FortiAI-Assist for FortiAIOps
AI-Powered Security Solutions

Overview:

FortiAI-Assist for FortiAIOps

With flexible deployment options, FortiNDR Cloud and FortiNDR, part of the Fortinet SecOps Platform, give your security team the ability to detect, prioritize, investigate, hunt, and respond to attacks across your network. Through the power of AI-based detections and expert analysis, security teams can spot the evidence of attacker behavior early, enabling effective response across your IT/OT/IoT environments.

Agentless Visibility Across Your Network with FortiNDR Cloud

Network detection and response combines AI-based, human, and behavioral network traffic analysis to look for signs of malicious activity without the need for installed agents. Through this metadata analysis, FortiNDR Cloud creates high-fidelity detections that improve response efforts. FortiNDR Cloud is a SaaS offering that is built to meet your architecture and security requirements.

FortiNDR: Ideal for Air-Gapped Environments

Mission-critical infrastructure and air-gapped environments need to meet additional confidentiality and compliance requirements. FortiNDR can operate in an isolated environment, ensuring secure operations while providing full visibility into IT/OT network traffic. The solution automates investigation efforts through AI-driven network-traffic and file-based analysis, providing real-time identification of advanced threats, including persistent threats that may be lingering in your network.

Orchestrated Incident Response

FortiNDR solutions allow security teams to pivot from detection to investigation to response with a few clicks. Providing interactions with the Fortinet Security Fabric and third party tools such as EDR, SOAR, SIEM, NGFW and XDR, FortiNDR solutions ensure you can automate investigation, triage, and remediation.

Features:

Key features and capabilities of FortiNDR include:

• AI-powered detection: Supervised and unsupervised AI/ML continuously analyze network metadata.
• Streamlined threat hunting: Automatic investigations and guided playbooks accelerate triage and response.
• Orchestrated response: Integration with the Fortinet Security Fabric and third-party vendors ensures automated response.
• FortiGuard-powered threat intel: ML and rule-based detections are backed by FortiGuard Labs threat intelligence.
• Designed for OT networks: FortiNDR is an OT-aware solution with optional industrial security and OT malware detection.
• Decreased operational costs: FortiNDR Cloud guided-SaaS reduces NDR management and maintenance costs.

FortiAI-Assist Use Cases

Automated Alert Triage

Prioritizes notifications based on risk, context, and historical patterns; suppresses duplicate alerts; only flags high-confidence threats.

Adaptive Threat Hunting

Scans logs, network traffic, and user behavior to search for threats without waiting for human input.

Root-Cause Tracing

Identifies an attack's origin, method, and impact using AI-driven reasoning.

Auto Configuration

Generates and corrects CLI and Jinja scripts in seconds with FortiAI Script Assistant, validating existing ones and recommending fixes for optimized operations.

Policy Creation

Allows quick policy change script generation, eliminating repetitive labor and human errors.

LAN/WAN Optimization

Enhances visibility and automation, reducing issue resolution time across LAN and SD-WAN through AI-assisted monitoring and trend analysis.

Documentation:

Download the FortiAiOps Data Sheet (PDF).

Pricing Notes:

• All Prices are Inclusive of GST
• Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
  Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service) plus term of contract
• Hardware plus FortiCare Premium and FortiGuard SMB Protection
  Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, SMB Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering , Antispam and FortiGate Cloud subscription service) plus term of contract
• Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
  Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service) plus term of contract
• Enterprise Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service)
• SMB Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, plus FortiGate Cloud subscription and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, SMB Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam and FortiGate Cloud subscription service)
• Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam Service, and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service)
• Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Advanced Threat Protection Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Service, Application Control)
• FortiCare Essential Support
  FortiCare Essential Ticket Handling, Hardware Replacement, Firmware and General Upgrades, Application Control
• FortiCare Premium Support
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control
• FortiCare Elite Support
  FortiCare Premium Support with FortiCare Elite Ticket Handling.
• Prices are for one year of Premium RMA support. Usual discounts can be applied.
• Annual contracts only. No multi-year SKUs are available for these services.
• Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
• Pricing and product availability subject to change without notice.