Fortinet FortiNDRCloud 900G
Network Detection and Response

Overview:

Fortinet’s SaaS-based FortiNDR Cloud leverages artificial intelligence (AI) and machine learning (ML), behavioral, and human analysis to inspect network traffic to detect malicious behavior early while reducing false positives. FortiNDR Cloud provides unified network traffic visibility across multi-cloud and hybrid environments as well as distributed workforces and constrained, mission-critical environments.

FortiNDR Cloud automatically identifies anomalous and malicious behavior, provides risk scores, and shares relevant threat intelligence to assist security teams in prioritizing response efforts.

Highlights

• 365-day historical deep network traffic visibility and analytics
• Curated threat intelligence powered by FortiGuard Labs to reduce false positives
• Fortinet Security Fabric and third-party integrations
• Leverages AI, expert analysis, and cloud compute for threat detection
• Coverage for over 90% of MITRE ATT&CK techniques

Features:

Improved Visibility of Threats

Real-time, automated investigation of network security incidents and extended historical network visibility enable a faster, more comprehensive response to threats. Because the impact of an intrusion increases over time, real-time response is the best way to minimize damage.

Get Expertise on Demand

FortiNDR Cloud helps security teams overcome the skills gap challenge by providing Technical Success Manager (TSM) support. TSMs act as trusted advisors who share findings, tune configurations, and help organizations optimize NDR deployments.

Fewer Distractions from False Positives and Detection Tuning

With threat analysis and detection tuning provided in real-time, organizations are less vulnerable while awaiting a vendor’s application patch or anti-malware signature.

365-day Data Retention for Retrospective Analysis and Threat Hunting

FortiNDR Cloud retains rich network metadata for 365 days, enabling a comprehensive investigation. This data ensures newly discovered tools, tactics, and procedures can be retroactively investigated to discover if and when threats may have infiltrated the customer’s network.