엔드포인트 보안

가시성을 위한 엔드포인트 원격 측정

FortiClient는 엔드포인트 원격 측정 정보를 보안 패브릭과 공유하여 일관된 엔드포인트 인식을 보장하고 통합 엔드포인트 및 네트워크 보안을 제공합니다. 공유되는 엔드포인트 정보에는 장치 정보, OS, 보안 상태, 취약점, 이벤트, 사용자 ID가 있습니다.

준수 시행

패치되지 않은 취약점, 실행 중인 소프트웨어, 웹 필터링, 보안 태세 등의 엔터프라이즈 보안 정책 및 사용 기준 시행을 가능하게 합니다. 

자동화/호스트 격리

보안 이벤트가 트리거했을 때 정책 기반 응답을 자동화합니다. 예를 들어, 의심스럽거나 손상된 엔드포인트를 자동으로 격리하여 인시던트를 포함하고 문제 발생을 예방합니다.

취약점 관리

자동 패치 등의 유연한 패치 옵션으로 패치되지 않은 OS와 소프트웨어 취약점을 식별하고 우선순위를 매깁니다.

소프트웨어 인벤토리

설치된 소프트웨어의 가시성 제공. 라이선스 관리 외에도 소프트웨어 인벤토리로 보안 위생을 향상할 수 있습니다. 비즈니스에 필수적이지 않은 소프트웨어가 설치된 경우, 불필요하게 잠재적 취약점을 생성하여 손상 가능성을 증가시킵니다.

오늘 FortiClient 패브릭 에이전트를 체험해 보세요. 

Anti-malware

Anti-malware leverages FortiGuard Content Pattern Recognition Language (CPRL) , machine learning, and AI to protect endpoint against malware. The pattern-based CPRL is highly effective in detecting and blocking polymorphic malware. It also blocks attack channels and malicious websites.

Anti-exploit

Protects against advanced threats exploiting zero-day and unpatched vulnerabilities. This signature-less and behavioral-based technology detects and blocks memory violation techniques. It shields web browsers, java/flash plug-ins, office applications, PDF readers, load library, and script interpreters from exploit-based attacks.

Web filtering

Powered by FortiGuard research, the web filtering function monitors all web browser activities to enforce web security and acceptable usage policy with 75+ categories. It works across all supported operating systems and works with Google SafeSearch. Admins can set black/white lists, on-/off-net policies, and import FortiGate web filtering policies for consistent enforcement. 

Application firewall

Provides the ability to monitor, allow, or block application traffic by categories. It uses the same categories as FortiGate, enabling consistent application traffic control. It leverages FortiGuard anti-botnet, IPS, and application control intelligence and can prevent the use of unwanted applications including proxy apps and HTTPS messaging apps.

FortiClient leverages the Security Fabric Architecture and integrates with many Security Fabric components:

FortiSandbox

FortiClient natively integrates with FortiSandbox. FortiClient automatically submits files to the sandbox for real-time analysis. Real-time threat intelligence from FortiSandbox is instantly shared across the enterprise.  

FortiGate

FortiClient shares endpoint telemetry with FortiGate enterprise firewalls to enforce endpoint security compliance.  FortiClient telemetry also contributes to the security rating. The diverse VPN client provides secure remote access.

FortiAnalyzer/FortiManager/FortiSIEM

In addition to endpoint telemetry, FortiClient sends logs including vulnerability, traffic, and events for the Network Operation Center (NOC) and Security Operation Center (SOC) for threat analysis and forensic investigation. 

FortiAuthenticator

Enables secure sign-on (SSO) and two-factor authentication.

VPN

FortiClient uses SSL and IPsec VPN to provide secure and reliable access to the corporate network. Two-factor authentication can also be leveraged for additional security. Features such as always-on, auto-connect, dynamic VPN gateway selection and split-tunneling, result in optimized user experience and security. 

Single sign-on

It integrates with FortiAuthenticator identity and access management service to provide single sign-on. 

EMS provides central management of Windows, Mac, Linux, iOS, Android, and Chromebook devices. Features include remote endpoint deployment, client provisioning, Windows AD integration, real-time endpoint status, vulnerability dashboard, software inventory, quarantine management, alerts, and more. 

_{*Separate VPN agent}

_{**Can consume Sandbox intelligence}