Fortinet FortiNDRCloud 500F
Network Detection and Response with Virtual Security Analyst

Overview:

FortiNDR and FortiNDR Cloud (aka ThreatINSIGHT) represent the future of AI-driven breach protection technology, designed for shortstaffed Security Operation Center (SOC) teams to defend against various threats including advanced persistent threats through trained Virtual Security Analyst™ and “Guided SaaS” that helps you identify, classify, and respond to threats including those well camouflaged. The use of metadata in threat detection is essential in modern SOC. Supervised and unsupervised ML can be applied to metadata, especially in east-west data in datacenters to identify threats. FortiNDR significantly reduces the time to identify network anomalies and malicious content on your network and mitigate with Fortinet Security Fabric and third party integration.

Highlights:

• Detect and respond to cyberattacks with powerful AI
• Discover detection aggregating metadata
• Leverage turnkey security where legacy detection fails
• Fill gap in SOC skills and resource shortages

Key Features:

• Detect network anomalies where traditional security solutions fail
• Investigate threats with historical trends and 365 days of data
• Hunt adversaries with guided playbooks
• Automate and manually respond for quarantine and control
• Mimic experienced security analyst for outbreak, anomalies, and malware detection, processing large volume of network data
• Reduce malware detection and investigation time from minutes to seconds2
• Provide on-premises learning to reduce false positives by analyzing organizational-specific traffic and adapting to newly disguised threats
• Integrate into Fortinet’s Security Fabric by uniting with FortiGates and others to automatically quarantine attacks
• Analyze zero days scientifically including fileless threats and classify them into 20+ malware attack scenarios