Fortinet Healthcare Solutions
Secure Wireless for Healthcare Starts With Fortinet

Challenges

IoT in Healthcare

• Headless and often not security focused
  • Pain to on-board / secure
  • If compromised, would you know?

• Custom built, often with their own testing required to ensure they work well
  • Can’t just install anything and count on it to work

• Embedded designs usually focused on the application, not good wireless performance
  • This can lead to false alarms at the nurses’ station which = lost time and efficiency

Medical Implantable IoT

IoT complexities

Secure Guest Access

• No Resources
  • No time to onboard patients & visitors
  • Medical staff can’t answer technical questions
• Segmentation
  • Must protect patient records
  • Guest traffic can’t impact health critical wireless applications
• With no control of these devices, what if they’re compromised?
  • Risk infecting other systems and users of the network

Compliance

• IoT and Guest network applications complicate your compliance posture
  • More vectors of attack then previous
  • Can’t completely lock down information without impacting mobile point of sale
• Record and report on what matters
  • A rapidly changing client mix can add noise to network compliance reports

Why Fortinet

Fortinet Security Fabric

 

 

BROAD visibility of the entire digital attack surface to better manage risk

INTEGRATED solution that reduces the complexity of supporting multiple point products

AUTOMATED workflows to increase speed of operations and response

Security Driven Networking

• Security Driven Networking enables a convergence of security and network access.
• Network access layer is designed within an integrated security framework.
• Unique architecture consolidates functions, simplifies management and lowers overall cost.
• FortiGate consolidates
  • One UI to learn
  • Single platform to manage
  • Single place for access policies
  • Reduced chance of configuration error
  • Lower CAPEX, OPEX, Training, Personnel

Drive Security to the Edge

Full Visibility and Security Control

Solving IoT with Fortinet

• Security
  • Endpoints can be automatically quarantined if they fail IoC - Ensures that any compromised device is handled quickly
  • MPSK simplifies management of large numbers of headless devices
  • FortiNAC integration eases onboarding and posture assessment
• Performance
  • Certified by common IoT vendors (Vocera, Spectralink, etc)

Comprehensive IoT Security with FortiNAC

Automated response to compromised devices Taking response time out of the equation

• Security Driven Networking in action
  • A device is detected as compromised by the Security Fabric
  • FortiAPs or FortiSwitches can automatically quarantine the device at the access layer
• Your network & patients are safer
  • Compromised devices are no longer a threat to the wider network or each other

Solving guest access

• Onboard guests with low to no effort
  • Simple to use with on-board or external captive portal
• Ensure guests only go where you want them to
  • Segmentation throughout the fabric
  • FortiLink extends configuration throughout the deployment

Solving Compliance

• Automatic quarantine ensures that data is kept protected
• Segmentation enforced down to the SSID on the AP
  • Ensures that devices stay in the area they’re authorized for
  • Removes unnecessary devices from compliance scope
• Management platforms automate logging and reporting for proving compliance

And so much more...

• Broadcast / Multicast management
• Multiple PSK for WPA2 personal
• Fast failover controller redundancy
• Rogue detection and Suppression
• WIDS
• Frequency and AP load balance
• Mesh wireless network
• Remote APs
• Onboard BT/BLE
• Location Tracking (with FortiPresence)
• SSID scheduling
• DFS Fallback
• Captive Portal
• DOS attack prevention
• Wave-2 operation on 802.3af
• 802.3az-Power-efficient Ethernet
• Fast roaming mechanisms 802.11 r/k/v
• Bonjour genius
• Channel utilization (Duty-cycle measurement)
• QoS profiles (per SSID/per Client)
• WMM Access Control
• Automatic channel selection
• Probe response suppression
• Protected Management Frames
• Opportunistic Key Caching
• TX Beamforming
• HotSpot 2.0
• Per Group rate limiting