FortiSandbox: Zero-day Threat Protection

Cyber criminals are increasingly leveraging automation and artificial intelligence (AI) as part of their cyberattacks, heightening the risk of a security incident or a data breach. In turn, some CISOs are adopting sophisticated solutions such as AI-powered sandboxing as an essential component of their security strategy. AI-based sandboxing helps combat previously unknown threats such as ransomware, crypto-malware, and many others.

In addition to the sophistication of threats, organizations are grappling with protecting growing attack surfaces are becoming more dynamic due to the rise of Internet-of-Things (IoT) and cloud-based services. Coupled with the shortage of qualified cybersecurity talent, organizations are turning to centralized and integrated sandboxing across various security controls to automate breach protection.

FortiSandbox: Zero-day Threat Protection Product Details

FortiSandbox improves zero-day threat detection efficacy and performance by leveraging two machine learning models—patent-pending enhanced random forest with boost tree and least squares optimization applied to static and dynamic analysis of suspicious objects. It also accelerates threat investigation and management processes by adopting standards-based on the MITRE ATT&CK framework for malware reporting.

The Fortinet automated breach protection strategy enables FortiSandbox to easily integrate across both Fortinet and non-Fortinet products to provide real-time threat intelligence and speed threat response.

FortiSandbox analysis also includes malware that targets industrial control systems (ICS) so it can deliver the same sandbox benefits to organizations that manage both Information Technology (IT) and Operation Technology (OT) business segments.

FortiSandbox broad form factor offering including physical, virtual appliance to public cloud and as a hosted service that supports various deployment options to fit any environment. 

Compare Products

FortiSandbox provides integration with many leading IT vendors as part of the Fortinet Security Fabric.  Below is a list of current FortiSandbox Fabric-Ready API Alliance Partners:

NSS Labs Breach Prevention Systems (BPS) Test 2019 

NSS Labs BPS focuses on both detecting and blocking of exploits, advanced malware, and evasions which is critical in reducing the risk of breaches. This test helps emphasize the importance in the automation of the advanced threat response cycle of prevent-detect-mitigate across a number of threat vectors including web, email, and endpoint. Fortinet's Breach Protection tested solution consists of FortiSandbox, FortiGate, and FortiClient integrated together, earned a Recommended award by achieving an overall Security Effectiveness of 97.8% and offering the lowest 3-year TCO. 

• NSS Labs 2019 BPS Test Report FortiSandbox (AWS), FortiGate, FortiClient
• NSS Labs 2019 BPS Security Value Map (SVM)

ICSA Certified for Advanced Threat Defense

With data breaches continuing to make headlines, new product and solutions designed to detect and prevent the advanced attacks often at the root of these breaches have emerged. To help organizations assess the effectiveness of these new offerings, ICSA Labs, an independent division of Verizon (author or the annual Data Breach Investigations Report or DBIR), recently introduced a new independent, Advanced Threat Defense certification, and Email certification.

• ICSA Certified for Advanced Threat Defense

NSS Labs Breach Detection Systems Test 2017 and SVM

According to Verizon's 2017 Data Breach Investigations Report, 99% of malware is delivered by email and the web. In the NSS Breach Detection System 2017 test, newly introduced FortiSandbox 2000E blocked 100% of advanced malware delivered over these two vectors and 99% overall offered at the lowest TCO, earning the NSS Labs “Recommended” rating.

• NSS Labs Breach Detection Systems Test: FortiSandbox with FortiClient (ATP Agent)
• NSS Labs BDS Security Value Map