Fortinet addresses major security threats with comprehensive solution set

October 2009 Information Security

The recent Threatscape Report by Fortinet cites a significant increase in Web threat traffic - phishing and malware’s growth was the highest yet. Unfortunately, these gains also mean volume directed towards malicious sites, which will undoubtedly have an impact on next-generation online services and its targeted users.

Additionally, e-mail virus and spam such as the now infamous eCard and Microsoft Outlook Update wreaked havoc and online gaming Trojans and Virut continued to be some of the main threat drivers.

Says Amy Thomas, Fortinet product manager at official distributor Zycko, “What is evident from the Threatscape Report is that malicious attacks, be it Web traffic, e-mail viruses or more sophisticated exploitations are on the rise. Taking cognisance of the world’s 'threatscape', Fortinet recently launched its product strategy - at a partner conference in St Andrews, Scotland - which will enable organisations to fortify their infrastructure against the latest and increasingly sophisticated attacks.”

The products

Fortinet offers a comprehensive security solution that encompasses e-mail, gateway, database, Web applications and end-points. Addressing these respective security areas are the company’s FortiGate, FortiMail, FortiDB, FortiWeb, FortiClient, FortiScan product families driven by the FortiOS operating system.

Looking closer at some of the products, the FortiGate-5000 chassis-based security platform has been designed to be the cornerstone of high-performance security infrastructures.

Says Thomas, “The FortiGate-5000 is ideal for high-speed multithreat security gateways, managed security services, and complex security zoning applications. Support for high-density GigE and 10GigE interfaces provides flexibility and throughput scalability, while integration with Fortinet's centralised management and reporting solutions provides comprehensive control of large-scale deployments.”

Enhancing Fortinet’s FortiGate series is the company’s FortiOS 4.0, which provides the foundation for the operation of all FortiGate appliances, from the core kernel functions to the security processing feature sets.

FortiOS 4.0 new and enhanced features include:

* WAN optimisation - which provides acceleration for applications traversing slower network connections. The combination of multithreat security, traffic optimisation, and VPN technologies provides cleaned, accelerated, and secured communications.

* Application control which uses a dynamic application identification engine that recognises applications based on their behaviour. By coupling application control policies with sophisticated security features, administrators can achieve comprehensive protection with granular and more meaningful policies.

* Data loss prevention (DLP) - uses a sophisticated pattern-matching and regular-expression engine to identify then prevent the communication of sensitive information outside of the network perimeter. In addition, DLP technology also provides audit trails for data and files, which can aid in legislative compliance.

* SSL inspection - ensures protection from malware infection that is camouflaged by secured protocols, allowing the FortiGate to decrypt the data passing through the SSL-encrypted connection. Once decrypted, the data can be passed to FortiOS security engines for inspection.

Fortinet’s FortiScan-1000B is a new vulnerability management (VM) and compliance solution for endpoint assets, including desktops and laptops, as well as other network assets such as servers. The FortiScan-1000B appliance enables organisations to protect thousands of computing assets by integrating the following capabilities into a single device: endpoint vulnerability management, industry and federal compliance, patch management and remediation, and network-level vulnerability management.

Thomas concludes, “FortiScan - together with Fortinet's complementary FortiDB, FortiWeb and FortiGate appliances - offer an end-to-end compliance strategy that extends from the client, to databases, to Web applications, to the overall network.”

For further information, visit www.zycko.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Claude Mythos wake-up call
Technews Publishing AI & Data Analytics Information Security
AI has crossed a critical cybersecurity threshold and frontier models are accelerating attack lifecycles and will enable attackers to identify and exploit vulnerabilities at scale and speed, through novel methods that were previously the domain of advanced nation-state entities.

Read more...
If you cannot prove identity, you cannot claim security
Access Control & Identity Management Information Security
Cybersecurity planning for 2026 is a structural change in how attacks are executed and how trust is exploited, demanding that companies stop layering tools on top of infrastructure and instead prioritise intelligence and identity.

Read more...
95% do not have full trust in cybersecurity vendors
Information Security Security Services & Risk Management
Trust in cybersecurity vendors is fragile, difficult to measure, and increasingly shaping risk posture at both operational and board levels. Lack of verifiable transparency undermines cybersecurity decision-making, according to Sophos-backed research.

Read more...
Africa’s largest Zero Trust platform
NEC XON Information Security Commercial (Industry)
Africa has reached a significant cybersecurity milestone with the successful deployment of the continent’s largest Palo Alto Networks Prisma Access and Prisma Access Browser Zero Trust environment, supporting secure remote access for more than 40 000 users for a large enterprise in Africa.

Read more...
Supply chain attacks top threat over 12 months
Information Security
Supply chain attacks have become the most prevalent cyberthreat confronting businesses over the past year, according to a new Kaspersky global study, with nearly one-third of companies worldwide experiencing a supply chain threat in the past year.

Read more...
From vibe hacking to flat-pack malware
Information Security AI & Data Analytics
HP issued its latest Threat Insights Report, with strong indications that attackers are using AI to scale and accelerate campaigns, and that many are prioritising cost, effort, and efficiency over quality.

Read more...
NEC XON secures mobile provider’s hybrid identities
NEC XON Access Control & Identity Management Information Security Commercial (Industry)
For a leading South African telecommunications operator, identity protection has become a strategic priority as identity-centric attacks proliferate across the industry. The company faced mounting pressure to secure both human and non-human identities across complex hybrid environments.

Read more...
Microsoft 365 security is a ticking time bomb
Information Security
Across boardrooms and IT departments, a dangerous assumption persists that because data is stored in Microsoft 365 and Azure, it is automatically secure. This belief is fundamentally flawed and fosters a false sense of protection.

Read more...
Rise in malicious insider threat reports
News & Events Information Security
Mimecast Study finds 46% of SA organisations report a rise in malicious insider threat reports over the past year: reveals disconnect between security awareness and technical controls as AI-powered attacks accelerate.

Read more...
New campaign exploiting Google Tasks notifications
News & Events Information Security
New phishing scheme abuses legitimate Google Tasks notifications to trick corporate users into revealing corporate login credentials, which can then be used to gain unauthorised access to company systems, steal data, or launch further attacks.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.