La administración y el análisis de Fortinet proporcionan una orquestación, automatización y respuesta de red poderosas y simplificadas para entornos locales, de nube e híbridos. Las tecnologías de análisis y administración de Fortinet se han probado durante más de una década y miles de clientes las implementan en todo el mundo en las principales nichos (verticales) de la industria.
A medida que las redes empresariales se transforman y cambian con la transformación digital, las herramientas que una vez se utilizaron se vuelven desactualizadas y obsoletas. Sin embargo, muchas aún se implementan junto con una gran cantidad de nuevas tecnologías y crean un entorno complejo que no interactúa. Las empresas implementan un promedio de 75 soluciones de proveedores diferentes que carecen de inteligencia frente a amenazas compartida, un obstáculo para la ciberseguridad que a menudo se complica con la falta de personal de ciberseguridad calificado para administrar estas redes.
La orquestación, automatización y respuesta de red simplificadas ayudan a consolidar productos de punto complejos y son compatibles con las soluciones de Fortinet y de todos los socios del Security Fabric-Ready.
Visibilidad y Administración centralizada
La administración y la visibilidad de la seguridad centralizada favorecen a las múltiples consolas de administración complejas y permite el uso de un panel único accionado por automatización con opciones flexibles de implementación.
Detección de amenazas avanzadas
La detección de amenazas basada en el análisis puede detectar algunas amenazas e identificarlas como de riesgo alto, medio o bajo para la empresa.
Automatización del flujo de trabajo
Herramientas listas para la automatización que permiten una fácil conexión a sus herramientas existentes como Ansible, Puppet, Chef y, lo que es más importante, se integran fácilmente con otras plataformas.
Auditoria y cumplimiento
Administración de cumplimiento e informes regulatorios listo para usar para todos los dispositivos de Fabric-ready en su red.
|
Recientemente, Ponemon publicó un estudio en el que entrevistaron a más de 2,200 profesionales; lo que concluyeron como parte de esa investigación fue que el 52 % de las causas fundamentales de una violación son el resultado de errores humanos o fallas en el sistema. En este video, aprenda sobre los 3 casos de uso que FortiManager presenta para ayudar a abordar las causas fundamentales de las violaciones.
Ver ahoraFortiManager y FortiAnalyzer son los productos de Fortinet que permiten una simplificada orquestación, automatización y respuesta de la de red.
Administración de grado empresarial
Informes avanzados de cumplimiento
Evaluación y valoración del riesgo
Automatización
Integraciones listas para empresas
SOC de red conocida
Consulte la página del producto para obtener más información sobre estas y muchas más características del producto.
Dispositivos/VDOM (máximo) |
30 |
GB/Día de registros |
2 |
Capacidad de almacenamiento |
8 TB |
Dispositivos/VDOM (máximo) |
100 |
GB/Día de registros |
2 |
Capacidad de almacenamiento |
16 TB |
Dispositivos/VDOM (máximo) |
300 |
GB/Día de registros |
2 |
Capacidad de almacenamiento |
24 TB |
Dispositivos/VDOM (máximo) |
1,200 |
GB/Día de registros |
2 |
Capacidad de almacenamiento |
36 TB |
Dispositivos/VDOM (máximo) |
4,000 |
GB/Día de registros |
10 |
Capacidad de almacenamiento |
48 TB |
Dispositivos/VDOM (máximo) |
10,000 |
GB/Día de registros |
10 |
Capacidad de almacenamiento |
240 TB |
Las máquinas virtuales de FortiManager son compatibles con VMware vSphere, Citrix Xen Server, Xen, KVM y Microsoft Hyper-V.
Dispositivos/VDOM (máximo) |
10 |
GB/Día de registros |
1 |
Capacidad de almacenamiento |
100 GB |
Dispositivos/VDOM (máximo) |
+10 |
GB/Día de registros |
2 |
Capacidad de almacenamiento |
200 GB |
Dispositivos/VDOM (máximo) |
+100 |
GB/Día de registros |
5 |
Capacidad de almacenamiento |
1 TB |
Dispositivos/VDOM (máximo) |
+1,000 |
GB/Día de registros |
10 |
Capacidad de almacenamiento |
4 TB |
Dispositivos/VDOM (máximo) |
+5,000 |
GB/Día de registros |
25 |
Capacidad de almacenamiento |
8 TB |
Dispositivos/VDOM (máximo) |
+10,000 |
GB/Día de registros |
50 |
Capacidad de almacenamiento |
16 TB |
Consulte la página del producto para obtener más información sobre estas y muchas más características del producto.
Dispositivos/VDOM (máximo) |
150 |
GB/Día de registros |
100 |
Índice sostenido de análisis (registros/segundos) |
3,000 |
Dispositivos/VDOM (máximo) |
180 |
GB/Día de registros |
150 |
Índice sostenido de análisis (registros/segundos) |
4,500 |
Dispositivos/VDOM (máximo) |
200 |
GB/Día de registros |
200 |
Índice sostenido de análisis (registros/segundos) |
6,000 |
Dispositivos/VDOM (máximo) |
800 |
GB/Día de registros |
300 |
Índice sostenido de análisis (registros/segundos) |
8,250 |
Dispositivos/VDOM (máximo) |
2,000 |
GB/Día de registros |
600 |
Índice sostenido de análisis (registros/segundos) |
18,000 |
Dispositivos/VDOM (máximo) |
2,000 |
GB/Día de registros |
1,000 |
Índice sostenido de análisis (registros/segundos) |
30,000 |
Dispositivos/VDOM (máximo) |
4,000 |
GB/Día de registros |
5,000 |
Índice sostenido de análisis (registros/segundos) |
42,000 |
Dispositivos/VDOM |
10,000 |
GB/Día de registros |
8,300 |
Índice sostenido de análisis (registros/segundos) |
100,000 |
Las máquinas virtuales de FortiAnalyzer son compatibles con VMware vSphere, Citrix Xen Server, Xen, KVM y Microsoft Hyper-V.
Dispositivos/VDOM (máximo) |
10,000 |
GB/Día de registros |
1 |
Capacidad de almacenamiento |
500 GB |
Dispositivos/VDOM (máximo) |
10,000 |
GB/Día de registros |
+1 |
Capacidad de almacenamiento |
+500 GB |
Dispositivos/VDOM (máximo) |
10,000 |
GB/Día de registros |
+5 |
Capacidad de almacenamiento |
+3 TB |
Dispositivos/VDOM (máximo) |
10,000 |
GB/Día de registros |
+25 |
Capacidad de almacenamiento |
+10 TB |
Dispositivos/VDOM (máximo) |
10,000 |
GB/Día de registros |
+100 |
Capacidad de almacenamiento |
+24 TB |
Dispositivos/VDOM (máximo) |
10,000 |
GB/Día de registros |
+500 |
Capacidad de almacenamiento |
+48 TB |
Dispositivos/VDOM (máximo) |
10,000 |
GB/Día de registros |
+2,000 |
Capacidad de almacenamiento |
+100 TB |
Simplifique la administración y el aprovisionamiento sin intervención con un amplio conjunto de herramientas para administrar de manera centralizada cualquier número de dispositivos desde una única consola con controles de acceso basados en funciones, administración de configuración central, administración de cambios y cumplimiento de las mejores prácticas.
Más información
Administración de eventos del sistema basados en la nube & Servicio de monitoreo de la conducción. FortiAnalyzer Cloud permite a los clientes identificar anomalías operativas en tiempo real en su red.
Más informaciónLas máquinas virtuales de FortiAnalyzer y FortiManager están disponibles en Amazon Web Services y Microsoft Azure.
Los paquetes de servicios del Indicator of Compromise (IOC) de FortiGuard observaron recientemente artefactos de intrusiones o compromisos del host, que distribuyen diariamente para identificar de forma retroactiva cualquier intrusión del host y proteger de forma proactiva contra los ataques dirigidos más recientes.
El servicio de actualización de auditoría de seguridad está destinado a guiar a los clientes para diseñar, implementar y mantener continuamente la postura de seguridad objetivo del Security Fabric adecuada para su organización. El Security Fabric se basa fundamentalmente en las mejores prácticas de seguridad y al ejecutar estas revisiones de auditoría, los equipos de seguridad podrán identificar las vulnerabilidades críticas y las deficiencias en su configuración de Security Fabric e implementar recomendaciones de mejores prácticas.
El servicio de FortiSandbox Cloud es una solución de detección de amenazas avanzadas que realiza análisis dinámicos para identificar malware desconocido anteriormente. La inteligencia accionable que genera FortiCloud Sandbox se retroalimenta a los controles preventivos dentro de su red, desarmando la amenaza.
FortiManager allows IT personnel to maintain control over Fortinet’s security and networking devices through an easy to use, centralized, “single pane of glass” management console. Administrators can fully control the deployment of security policies, FortiGuard content security updates, firmware revisions, and individual configurations for thousands of Fortinet devices. In this demo, you will see how devices are registered, how policies and objects (along with policy packages) can be enacted, and how devices can be configured and updated easily.
FortiAnalyzer offers centralized network security logging and reporting for the Fortinet Security Fabric. FortiAnalyzer accepts inbound logs from multiple downstream Fortinet devices such as FortiGate, FortiMail, and FortiWeb devices etc. Functions such as viewing/filtering individual event logs, generating security reports, alerting based on behaviors, and investigating activity via drill-downs are all key features of FortiAnalyzer. In this demo, see how it presents the visibility of your networks such as an aggregate view of applications, web usage, and potentially malicious behavior affect your network.
FortiManager and FortiAnalyzer provide integration with many leading vendors as part of the Fortinet Security Fabric.
Below is a list of current Product Alliance Partners:
The leading provider of business-driven security management solutions, AlgoSec helps over 1,500 enterprises align security with their business processes, to make their organizations more agile, secure and compliant.
AWS services are trusted by more than a million active customers around the world – including the fastest growing startups, largest enterprises, and leading government agencies – to power their infrastructures, make them more agile, and lower costs.
Learn more on the Fortinet-AWS alliance
The AppViewX Platform is a modular, low-code software application that enables the automation and orchestration of network infrastructure using an intuitive, context-aware, visual workflow. Together with Fortinet, our combined solution enables SecOps teams to easily translate business requirements into automation workflows that improve agility and enforce compliance.
Arista Networks was founded to pioneer and deliver software-driven cloud networking solutions for large data center storage and computing environments.
Aruba, a Hewlett Packard Enterprise company is redefining the intelligent edge with reliable mobility, network security, and IoT solutions for organizations of all sizes.
AudioCodes Ltd. (NasdaqGS: AUDC) is a leading vendor of advanced voice networking and media processing solutions for the digital workplace. AudioCodes and Fortinet enable enterprises and service providers worldwide to build and operate secure and reliable all-IP voice and data networks for unified communications, contact centers and hosted business services.
BackBox is the leading provider for Intelligent Automation for Network and Security devices. BackBox provides real-time inventory, task automation, pre-emptive health checks on critical devices, and is ideal for any organization, multi-tenant sites and service providers.
Cisco is the worldwide leader in IT that helps companies seize the opportunities of tomorrow by proving that amazing things can happen when you connect the previously unconnected.
Claroty's ICS Security Platform passively protects industrial networks and assets from cyberattack; ensuring safe and continuous operation of the worlds most critical infrastructures without compromising the safety and security of personnel or expensive industrial assets. 2018 S4 ICS Challenge winner!
CSPi’s Myricom nVoy Series solution offers customers a new approach to cyber threat identification and investigation – a rapid breach response solution that identifies alerts associated with a specific asset and provides an extraction of the entire set of conversations associated with that breach. This detailed data is crucial in performing timely and accurate analysis needed to comply with data-privacy regulations.
Cyber Observer produces a holistic orchestration & awareness management solution for CISOs, CIOs & senior managers that integrates easily and quickly to provide an unprecedented & comprehensive analysis and visual representation of an enterprise’s entire cybersecurity ecosystem.
CyberArk is the global leader in privileged account security, a critical layer of IT security to protect data, infrastructure and assets across the enterprise, in the cloud and throughout the DevOps pipeline. CyberArk delivers the industry’s most complete solution to reduce risk created by privileged credentials and secrets.
D3 Security's award-winning SOAR platform seamlessly combines security orchestration, automation and response with enterprise-grade investigation/case management, trend reporting and analytics. With D3's adaptable playbooks and scalable architecture, security teams can automate SOC use-cases to reduce MTTR by over 95%, and manage the full lifecycle of any incident or investigation.
DFLabs IncMan SOAR leverages existing security products to dramatically reduce the response and remediation gap caused by limited resources and the increasing volume of incidents. Together with Fortinet, IncMan allows joint customers to respond to security incidents in a faster, more informed and efficient manner.
DivvyCloud protects your cloud and container environments from misconfigurations, policy violations, threats, and IAM challenges. Together with Fortinet cloud network security devices, this provides customers with a best-in-breed, end-to-end cloud security strategy.
FireMon solutions deliver continuous visibility into and control over network security infrastructure, policies, and risk.
ForeScout Technologies is transforming security through visibility. ForeScout offers a highly scalable, heterogeneous platform that provides Global 2000 enterprises and government agencies with agentless visibility and control of traditional and non-traditional devices, including IoT devices, the instant they connect to the network.
Gigamon provides active visibility into physical and virtual network traffic, enabling stronger security, and superior performance.
Google Cloud Platform is a secure, dedicated public cloud computing service operated by Google which provides a range of infrastructure and application services that enable deployments in the cloud. Fortinet provides critical firewalling, advanced security and scalable BYOL protection for elastic compute, container, and machine-learning workloads in Google’s innovative public cloud.
HashiCorp is the leader in multi-cloud infrastructure automation software. The HashiCorp software suite enables organizations to adopt consistent workflows to provision, secure, connect, and run any infrastructure for any application. HashiCorp open source tools Vagrant, Packer, Terraform, Vault, Consul, and Nomad are downloaded tens of millions of times each year and are broadly adopted by the Global 2000.
IBM Security offers one of the most advanced and integrated portfolios of enterprise security products and services. The portfolio enables organizations to effectively manage risk and defend against emerging threats.
Industrial Defender ASM® solutions deliver cybersecurity, compliance and change management for Industrial Control Systems (ICS). Over the last decade, the organization has successfully developed and delivered a single unified platform to secure and manage heterogeneous control environments for critical infrastructure operations.
Revolutionizing cybersecurity with the first of its kind enterprise threat intelligence and mitigation platform that drives proactive defense by turning tailored threat intelligence into automated security action.
LiveAction’s network performance visualization and analytics solutions provide network professionals the insights needed to easily manage and control end-to-end performance of multi-fabric, multi-vendor, and multi-cloud environments. The LiveAction and Fortinet integration extends network performance visibility and situational awareness to the Fortinet network edge infrastructure.
McAfee is one of the world’s leading independent cybersecurity companies. Inspired by the power of working together, McAfee creates business and consumer solutions that make the world a safer place.
Microsoft is the leading platform and productivity company for the mobile-first, cloud-first world, and its mission is to empower every person and every organization on the planet to achieve more.
NEC Corporation is a leader in the integration of IT and network technologies that benefit businesses and people around the world.
Recognized as the standard in compliance and cybersecurity technology for critical infrastructure industries, Network Perception brings transparency to network configurations. The intuitive platform with off-line network visualization provides in-depth network verification, ensuring regulatory compliance, cyber security, and organizational resilience. Together with Fortinet, Network Perception can increase efficiencies, simplifying workflows and enabling continuous compliance verification.
Nutanix makes infrastructure invisible, elevating IT to focus on the applications and services that power their business. The Nutanix enterprise cloud platform leverages web-scale engineering and consumer-grade design to natively converge compute, virtualization and storage into a resilient, software-defined solution that delivers any application at any scale.
Oracle offers a comprehensive and fully integrated stack of cloud applications and platform services.
Ordr delivers comprehensive proactive protection for the hyper-connected enterprise. The Ordr Systems Control Engine utilizes sophisticated machine learning and artificial intelligence to provide complete visibility and exhaustive control over every class of connected device and system.
Red Hat® Ansible® Automation Platform is the foundation for building and operating automation services at scale, providing enterprises a composable, collaborative, and trusted execution environment. Ansible helps enable the automated management of Fortinet’s flagship enterprise firewall, FortiGate, integrating it into customer’s IT automation strategies.
RedSeal’s network modeling and risk scoring platform is the foundation for enabling enterprises to be resilient to cyber-events across public cloud, private cloud and physical network environments. RedSeal helps customers understand their network from the inside out – providing actionable intelligence, situational awareness and a Digital Resilience Score to help enterprises measure and improve their resilience.
The Refactr DevSecOps automation platform is an all-in-one solution for designing and executing secure automation pipelines that include infrastructure delivery, application configuration, and security actions. Customers can quickly deploy Fortinet’s solutions through pre-built pipelines and leverage existing Fortinet automation content built with open DevOps and security automation tools.
Restorepoint’s solutions help organisations and service providers reduce cost, manage unforeseen risks, and to accelerate change management across their multi-vendor network infrastructures. Using our cost-effective products, customers can quickly automate Network Outage Protection, Compliance Auditing, and Privileged Access Management and to simplify Bulk Change Management.
ServiceNow makes work better. Our applications automate, predict, digitize and optimize business processes across IT, Customer Service, Security Operations, HR and more, for a better enterprise experience.
Skybox arms security leaders with a powerful set of integrated security solutions that give unprecedented visibility of the attack surface and key Indicators of Exposure (IOEs), such as exploitable attack vectors, hot spots of vulnerabilities, network security misconfigurations, and risky firewall access rules.
Spirent’s CyberFlood Data Breach Assessment emulates attack, malware, and DLP scenarios to continually validate security policies and effectiveness in production networks. Together with Fortinet, Spirent provides users visibility into actual breach events and provides specific remediation recommendations to harden security policies in production networks.
Swimlane is at the forefront of the growing market of security automation, orchestration and response (SOAR) solutions and was founded to deliver scalable and flexible security solutions to organizations struggling with alert fatigue, vendor proliferation and chronic staffing shortages.
Syncurity’s award-winning and patent-pending IR-Flow® SOAR platform reduces cyber risk by accelerating security operations processes, people and technology. Together with Fortinet, Syncurity reduces the time to detect, contain and remediate cyber risks leveraging standards-based APIs for alert enrichment, detailed investigation and automated incident response.
Telco Systems delivers an industry-leading portfolio of SDN/NFV, Carrier Ethernet and MPLS-based demarcation, aggregation and edge solutions, enabling service providers to create intelligent, service-assured, CE 2.0-compliant networks for mobile backhaul, business services and cloud networking.
Tigera provides Zero Trust network security and continuous compliance for Kubernetes platforms. Tigera will enable Fortinet customers to extend their network security architecture to Kubernetes based container environments.
Tufin leads the Security Policy Orchestration market, enabling enterprises to centrally manage, visualize, and control security policies across hybrid cloud and physical network environments.
¿Administra FortiManager a FortiAnalyzer?
Sí. Esta es la implementación recomendada, en realidad. Cuando FortiManager administra FortiAnalyzer, todos los mosaicos de la interfaz de FortiAnalyzer aparecen junto con los de FortiManager, lo que permite todos los flujos de trabajo.
¿Debo elegir FortiManager o FortiCloud?
FortiCloud es un servicio basado en la nube que optimiza la implementación, la administración y la elaboración de informes para los productos de FortiGate y de acceso unificado. Es una solución simple que proporciona los conceptos básicos de administración y configuración. FortiManager (y FortiAnalyzer) es la solución de administración central con todas las funciones para los productos de Fortinet. Las configuraciones avanzadas, los flujos de trabajo e informes (a través de FortiAnalyzer) están disponibles aquí. Las necesidades de su organización determinarán que se ajusta mejor para la administración, si un servicio simplificado en la nube o un appliance con todas las funciones (hardware o virtual).
Si solo tengo unos pocos FortiGates, ¿necesito una administración central?
Si bien todas las configuraciones de FortiGate se pueden hacer localmente, el ahorro de tiempo en la administración de elementos o una política central completa es un gran beneficio al utilizar FortiManager. FortiAnalyzer aumenta enormemente las capacidades de análisis y de elaboración de informes para FortiGate, tanto en amplitud, al combinar los datos de múltiples FortiGates en una sola perspectiva, como en profundidad, con horizontes de informes mucho más largos y funciones avanzadas que se encuentran en Event Manager y el servicio de IOC de FortiGuard.
