Securing Google Cloud Platform with Fortinet Security Fabric
Consistent Multi-layered security from across clouds and datacenters to GCP
Extending Advanced Security for GCP
Fortinet Dynamic Cloud Security for GCP
Organizations are modernizing their IT operations to develop applications faster and accelerate time to innovate to maintain their competitive position in the digital innovation era. Google Cloud provides customers with modern approaches to enable business innovation. Cloud computing expands digital services across hybrid and multi-cloud infrastructures.
The Fortinet dynamic cloud security for Google Cloud provides consistent, best-in-class enterprise security to Google Cloud-based environments. The Security Fabric protects business workloads across on-premises, data centers and cloud environments — providing multi-layered security for cloud-based applications. The solution offers Network, Application, and Cloud platform security capabilities provided in a variety of form factors including VM-, container-, and SaaS delivered protection that natively integrates Fortinet security functionality into Google Cloud.
Fortinet breaks down the barriers that inhibit security visibility and management across private, public, and hybrid cloud platforms. The Fortinet Dynamic Cloud Security solution for GCP helps organizations maintain operationally viable consistent security protection in a shared responsibility model, from on-premises to the cloud.
Features and Benefits:
Simplify security management with single-pane control across GCP and on-premises data centers
Gain cloud-native visibility and control into your GCP workloads and applications
Leverage Fortinet Cloud Security Services Hub for scalable and multi-layer secure connectivity
Security offerings in VM, and SaaS form factors with flexible BYOL and PAYG billing options
FortiGate Next-Generation Firewall on GCP
The FortiGate Next Firewall on GCP delivers next generation firewall and SD-WAN capabilities for organizations of all sizes, with the flexibility to be deployed as next generation firewall and/or VPN gateway. It enables broad protection and automated management for consistent enforcement and visibility across your hybrid cloud infrastructure. FortiGate scales from the
FortiWeb Cloud WAF-as-a-Service
FortiWeb Cloud WAF-as-a-Service is a Security-as-a-Service SaaS cloud-based web application firewall (WAF) that protects public cloud-hosted web applications from the OWASP Top 10, zero-day threats, and other application layer attacks.
Requiring no hardware or software, the FortiWeb colony of WAF gateways can run in several GCP regions. This allows organizations to scrub application traffic within the same region their applications reside, addressing performance and regulation concerns, as well as keeping traffic cost to a minimum.
Cloud Workload Protection with FortiCWP
FortiCWP is Fortinet’s Cloud Workload Protection (CWP) solution. FortiCWP uses API level integration into GCP management and security services to monitor and track cloud resources including their configurations, activity, traffic flows. FortiCWP will also scan cloud data stores for sensitive or malicious content and produce reports on an organization’s compliance with common regulatory standards. FortiCWP also supports Microsoft Azure and AWS.
Fortinet Use Cases for GCP
Fortinet Dynamic Cloud Security enables the broadest set of use cases for GCP.
Cloud Platform Visibility and Control
- Cloud infrastructure visibility and control
Monitor activity and configuration of multiple cloud resources while simplifying regulatory compliance reporting. - Compliance in the cloud
Automate compliance auditing and reporting for on-premises and cloud environments. - Cloud-based security management and analytics
Leverage the global presence of GCP to deploy centralized and global security management and analytics systems in the cloud.
Application Security
- Web Application Security
Secure web applications from known and unknown attacks using Fortinet's unique Web Application Security solutions - Container Security
Enable security for all stages of container deployment and rollout.
Network Security.
- Secure Hybrid Cloud
Deploy secure connectivity, network segmentation, and application security for hybrid-cloud-based deployments. - Cloud Security Services Hub
Unify disparate environments through a central security services hub, or transit network. - Logical (intent-based) Segmentation
Deploy intent-based segmentation, which builds access rules and segments based on user identity or business logic, and adjusts rules dynamically in response to a continuous trust assessment.
Click here to learn more about these use cases.
Featured Products on Google Cloud Platform
Fortinet offers its industry-leading series of network security products on the Google Cloud Platform, enabling advanced security protection for your cloud-based infrastructure and applications.
The FortiGate-VM on Google Cloud Platform delivers next-generation firewall (NGFW) capabilities for organizations of all sizes, with the flexibility to be deployed as a NGFW and/or a VPN gateway.
The FortiWeb Web Application Firewall (WAF) provides advanced features and AI-based machine learning detection engines that defend web applications from vulnerability exploits, bots, malware uploads, DDoS attacks, advanced persistent threats (APTs), and zero-day attacks.
FortiManager provides single-pane-of-glass management for unified, end-to-end protection across the extended enterprise. It delivers insight into network traffic and offers enterprise-class features for threat containment.
FortiAnalyzer delivers critical insight into threats across the entire attack surface and provides Instant visibility, situation awareness, real-time threat intelligence, and actionable analytics.
Visit Google Marketplace for a complete list of Fortinet products on the Google Cloud Platform.
FortiGuard Security Services for Google Cloud Platform
Application Control
Improve security and meet compliance with easy enforcement of your acceptable use policy through unmatched, real-time visibility into the applications your users are running. With FortiGuard Application Control, you can quickly create policies to allow, deny, or restrict access to applications or entire categories of applications.
Web Filtering
Protects your organization by blocking access to malicious, hacked, or inappropriate websites.
FortiCloud Sandbox
FortiCloud Sandbox Service is an advanced threat detection solution that performs dynamic analysis to identify previously unknown malware. Actionable intelligence generated by FortiCloud Sandbox is fed back into preventive controls within your network—disarming the threat.
Antivirus
FortiGuard Antivirus protects against the latest viruses, spyware, and other content-level threats. It uses industry-leading advanced detection engines to prevent both new and evolving threats from gaining a foothold inside your network and accessing its invaluable content.
Intrusion Prevention
FortiGuard IPS protects against the latest network intrusions by detecting and blocking threats before they reach network devices.
Virus Outbreak Protection Service
FortiGuard Virus Outbreak Protection Service (VOS) closes the gap between antivirus updates with FortiCloud Sandbox analysis to detect and stop malware threats discovered between signature updates before they can spread throughout an organization. OS initiates a real-time look-up to our Global Threat Intelligence database.
Content Disarm & Reconstruction
Content Disarm & Reconstruction (CDR) strips all active content from files in real-time, creating a flat sanitized file. All active content is treated as suspect and removed. CDR processes all incoming files, deconstructs them, and removes all elements that do not match firewall policies.
IP Reputation & Anti-botnet Security
The FortiGuard IP Reputation Service aggregates malicious source IP data from the Fortinet distributed network of threat sensors, CERTs, MITRE, cooperative competitors, and other global sources that collaborate to provide up-to-date threat intelligence about hostile sources. Near real-time intelligence from distributed network gateways combined with world-class research from FortiGuard Labs helps organizations stay safer and proactively block attacks.
Our Enterprise (ENT) bundle now includes:
- CASB - providing visibility, compliance, data security and threat protection for your cloud-based services.
- Industrial Security Service protection – SCADA (supervisory control and data acquisition) and ICS (industrial control systems). These signatures address attacks against critical infrastructure and manufacturing industries, where we are seeing frequent and sophisticated cyberattacks.
- Security Rating Service - this service performs checks against your fabric-enabled network and provides scoring and recommendations to your operation teams. The subsequent scorecard can be used to gauge adherence to various internal and external organizational polices, standards, and regulations requirements, including providing a ranking of your firm against industry peers.
The FortiGuard Enterprise (ENT) Protection bundle is designed to address today’s advanced threat landscape. The Enterprise Bundle consolidates the comprehensive protection needed to protect and defend against all cyberattack channels from the endpoint to the cloud. Including the technologies needed to address today’s challenging OT, compliance, and management concerns. The Enterprise Bundle offers the most comprehensive protection overall. The Enterprise Bundle includes:
- NGFW Application Control
- IPS
- Antivirus
- Botnet
- IP/Domain Reputation
- Mobile Security
- Web Filtering
- Antispam
- FortiSandbox Cloud
- Virus Outbreak Protection
- Content Disarm & Reconstruction
- CASB
- Security Rating
- Industrial Security Service
- FortiCare
The FortiGuard Unified Protection Bundle (UTM) is our traditional Unified Threat Management security bundle. The Unified Protection Bundle extends threat protection across the entire digital attack surface, providing industry-leading defense against sophisticated attacks. The UTM bundle has you covered for web and email-based attacks. The UTM bundle delivers the best package available for a unified threat protection offering. The UTM Bundle includes:
- NGFW Application Control
- IPS
- Antivirus
- Botnet
- IP/Domain Reputation
- Mobile Security
- Web Filtering
- Antispam
- FortiSandbox Cloud
- Virus Outbreak Protection
- Content Disarm & Reconstruction
- FortiCare
The FortiGuard Advantage:
- FortiGuard processes over 69 million websites every hour, providing up-to-the-minute reputation and categorization.
- Prevent malicious downloads and browser hijacking attacks with top-rated web filtering (VBWeb Verified)
- Improved email productivity through superior spam prevention validated with 3rd party independent testing (VBSpam + Verified)
The FortiGuard Advanced Threat Protection (ATP) bundle provides the foundational security needed to protect and defend against known and unknown cyber threats. The Advanced Threat Protection bundle includes:
- NGFW Application Control
- IPS
- Antivirus
- Botnet
- IP/Domain Reputation
- Mobile Security
- FortiSandbox Cloud
- Virus Outbreak Protection
- Content Disarm & Reconstruction
- FortiCare 24*7
| Service | Advanced Threat Protection (ATP) |
Unified Protection (UTM) |
Enterprise Protection (ENT) |
360 Protection |
| FortiManager Cloud |
✔ |
|||
| FortiAnalyzer Cloud |
✔ |
|||
| SD-WAN Cloud Assist Monitoring |
✔ |
|||
| SD-WAN One Click VPN Overlay |
✔ |
|||
| FortiConverter Service |
✔ |
|||
| Industrial Security Service |
✔ |
✔ |
||
| Security Rating |
✔ |
✔ |
||
| CASB |
✔ |
✔ |
||
| Anti-Spam |
✔ |
✔ |
✔ |
|
| Web Filtering |
✔ |
✔ | ✔ |
|
| Advanced Malware Protection |
✔ |
✔ |
✔ |
✔ |
| IPS |
✔ |
✔ |
✔ |
✔ |
| FortiCare + Application Control |
✔ |
✔ |
✔ |
✔ |