FortiClient: Strengthening Endpoint Security with Security Fabric Integration
FortiClient’s Security Fabric Integration, ensures that all fabric components – FortiGate, FortiAnalyzer, EMS, Managed AP, Managed Switches, Sandbox – have a unified view of endpoints in order to provide tracking & awareness, compliance enforcement and reporting. Advanced Threat Protection automates prevention of known and unknown threats through built-in host-based security stack and integration with FortiSandbox. Easy to use Secure Remote Access & Mobility via SSL and IPsec VPN. FortiClient connects every endpoint to form a cohesive security fabric.
Endpoints are frequently the target of initial compromise or attacks. One recent study found that 30% of breaches involved malware being installed on endpoints. FortiClient strengthens endpoint security through integrated visibility, control, and proactive defense. With the ability to discover, monitor, and assess endpoint risks, you can ensure endpoint compliance, mitigate risks, and reduce exposure. FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
FortiClient is more than advanced endpoint protection. As an integrated agent, FortiClient contains three key modules: Fabric Agent for security Fabric connectivity, the endpoint security modules, and the secure remote access modules. Fabric Agent shares endpoint telemetry with the Security Fabric and delivers broad endpoint visibility, compliance control, and vulnerability management. It provides advanced endpoint protection with pattern-based anti-malware, behavior-based exploit protection, web-filtering, and an application firewall. FortiClient natively integrates with FortiSandbox to detect zero-day threats and custom malware. FortiClient also provides secure remote access with built-in VPN, single-sign-on, and two-factor authentication for added security.
FortiClient Advanced Endpoint Protection | ||||||
---|---|---|---|---|---|---|
Operating System | Windows | MAC OS X | Linux | Android | iOS | Chromebook |
Security Fabric Components | Fabric Agent | Fabric Agent | Fabric Agent | Fabric Agent (Limited) | Fabric Agent (Limited) | Fabric Agent (Limited) |
Host Security Components | AV, Anti-Exploit, Sandbox,Detection, Web Filtering,App. Firewall | AV, Anti-Exploit, Sandbox,Detection, Web Filtering,App. Firewall | AV, Sandbox Detection (Limited) |
Web Filtering | Web Filtering | Web Filtering |
VPN Components | IPSec, SSL VPN | IPSec, SSL VPN | SSL VPN | IPSec, SSL VPN | IPSec, SSL VPN | |
Others | Remote Logging/Reporting,WIN AD SSO Agent | Remote Logging/Reporting,WIN AD SSO Agent | Remote Logging/Reporting | Remote Logging/Reporting |
Key Features & Benefits | |
---|---|
Broad endpoint visibility | FortiClient Fabric Agent integrates endpoints into the Security Fabric and provides endpoint telemetry, including user identity, protection status, risk scores, unpatched vulnerabilities, security events, and more. |
Endpoint compliance and vulnerability management | Reduce the endpoint attack surface and manage endpoint-borne risk. Vulnerability scanning with flexible patching options. Detect and enforce endpoint compliance. |
Proactive endpoint defense | Anti-exploit, sandbox integration, and behavior and pattern-based malware detection proactively detect and block malware, malicious scripts, document-based, and other advanced attacks. |
Automated threat containment | Integration with the Security Fabric enables automated response. Mitigate unpatched vulnerabilities, alert users, and quarantine risky or compromised endpoints to stem an outbreak. |
Secure remote access | Reliable, simple, and secure remote access with built-in, always-on VPN, with the added security of two-factor authentication, plus single-sign-on capabilities. |
Easy to deploy and manage | Easy to deploy and manage Modular and light-weight endpoint agents are centrally managed with the Enterprise Manager Server (EMS). Fabric Agent is compatible with Fabric-Ready endpoint security solutions. |
FortiClient contains the following key modules: Fabric Agent for Security Fabric connectivity, the endpoint security modules, and the secure remote access modules. FortiClient integrates with many key components of the Fortinet Security Fabric and is centrally managed by the Enterprise Management Server (EMS).
Endpoint telemetry for visibility
FortiClient shares endpoint telemetry with the Security Fabric to ensure unified endpoint awareness and deliver integrated endpoint and network security. Endpoint information shared includes device information, OS, security status, vulnerabilities, events, and user ID.
Compliance enforcement
Enables the enforcement of enterprise security policy and use criteria such as the severity of unpatched vulnerabilities, running software, web filtering, and security posture.
Automation/host quarantine
Automates policy-based response when triggered by security events. For example, automatically quarantine a suspicious or compromised endpoint to contain incidents and prevent outbreaks.
Vulnerability management
Identifies and prioritizes unpatched OS and software vulnerabilities with flexible patching options including auto-patching.
Software inventory
Provides visibility of installed software. In addition to managing licenses, software inventory can improve security hygiene. When software installed is not required for business purposes, it unnecessarily introduces potential vulnerabilities, and thereby increases the likelihood of compromise.
Technical Specifications | |
---|---|
FortiClient | |
Operating System Supported |
|
Authentication Options | RADIUS, LDAP, Local Database, xAuth, TACACS+, Digital Certificate (X509 format), FortiToken |
Connection Options | Auto Connect VPN before Windows logon, IKE Mode config for FortiClient VPN IPsec tunnel |
FortiClient Enterprise Management Software | |
Operating System Supported |
|
Endpoint Requirement | FortiClient version 5.6 or newer, FortiClient for Microsoft Windows and Mac OS X, 5.4 for iOS and Android |
System Requirements |
|
Copyright @2023 | All Right reserved