Keeping Ahead of Advanced Threats
FortiOS 7.2 Introduces many innovations across the Fortinet Security Fabric to stop attacks more effectively.
Overview
As organizations accelerate their digital innovation initiatives, they need to make sure their security can keep up with today’s complex and fast-evolving threats. Network edges have exploded, which has splintered the network perimeter across the entire infrastructure.
Fortinet Security Fabric
This rapid expansion of the network edge has exacerbated the challenges caused by years of adding disparate point security products to solve one problem with no regard for an overall security strategy. These disparate solutions cannot work together and share information, making consistent security policy and end-to-end visibility impossible. Trying to maintain and monitor numerous hybrid, hardware, software, and X-as-a-Service solutions also overburdens security teams.
Fortinet’s operating system, FortiOS, is the foundation of the Fortinet Security Fabric, consolidating many technologies and use cases into a simplified, single policy and management framework.
What's new in FortiOS 7.2
Over 20 years of prioritizing organic research and development has positioned Fortinet as the driving force behind cybersecurity innovation, and with the release of FortiOS 7.2, Fortinet is setting new industry standards for converged networking and security.
Learn more about the three key industry challenges and how to solve them, with insights from John Maddison, CMO and Executive VP, Products. Watch the videos below for an overview, and our on-demand webinar for all the details.
|
Conversion of Security and Networking
FortiOS 7.2 enhances our SD-Branch, ZTNA, and SASE solutions to provide the most complete and simplified digital acceleration experience.
Consolidation with Actionable Automation
To achieve end-to-end automation, FortiOS 7.2 expands the Fortinet Security Fabric’s ability to consolidate multiple security point products across an ever-expanding attack surface.
Fortinet's security-driven networking approach is uniquely designed for modern networking technologies across all network edges. This ensures that AI-powered security functions can be built-in to enable secure digital acceleration. FortiOS 7.2 further unifies the convergence of networking and security across NGFW, SD-WAN, LAN Edge, 5G, ZTNA, and more.
SD-WAN
The industry's most comprehensive Secure SD-WAN solution now includes enhancements to further accelerate and automate overlay orchestration to simplify the scaling of global WAN architectures. With enhanced application analytics monitoring and the addition of Mean Opinion Score (MOS) for voice and video applications, organizations can easily measure quality of experience from an application to end-users.
SD-Branch: The industry's most complete solution for securing the branch from the WAN edge to the LAN edge includes 5G Wireless WAN, SD-WAN, NGFW security, and LAN equipment in a single converged solution. FortiOS 7.2 introduces additional automated deployment and orchestration features to make setting up and managing branch networks on a global scale even simpler and more secure.
LAN Edge (Switch and Wi-Fi)
Secure the network by converging networking and security into a single solution that simplifies the secure onboarding of all types of devices. New onboarding features allow for the integrated discovery of devices to enable the implementation of 'least privilege' access at the LAN edge without additional system overhead.
NGFW
FortiOS 7.2 makes FortiGate the first next-generation firewall to support HTTP/3.0, offering increased visibility and protection for emerging HTTP standards that promise the speed and agility required by digital acceleration.
Identity
Providing strong, flexible authentication options, Fortinet complements on-prem and VM-based FortiAuthenticator with new cloud-based authentication services ideal for applications and resources in the cloud. Combined with our new FIDO-based passwordless multi-factor authentication (MFA), Fortinet is delivering easier to use, more secure authentication services to today's hybrid environments.
ZTNA
The only universal ZTNA enforcement built into a next-generation firewall (appliance, VM, or cloud-delivered) is available across all work locations to enable true Work-from-Anywhere. And it is now even easier to manage with a new unified policy configuration in a single GUI for every connection and improvements to the ZTNA service portal.
Micro-segmentation
Fortinet is expanding upon its Security Fabric segmentation and micro-segmentation capabilities to deliver intent-based networking and control of east-west traffic.
Secure Remote Access - SASE
Provide secure private access to corporate applications with natively integrated ZTNA in FortiSASE for one unified agent for endpoint protection and traffic redirection. Continuous identity and context validation allow organizations to easily shift from implicit to explicit access per application for remote users to overcome traditional VPN challenges.
Simplified and Centralized Management and Monitoring
New enhancements simplify and automate the roll-out of large deployments with improved zero-touch provisioning. They also enable the deeper integration of AI for network operations (AIOps) with centralized management via FortiManager and Digital Experience Monitoring with FortiMonitor.
Fortinet continues to expand the Fortinet Security Fabric's ability to consolidate multiple security point products across an ever-expanding attack surface.
Enhancements Across the Fabric
Additional upgrades across Fortinet's entire portfolio of network, endpoint, and cloud solutions introduced in FortiOS 7.2 enhance the Fortinet Security Fabric and Fortinet's ability to consolidate security point products into a platform that is broad, integrated, and automated.
Technology Alliances
The Fortinet Fabric-Ready Technology Alliance Partner Program brings together a community of global technology partners with specialized expertise. As a result of more than 500 integrations, customers can more easily build a platform of integrated solutions to improve security effectiveness, reduce complexity, and simplify operations.
Fortinet's rich suite of FortiGuard Security Services is powered by FortiGuard Labs and natively integrated across the Fortinet Security Fabric. Automated and coordinated security is delivered in real time. In FortiOS 7.2, Fortinet expands its offering with multiple new services and enhancements to stop known and unknown threats faster and more effectively.
New services include:
Inline Sandbox
This innovation transforms a traditional detection sandbox capability into real-time in-network prevention to stop both known and unknown malware, with minimal impact on operations. The result is better ransomware protection when compared to solutions that allow suspicious files into the network and then must chase down malware once it's been identified.
Inline Cloud Access Security Broker (CASB)
Secures SaaS applications in use by organizations, providing broad visibility and granular control over SaaS access, usage, and data. This service for FortiGate NGFW integrates with the FortiClient Fabric Agent, enabling inline ZTNA traffic inspection and ZTNA posture check.
Advanced Device Protection
This functionality automatically discovers and segments OT and IoT devices based on their unique network features, maintains asset inventory, and uses pattern matching, IPS, and application signatures to enforce appropriate policies and automate remediation. This is offered for our NGFW with Industrial Security (OT) and IoT Detection services and at the LAN edge through integration with FortiNAC.
Outbreak Detection
Enables faster response to outbreak attacks through immediate alerts and threat-hunting scripts that automatically identify and respond to new threats to provide SOC teams with faster time to detection and remediation.
SOC-as-a-Service
SOC teams can focus on major executions by offloading all tier-one analysis to Fortinet's global team of experts. This attached service is conveniently priced at a fixed cost for NGFW deployments.
Dedicated IPS
Designed for finance and other regulated deployments, this solution enables migration from separate hardware to NGFW while preserving operations and compliance practices.
Key enhancements to existing services include:
Fabric Rating
This service guides customers as they design, implement, and continually advance their organization's security posture, taking into account audit checks, the identification of critical vulnerabilities, and configuration weaknesses.
Web Security
AI-driven URL, DNS, and video filtering services provide comprehensive threat protection to address various threats, including ransomware, credential theft, phishing, and other web-borne attacks.
View by:
Contact us to learn more about new FortiOS 7.2!
