Network Detection and Response
FortiNDR represents the future of artificial-intelligence (AI)-driven, network-based breach protection technology designed for shortstaffed Security Operation Center (SOC) teams to identify, classify, and respond to threats, including those that are well-camouflaged. Supervised and unsupervised machine learning (ML) continuously analyze metadata, especially east-west data in datacentres, to identify threats, especially those which may be already persistent in the network.
FortiNDR significantly reduces the time to identify network anomalies and malicious content on your network and mitigate with Fortinet Security Fabric and third party integration.
FortiNDR Key Features
- On Premise solution where no data leaves the customer network
- Integrate with Fortinet Security Fabric including FortiGate/FortiNAC/FortiSwitch quarantine, FortiAnalyzer/FortiSIEM log and report
- Supports standalone, center, and sensor modes for distributed deployment
- Patented high throughput malware scanning based on Artificial Neural Networks (ANN) 1 to identify file-based attacks, with over 20+ malware attack scenarios
- Reduce malware detection and investigation time from minutes to seconds
- Detect North/South/East/West intrusions accurately
- Detect botnets and weakciphers on network
- Virtual Security Analyst™ to mimic experienced security analyst for outbreak, anomalies, and root causes for malware infections
- Provide on-premises learning to reduce false positives by analyzing organizational-specific traffic and adapting to newly disguised threats
Top Reasons for FortiNDR Solution | Shortage of Experienced SOC Analysts
Experience is the hardest thing to acquire in cybersecurity, especially in threat analysis, outbreak investigation, and malware research experience. FortiNDR provides Virtual Security Analyst™.
Breach Prevention
Using both ML and signature-based to identify breaches with high degree of confidence, including data enrichment on attacks.
AI-Powered Detection and Response for Cyber Attacks
Innovative threat actors disrupt cyber security through automated attacks designed to overwhelm or sneak past your SOC defenses.
ML-based Traffic Profiling and Malware Detection
? Carefully crafted cyber threats designed to bypass your existing security controls through the camouflage with malware detection.
- On premises deployment where no customer data leaves the network
- Ideally for government, airgapped, military, and operational technology (OT) deployment
- High throughput Neural Networks for file-based scanning and malware classification
- Netflow ingestion support for security analytics
- AD integration support for device enrichment
- NDR Center and Sensor mode available for centralised management
