle
Oracle offers a comprehensive and fully integrated stack of cloud applications and platform services.
Ordr
Ordr delivers comprehensive proactive protection for the hyper-connected enterprise. The Ordr Systems Control Engine utilizes sophisticated machine learning and artificial intelligence to provide complete visibility and exhaustive control over every class of connected device and system.
Red Hat Ansible
Red Hat® Ansible® Automation Platform is the foundation for building and operating automation services at scale, providing enterprises a composable, collaborative, and trusted execution environment. Ansible helps enable the automated management of Fortinet’s flagship enterprise firewall, FortiGate, integrating it into customer’s IT automation strategies.
Redseal
RedSeal’s network modeling and risk scoring platform is the foundation for enabling enterprises to be resilient to cyber-events across public cloud, private cloud and physical network environments. RedSeal helps customers understand their network from the inside out – providing actionable intelligence, situational awareness and a Digital Resilience Score to help enterprises measure and improve their resilience.
Restorepoint
Restorepoint’s solutions help organisations and service providers reduce cost, manage unforeseen risks, and to accelerate change management across their multi-vendor network infrastructures. Using our cost-effective products, customers can quickly automate Network Outage Protection, Compliance Auditing, and Privileged Access Management and to simplify Bulk Change Management.
ServiceNow
ServiceNow makes work better. Our applications automate, predict, digitize and optimize business processes across IT, Customer Service, Security Operations, HR and more, for a better enterprise experience.
Skybox Security
Skybox arms security leaders with a powerful set of integrated security solutions that give unprecedented visibility of the attack surface and key Indicators of Exposure (IOEs), such as exploitable attack vectors, hot spots of vulnerabilities, network security misconfigurations, and risky firewall access rules.
Spirent
Spirent’s CyberFlood Data Breach Assessment emulates attack, malware, and DLP scenarios to continually validate security policies and effectiveness in production networks. Together with Fortinet, Spirent provides users visibility into actual breach events and provides specific remediation recommendations to harden security policies in production networks.
Swimlane
Swimlane is at the forefront of the growing market of security automation, orchestration and response (SOAR) solutions and was founded to deliver scalable and flexible security solutions to organizations struggling with alert fatigue, vendor proliferation and chronic staffing shortages.
Telco Systems
Telco Systems delivers an industry-leading portfolio of SDN/NFV, Carrier Ethernet and MPLS-based demarcation, aggregation and edge solutions, enabling service providers to create intelligent, service-assured, CE 2.0-compliant networks for mobile backhaul, business services and cloud networking.
Tigera
Tigera provides Zero Trust network security and continuous compliance for Kubernetes platforms. Tigera will enable Fortinet customers to extend their network security architecture to Kubernetes based container environments.
Tufin
Tufin leads the Security Policy Orchestration market, enabling enterprises to centrally manage, visualize, and control security policies across hybrid cloud and physical network environments.
管理常见问题解答
FortiManager 能否管理 FortiAnalyzer？
需要。实际上我们也建议这么部署。当 FortiManager 管理 FortiAnalyzer 时，所有 FortiAnalyzer 界面都会和 FortiManager 磁并排呈现，支持设备所有数据流。
我已经为 FortiGate 订购了 360 安全防护服务，现在可如何获得对 FortiManager Cloud 和 FortiAnalyzer Cloud 的访问权限？
在 2020 年 8 月 3 日之后（含当天）购买 360 安全防护的客户需要订阅 FortiCloud Premium 才能访问 FortiManager Cloud 和 FortiAnalyzer Cloud 门户。在此日期之前购买 360 安全防护的客户需要在续订时购买 FortiCloud Premium 许可证。
我应该选择 FortiManager 还是 FortiGate Cloud？
FortiGate Cloud 是一项云服务，可简化 FortiGate 和安全访问产品的部署、管理和报告。它是一款简单的解决方案，只提供基础管理和配置。FortiManager（和 FortiAnalyzer）是面向 Fortinet 产品的全功能集中管理解决方案，可提供高级配置、工作流和报告（通过 FortiAnalyzer）。贵组织应视需求选择简化的云服务，或全功能设备（硬件或虚拟设备）。
如果我只有几个 FortiGate，是否还需要进行集中管理？
虽然所有 FortiGate 配置都可以在本地完成，但 FortiManager 可帮助节省管理 FortiGate配置的时间，或提供全面的集中策略管理。FortiAnalyzer 通过将来自多个 FortiGate 的数据相整合（从广度上来说）以及通过 Event Manager 和 FortiGuard IOC 服务扩大报告范围并提供高级特性（从深度上来说），极大地扩展了 FortiGate 的报告和增强分析功能。