L'adoption rapide des technologies de transformation digitale est devenue un vecteur de vulnérabilité des réseaux et de complexité pour la sécurité réseau. Les cyberattaques sont plus que jamais d'actualité et une récente enquête de Ponemon indique que plus de la moitié des incidents sur l'année dernière ont des causes bénignes et auraient pu être jugulés. Une stratégie de sécurité qui donne la priorité à l'automatisation des opérations réseau présente un réel intérêt. En tant que partie intégrante de la Sécurity Fabric, FortiManager propose une gestion centralisée, la mise en œuvre des bonnes pratiques et l'automatisation des workflows, pour mieux se protéger des incidents de sécurité.
|
Selon une étude de Ponemon portant sur plus de 2 200 professionnels, 52% des causes d'un piratage résultent d'une erreur humaine ou de problématiques systèmes. Dans cette vidéo, découvrez les 3 cas d'usage proposés par FortiManager en réponse à l'origine des piratages.
Voir
Gestion centralisée
Haute disponibilité
Provisioning sécurisé d'un SD-WAN et monitoring
Automatisation de la sécurité
Intégrations optimales
Domaines d'administration (ADOM) et architecture multi-tenant
|
Dans cette vidéo, découvrez comment tirer parti de FortiManager et des Playbooks Ansible pour automatiser le provisioning.
VoirDispositifs/VDOM (max.) |
30 |
Go/Jour de logs |
2 |
Capacité de stockage |
8 TB |
Dispositifs/VDOM (max.) |
100 |
Go/Jour de logs |
2 |
Capacité de stockage |
16 TB |
Dispositifs/VDOM (max.) |
300 |
Go/Jour de logs |
2 |
Capacité de stockage |
24 TB |
Dispositifs/VDOM (max.) |
1,200 |
Go/Jour de logs |
2 |
Capacité de stockage |
36 TB |
Dispositifs/VDOM (max.) |
4,000 |
Go/Jour de logs |
10 |
Capacité de stockage |
48 TB |
Dispositifs/VDOM (max.) |
10,000 |
Go/Jour de logs |
10 |
Capacité de stockage |
240 TB |
Les machines virtuelles FortiManager sont compatibles avec VMware vSphere, Citrix Xen Server, Xen, KVM et Microsoft Hyper-V.
Dispositifs/VDOM (max.) |
10 |
Go/Jour de logs |
1 |
Capacité de stockage |
100 GB |
Dispositifs/VDOM (max.) |
+10 |
Go/Jour de logs |
2 |
Capacité de stockage |
200 GB |
Dispositifs/VDOM (max.) |
+100 |
Go/Jour de logs |
5 |
Capacité de stockage |
1 TB |
Dispositifs/VDOM (max.) |
+1,000 |
Go/Jour de logs |
10 |
Capacité de stockage |
4 TB |
Dispositifs/VDOM (max.) |
+5,000 |
Go/Jour de logs |
25 |
Capacité de stockage |
8 TB |
Dispositifs/VDOM (max.) |
+10,000 |
Go/Jour de logs |
50 |
Capacité de stockage |
16 TB |
Bénéficiez d'un provisioning et une gestion automatisés grâce à un riche panel d'outils qui permet une gestion centralisée de tous les dispositifs à partir d'une seule console. De multiples fonctionnalités sont proposées parmi lesquelles un contrôle d'accès basé sur le rôle, la gestion centralisée des paramètres de configuration, la gestion des changements et la conformité aux meilleures pratiques de sécurité.
Les machines virtuelles FortiManager sont disponibles sur Amazon Web Services et Microsoft Azure.
FortiManager allows IT personnel to maintain control over Fortinet’s security and networking devices through an easy to use, centralized, “single pane of glass” management console. Administrators can fully control the deployment of security policies, FortiGuard content security updates, firmware revisions, and individual configurations for thousands of Fortinet devices. In this demo, you will see how devices are registered, how policies and objects (along with policy packages) can be enacted, and how devices can be configured and updated easily.
FortiManager provides integration with many leading vendors as part of the Fortinet Security Fabric.
Below is a list of current Product Alliance Partners:
The leading provider of business-driven security management solutions, AlgoSec helps over 1,500 enterprises align security with their business processes, to make their organizations more agile, secure and compliant.
AWS services are trusted by more than a million active customers around the world – including the fastest growing startups, largest enterprises, and leading government agencies – to power their infrastructures, make them more agile, and lower costs.
Learn more on the Fortinet-AWS alliance
The AppViewX Platform is a modular, low-code software application that enables the automation and orchestration of network infrastructure using an intuitive, context-aware, visual workflow. Together with Fortinet, our combined solution enables SecOps teams to easily translate business requirements into automation workflows that improve agility and enforce compliance.
Arista Networks was founded to pioneer and deliver software-driven cloud networking solutions for large data center storage and computing environments.
Aruba, a Hewlett Packard Enterprise company is redefining the intelligent edge with reliable mobility, network security, and IoT solutions for organizations of all sizes.
AudioCodes Ltd. (NasdaqGS: AUDC) is a leading vendor of advanced voice networking and media processing solutions for the digital workplace. AudioCodes and Fortinet enable enterprises and service providers worldwide to build and operate secure and reliable all-IP voice and data networks for unified communications, contact centers and hosted business services.
BackBox is the leading provider for Intelligent Automation for Network and Security devices. BackBox provides real-time inventory, task automation, pre-emptive health checks on critical devices, and is ideal for any organization, multi-tenant sites and service providers.
Cisco is the worldwide leader in IT that helps companies seize the opportunities of tomorrow by proving that amazing things can happen when you connect the previously unconnected.
Claroty's ICS Security Platform passively protects industrial networks and assets from cyberattack; ensuring safe and continuous operation of the worlds most critical infrastructures without compromising the safety and security of personnel or expensive industrial assets. 2018 S4 ICS Challenge winner!
CSPi’s Myricom nVoy Series solution offers customers a new approach to cyber threat identification and investigation – a rapid breach response solution that identifies alerts associated with a specific asset and provides an extraction of the entire set of conversations associated with that breach. This detailed data is crucial in performing timely and accurate analysis needed to comply with data-privacy regulations.
Cyber Observer produces a holistic orchestration & awareness management solution for CISOs, CIOs & senior managers that integrates easily and quickly to provide an unprecedented & comprehensive analysis and visual representation of an enterprise’s entire cybersecurity ecosystem.
CyberArk is the global leader in privileged account security, a critical layer of IT security to protect data, infrastructure and assets across the enterprise, in the cloud and throughout the DevOps pipeline. CyberArk delivers the industry’s most complete solution to reduce risk created by privileged credentials and secrets.
D3 Security's award-winning SOAR platform seamlessly combines security orchestration, automation and response with enterprise-grade investigation/case management, trend reporting and analytics. With D3's adaptable playbooks and scalable architecture, security teams can automate SOC use-cases to reduce MTTR by over 95%, and manage the full lifecycle of any incident or investigation.
DivvyCloud protects your cloud and container environments from misconfigurations, policy violations, threats, and IAM challenges. Together with Fortinet cloud network security devices, this provides customers with a best-in-breed, end-to-end cloud security strategy.
FireMon solutions deliver continuous visibility into and control over network security infrastructure, policies, and risk.
ForeScout Technologies is transforming security through visibility. ForeScout offers a highly scalable, heterogeneous platform that provides Global 2000 enterprises and government agencies with agentless visibility and control of traditional and non-traditional devices, including IoT devices, the instant they connect to the network.
Gigamon provides active visibility into physical and virtual network traffic, enabling stronger security, and superior performance.
Google Cloud Platform is a secure, dedicated public cloud computing service operated by Google which provides a range of infrastructure and application services that enable deployments in the cloud. Fortinet provides critical firewalling, advanced security and scalable BYOL protection for elastic compute, container, and machine-learning workloads in Google’s innovative public cloud.
HashiCorp is the leader in multi-cloud infrastructure automation software. The HashiCorp software suite enables organizations to adopt consistent workflows to provision, secure, connect, and run any infrastructure for any application. HashiCorp open source tools Vagrant, Packer, Terraform, Vault, Consul, and Nomad are downloaded tens of millions of times each year and are broadly adopted by the Global 2000.
IBM Security offers one of the most advanced and integrated portfolios of enterprise security products and services. The portfolio enables organizations to effectively manage risk and defend against emerging threats.
Industrial Defender ASM® solutions deliver cybersecurity, compliance and change management for Industrial Control Systems (ICS). Over the last decade, the organization has successfully developed and delivered a single unified platform to secure and manage heterogeneous control environments for critical infrastructure operations.
Revolutionizing cybersecurity with the first of its kind enterprise threat intelligence and mitigation platform that drives proactive defense by turning tailored threat intelligence into automated security action.
LiveAction’s network performance visualization and analytics solutions provide network professionals the insights needed to easily manage and control end-to-end performance of multi-fabric, multi-vendor, and multi-cloud environments. The LiveAction and Fortinet integration extends network performance visibility and situational awareness to the Fortinet network edge infrastructure.
McAfee is one of the world’s leading independent cybersecurity companies. Inspired by the power of working together, McAfee creates business and consumer solutions that make the world a safer place.
Microsoft is the leading platform and productivity company for the mobile-first, cloud-first world, and its mission is to empower every person and every organization on the planet to achieve more.
NEC Corporation is a leader in the integration of IT and network technologies that benefit businesses and people around the world.
Recognized as the standard in compliance and cybersecurity technology for critical infrastructure industries, Network Perception brings transparency to network configurations. The intuitive platform with off-line network visualization provides in-depth network verification, ensuring regulatory compliance, cyber security, and organizational resilience. Together with Fortinet, Network Perception can increase efficiencies, simplifying workflows and enabling continuous compliance verification.
Nutanix makes infrastructure invisible, elevating IT to focus on the applications and services that power their business. The Nutanix enterprise cloud platform leverages web-scale engineering and consumer-grade design to natively converge compute, virtualization and storage into a resilient, software-defined solution that delivers any application at any scale.
Oracle offers a comprehensive and fully integrated stack of cloud applications and platform services.
Ordr delivers comprehensive proactive protection for the hyper-connected enterprise. The Ordr Systems Control Engine utilizes sophisticated machine learning and artificial intelligence to provide complete visibility and exhaustive control over every class of connected device and system.
Red Hat® Ansible® Automation Platform is the foundation for building and operating automation services at scale, providing enterprises a composable, collaborative, and trusted execution environment. Ansible helps enable the automated management of Fortinet’s flagship enterprise firewall, FortiGate, integrating it into customer’s IT automation strategies.
RedSeal’s network modeling and risk scoring platform is the foundation for enabling enterprises to be resilient to cyber-events across public cloud, private cloud and physical network environments. RedSeal helps customers understand their network from the inside out – providing actionable intelligence, situational awareness and a Digital Resilience Score to help enterprises measure and improve their resilience.
Restorepoint’s solutions help organisations and service providers reduce cost, manage unforeseen risks, and to accelerate change management across their multi-vendor network infrastructures. Using our cost-effective products, customers can quickly automate Network Outage Protection, Compliance Auditing, and Privileged Access Management and to simplify Bulk Change Management.
ServiceNow makes work better. Our applications automate, predict, digitize and optimize business processes across IT, Customer Service, Security Operations, HR and more, for a better enterprise experience.
Skybox arms security leaders with a powerful set of integrated security solutions that give unprecedented visibility of the attack surface and key Indicators of Exposure (IOEs), such as exploitable attack vectors, hot spots of vulnerabilities, network security misconfigurations, and risky firewall access rules.
Spirent’s CyberFlood Data Breach Assessment emulates attack, malware, and DLP scenarios to continually validate security policies and effectiveness in production networks. Together with Fortinet, Spirent provides users visibility into actual breach events and provides specific remediation recommendations to harden security policies in production networks.
Swimlane is at the forefront of the growing market of security automation, orchestration and response (SOAR) solutions and was founded to deliver scalable and flexible security solutions to organizations struggling with alert fatigue, vendor proliferation and chronic staffing shortages.
Telco Systems delivers an industry-leading portfolio of SDN/NFV, Carrier Ethernet and MPLS-based demarcation, aggregation and edge solutions, enabling service providers to create intelligent, service-assured, CE 2.0-compliant networks for mobile backhaul, business services and cloud networking.
Tigera provides Zero Trust network security and continuous compliance for Kubernetes platforms. Tigera will enable Fortinet customers to extend their network security architecture to Kubernetes based container environments.
Tufin leads the Security Policy Orchestration market, enabling enterprises to centrally manage, visualize, and control security policies across hybrid cloud and physical network environments.
La gestion de FortiAnalyzer est-elle assurée par FortiManager ?
Oui. Cette configuration est d'ailleurs recommandée. Lorsque FortiAnalyzer est géré par FortiManager, toutes les tuiles de menu de FortiAnalyzer s'affichent aux côtés de celles de FortiManager, offrant ainsi un accès à tous les workflows.
Dois-je opter pour FortiManager ou FortiCloud ?
FortiCloud est un service cloud qui simplifie le déploiement, la gestion et le reporting pour les FortiGate et les produits d'accès unifiés. Il s'agit d'une solution simple qui offre tous les outils de gestion et de configuration. FortiManager et FortiAnalyzer forment une solution multi-fonction de gestion centralisée pour les produits Fortinet. Les configurations, workflows et le reporting avancés (via FortiAnalyzer) sont disponibles ici. Ce sont les besoins de votre entreprise qui dicteront si vous avez besoin d'un service cloud simplifié ou d'une appliance complète (matérielle ou virtuelle) gérée par vos soins.
Ai-je besoin de la gestion centralisée si je ne dispose que de quelques instances FortiGate ?
Les configurations de FortiGate peuvent être réalisées en local. Cependant, FortiManager favorise un réel gain de temps dans la gestion de ces plateformes et permet de définir des règles de manière centralisée. FortiAnalyzer enrichit considérablement les capacités d'analyse de FortiGate, en consolidant les données en provenance de plusieurs instances de FortiGate sur une interface unique, en proposant un horizon de reporting bien plus long et en offrant les fonctionnalités évoluées d'Event Manager et du service FortiGuard IOC (indicateurs de compromission).
