침입 방지 시스템(IPS)

침입 방지 시스템(IPS) 기술은 방화벽 솔루션에 포함하거나, 별도의 독립적 어플라이언스로 사용하는 등, 네트워크 보안 방어에서 점점 보편화되고 있습니다. 차세대 방화벽(NGFW) 솔루션으로 유명한 Fortinet에서 IPS 기술을 개발한지 10년이 훨씬 지났습니다. Fortinet 고객은 FortiGate 방화벽이 우수한 성능을 낼 것으로 기대하고 이에 의지합니다. FortiGate IPS는 그 뒤를 그대로 이어 오늘날 시장에서 최고의 IPS 성능을 제공합니다. 기존 IPS와 다른 발전 경로를 따르는 FortiGate IPS는 다른 독립형 IPS와 차별화되는 방식으로 혁신합니다.

제로데이 공격, 표적화된 지능형 공격, 랜섬웨어, 각종 형태의 멀웨어 및 분산된 서비스 거부 공격을 막으려면 기존 독립형 IPS 또는 대부분 방화벽에서는 제공하지 않는 정교한 탐지 엔진이 필요합니다. FortiGate IPS는 이런 알려지지 않은 위협을 방어하기 위한 여러 검사 엔진, 위협 인텔리전스 피드, 지능형 위협 보호 옵션이 포함됩니다. 강력한 FortiGate 플랫폼(하드웨어, 가상, 클라우드)에 지능형 분석 도구와 FortiAnalyzer를 통한 워크플로를 포함해 패키지화한 FortiGate IPS는 SOC에서 사고 대응에 필요한 것을 제공할 수 있는 비용 효율적인 네트워크 보안 솔루션입니다.

FortiGate IPS는 고객의 환경 조건에 따라 다양한 폼팩터와 모델로 제공됩니다. 모든 모델은 완전한 FortiGate IPS 기능을 갖추고 있으며 단일 FortiManager-FortiAnalyzer 인스턴스에서 모든 폼팩터를 관리할 수 있습니다.

NSS Labs Next Generation Intrusion Prevention Systems (NGIPS) 2019

NSS Labs’ Next Generation Intrusion Prevention Systems (NGIPS) focuses on security effectiveness and TCO for NGIPS solutions across selected vendors tested. The Security Value Map (SVM) shows that FortiGate NGIPS achieved a cumulative blocking rate of 99.18% for FortiGate 100F and the lowest TCO at $2 per protected Mbps. Fortinet builds world-class NGIPS appliances that requires highest possible performance, best of breed security and having another “Recommended” IPS rating from NSS Labs is just another proof point.

• NSS Labs Next Generation Intrusion Prevention Systems (NGIPS) 2019 Report

NSS Labs NGIPS 2018 SVM and Report

NSS Labs’ NGIPS test is the most extensive IPS test, including several tests not conducted for DCIPS, such as live drive-by-exploits (100% block rate for Fortinet), exploits against web target types, application ID and evasions (also 100% block rate for Fortinet). The FortiGate 500E and FortiGate 3000D are world-class IPS appliance, achieving “Recommended” status again with an overall Exploit block rate of 99.5% for FortiGate 500E and 99.6% for FortiGate 3000D.

• NSS Labs 2018 NGIPS SVM
  
• NSS Labs 2018 NGIPS Test Report FortiGate 500E    
  
• NSS Labs 2018 NGIPS Test Report FortiGate 3000D    
  

NSS Labs DCIPS 2018 SVM and Report

NSS Labs’ Data Center Intrusion Prevention Systems (DCIPS) focuses on data center environments, especially vulnerabilities commonly found in servers. The Security Value Map (SVM) shows that FortiGate IPS achieved the highest cumulative blocking rate at 98.73% and the lowest TCO at $3 per protected Mbps. Fortinet builds world-class IPS appliances and another “Recommended” IPS rating from NSS Labs proves this.

• NSS Labs 2018 DCIPS SVM
• NSS Labs 2018 DCIPS Test Report – FortiGate IPS 3000D

NSS Labs DCSG 2017 SVM and Report

NSS Labs’ DCSG test is a comprehensive Data Center Security Gateway (DCSG) test, including several tests to measure relevant security effectiveness and Intrusion Prevention (IPS) performance using live exploits including “weaponized” exploits (97.9% and 98% block rate respectively for Fortinet FortiGate 7060E and FortiGate 3000D) and resistance to evasion techniques (100% block rate for Fortinet). The FortiGate 7060E and 3000D both achieved “Recommended” status, with a leading combination of Security Effectiveness and Value per protected Megabit Per Second (Mbps) in the NSS Labs Security Value Map (SVM).

• NSS Labs 2017 DCSG SVM
• NSS Labs 2017 DCSG Test Report FortiGate 3000D
• NSS Labs 2017 DCSG Test Report FortiGate 7060E

NSS Labs Breach Prevention Systems (BPS) Test 2017

NSS Labs introduced a new group test, BPS focused on detecting and blocking exploits, advanced malware, and evasions. This helps validate the advanced threat response cycle of prevent-detect-mitigate across a number of threat vectors including web, email, and endpoint. Fortinet's Security Fabric consisting of FortiSandbox, FortiGate, FortiMail, and FortiClient integrated together, earned a Recommended award by achieving a block rate of 99.6% and offering the lowest 3-year TCO

• NSS Labs Breach Prevention Systems Test: FortiSandbox, FortiGate , FortiMail, FortiClient

NSS Labs DCIPS 2016 SVM

NSS Labs’ Data Center Intrusion Prevention System (DCIPS) report is the industry’s most comprehensive test to date with their Security Value Map revealing that Fortinet’s FortiGate 3000D earned the highest ratings for Security Effectiveness, blocking 99.9 percent of exploits, and TCO (Total Cost of Ownership) per protected Mbps (Megabit per second).

• NSS Labs DCIPS Test Report FortiGate 3000D
• NSS Labs 2016 DCIPS Security Value Map

NSS Labs 2015 Next Generation IPS Test

In 2015, NSS Labs conducted a group test of next generation IPS solutions to assess their abilities to identify both the applications and the users on their internal networks, protect the enterprise user against threats/exploits, and catch sophisticated attacks while producing as few false positives as possible. Demonstrating 99% effectiveness and superior value, Fortinet FortiGate earned the NSS Labs Recommendation.

• NSS Labs 2015 Next Generation IPS Test Report

ICSA Labs Certified: Antivirus, Corporate Firewall, IPsec, NIPS, SSL-TLS, and Web Application Firewall

FortiGate and FortiWeb products are evaluated against ICSA criteria in 6 popular Certification programs. ICSA Labs manages and sponsors security consortia that provides a forum for intelligence sharing among the leading vendors of security products. In addition, ICSA Labs publishes surveys, security industry studies, and buyer's guides for computer security products.

• Antivirus, Corporate Firewall, IPSec, NIPS, SSL-TLS and Web Application Firewall ICSA Certification

FortiGate IPS provides integration with many leading IT vendors as part of the Fortinet Security Fabric.  Below is a list of current Product Alliance Partners: