Introduction to Security Fabric

An introduction to Fortinet Security FabricFull-spectrum security services by Infosec PartnersOctober 2016 | Fortinet UK. Gainsborough House

www.InfosecPartners.com Infosec Partners were named Fortinet’s first ever UK Partner of Excellence

2

IPICSFTv2.1

Infrastructure = Constant Change

Full-spectrum security services by Infosec Partners, the first ever Fortinet Partner of Excellence UK

3

IPICSFTv2.1

The Attack Surface has increased Dramatically


4

IPICSFTv2.1

End to End Segmentation is Critical Each segment is connected by an Internal Segmentation Firewall

» Appliance, Virtual or Cloud

» If one segment breached then it’s contained

These act as a single Fabric

» Provides best end-to-end protection

Old technologies e.g. vlans, access lists

» replaced by next generation firewalls


5

IPICSFTv2.1


6

IPICSFTv2.1

Fortinet Security Fabric protects from IoT to Cloud Scalability

» Protect at scale in any location and at any desired performance level

Awareness

» Communication between all security devices on network

Security

» Global and local perspectives, protects from advanced threats

Actionable

» Threat Intelligence so that we act more quickly

Open

» Connects other systems/vendors, helps preserve current investments


7

IPICSFTv2.1

Scalable from IoT to Cloud


8

IPICSFTv2.1

Scalable for Access By 2020

» >25% of enterprise attacks will involve IoT

» IoT will be <10% of Security Budgets

» Network segmentation and isolation solutions will account for 33% of all IoT security spend.

The network boundaries will be key locations for detection, response, access and other policy enforcement needs (e.g. WLANS).


9

IPICSFTv2.1

Scalable for the Network

Fortinet’s PPP processes different types of traffic with different types of security with the following benefits:

SLOW = BROKEN


10

IPICSFTv2.1

Scalable for the Cloud


11

IPICSFTv2.1

Global and Local Security

Global updates occur inside the fabric

Intelligence Feeds 12 different security services available

Local, targeted & unknown attacks


12

IPICSFTv2.1

Fabric Awareness Critical Networks are ever more complex, making it difficult to manage and secure, especially if you want to implement

a segmented network strategy.

Fortinet Security Fabric will form an end-to-end topology and data flow view identifying:

» Where the firewalls are located

» What they’re connected to

» What Policies exist

» What applications are flowing


13

IPICSFTv2.1

Actionable Threat Intelligence

Information overload

Means that it can be very ard to work out what to do with a new threat in a timely manner.

Actionable Threat Intelligence

Will allow customers to compare indications of compromise within the local network and the global network.


14

IPICSFTv2.1

OPEN Multiple layers of Fabric APIs for Partner Integration

SDN Orchestration API support

Virtualisation and cloud platform support at the hypervisor level

Detailed logs for SIEM systems

Endpoints can connect to the system via the sandbox.

Detailed APIs allow upper Management solutions to connect to Fabric


15

IPICSFTv2.1

OPEN Fabric Ready Partners, Ecosystem IntegrationExtension of the Fabric into the alliance Ecosystem is very important because customers have invested in different security products that are essential to their security capability.


Fabric Ready Partners

List of Fabric Ready Partners as of 26 September 2016

16

IPICSFTv2.1


17

IPICSFTv2.1


Summary of Introduction to Fabric Networks are becoming ever more complex, making it difficult to manage and secure, especially if you want to

implement a segmented network strategy, which we recommend. The answer is to simplify.

Fortinet’s Security Fabric includes all of the key capabilities your organization needs for a truly complete solution: » Scalable: Protects the enterprise from IoT to the cloud» Secure: Global and local threat intelligence and mitigation information is shared between products for faster protection» Aware: The fabric behaves as a single entity regarding policy and logging, enabling end-to-end segmentation for better

protection against advanced threats» Actionable: Big data cloud systems correlate threat and network data to deliver real-time, actionable threat intelligence» Open: Well-defined, open APIs allow leading technology partners to become part of the fabric

Infosec Partners (Fortinet’s first ever Partner of Excellence UK) can help you tailor the Fortinet Security Fabric for your organisation with a range of professional services, full and part managed security to meet your needs.

Thank youFor more information about the Fortinet Security Fabric and full-spectrum security services by Infosec Partners please contact:

0845 256 5903 | +44 1256 893662 | [email protected]

www.InfosecPartners.com Infosec Partners were named Fortinet’s first ever UK Partner of Excellence

Introduction to Security Fabric

Technology

Transcript of Introduction to Security Fabric