FortiGuard AI-Powered Security Services
FortiGuard AI-Powered Security Services is part of Fortinets layered defense and tightly
integrated into our FortiGate NGFWs and other products. Infused with the latest threat
intelligence from FortiGuard Labs, these services protect organizations against modern attack
vectors and threats, including zero-day and sophisticated AI-powered attacks.
Network and file security
Network and file security services protect against network and file-based threats. With over
18, 000 signatures, our industry-leading intrusion prevention system (IPS) uses AI/ML models
for deep packet/SSL inspection, detecting and blocking malicious content, and applying virtual
patches for newly discovered vulnerabilities. Anti-malware protection defends against both
known and unknown file-based threats, combining antivirus and sandboxing for multi-layered
security. Application control improves security compliance and provides real-time visibility into
applications and usage.
Web/DNS security
Web/DNS security services protect against DNS-based attacks, malicious URLs (including
those in emails), and botnet communications. DNS filtering blocks the full spectrum of DNS
based attacks while URL filtering uses a database of over 300 million URLs to identify and
block malicious links. Meanwhile, IP reputation and anti-botnet services guard against botnet
activity and DDoS attacks. FortiGuard Labs blocks over 500 million malicious/phishing/
spam URLs weekly, and blocks 32, 000 botnet command-and-control attempts every minute,
demonstrating the robust protection offered through Fortinet.
SaaS and data security
SaaS and data security services cover key security needs for application use and data
protection. This includes data loss prevention to ensure visibility, management, and protection
(blocking exfiltration) of data in motion across networks, clouds, and users. Our inline cloud
access security broker service protects data in motion, at rest, and in the cloud, enforcing
compliance standards and managing account, user, and cloud app usage. Services also assess
infrastructure, validate configurations, and highlight risks and vulnerabilities, including IoT
device detection and vulnerability correlation.
Zero-Day threat prevention
Zero-day threat prevention is achieved through AI-powered inline malware prevention to
analyze file content to identify and block unknown malware in real time, delivering sub-second
protection across all NGFWs. The service also integrates the MITRE ATT&CK matrix to speed
up investigations. Integrated into FortiGate NGFWs, the service provides comprehensive
defense by blocking unknown threats, streamlining incident response, and reducing security
overhead.
OT security
With over 1000 virtual patches, 1100+ OT applications, and 3300+ protocol rules, integrated
OT security capabilities detect threats targeting OT infrastructure, perform vulnerability
correlation, apply virtual patching, and utilize industry-specific protocol decoders for robust
defense of OT environments and devices