Web Security

With the heavy and growing reliance on email for business communications, the ability to keep email servers running smoothly and spam free is becoming more critical than ever. If legitimate email becomes falsely classified as spam it can be equally disastrous for a corporation as critical communications can become impaired. Unsolicited emails (spam) has created tremendous pressure on the communication infrastructure, some side effects include wasteful email server build-out, downtime, unknowing transport of spyware, greyware, intrusions or even embedded viruses. Fortinet's FortiGuard Antispam Service provides automatic updates to FortiGate, FortiClient and FortiMail systems to reduce the amount of spam at the network perimeter. To increase detection rates, the FortiGuard Antispam Service deploys "dual scan" technology to quickly identify, tag, or block obvious spam messages.

What Is Fortinet's FortiGuard Antispam Service? 
The FortiGuard Antispam Subscription Service on FortiGate or FortiMail systems dramatically reduces the amount of spam messages that corporate email servers process. The FortiGuard Antispam Service uses an IP address black list compiled from email captured by spam probes located around the world and sophisticated spam filtering tools. Spam probes are decoy email addresses purposely configured to attract spam and identify known spam sources to create the antispam IP address list. The FortiGuard Antispam Service is automated by Fortinet to provide constant monitoring and dynamic updates.

Key Features & Benefits:

• Dual Pass Detection Technology: Significantly reduces the volume of spam email at the perimeter before it enters the corporate network, significantly reducing email attacks and infections.
• Customizable Policies: Extreme flexibility with ability to set antispam filtering policies for each domain, group of users and users.
• Device-based Licensing: No per-user licensing costs results in significantly lower operational and capital cost when compared to other similar RBL type services.
• Simple Setup: Once enabled, FortiGuard Antispam Service is fully automatic and require no additional administration overhead.
• Flexible Deployment: FortiGuard Antispam Service is supported on FortiGate, FortiClient and FortiMail systems.

Why Choose the FortiGuard Antispam Service?
Fortinet takes a comprehensive and multi-layer approach and uses a number of filtering techniques to detect and filter spam.

• Global filters. Through the FortiGuard distribution network, FortiGuard Antispam service provides two databases, namely FortiIP and FortiSig, as global filters. FortiIP is a sender IP reputation database while FortiSig is a spam signature database. These global filters are constantly updated and enable our FortiGate, FortiClient and FortiMail products to detect and block the most prevailing spam.
• Customized filters. Various customized spam filters are provided to compliment the Fortinet's Antispam solution on the service delivery units: FortiGate, FortiClient and FortiMail. These customized filters range from banned words filters, local white and black lists of sender email address, heuristic rules, to highly sophisticated techniques such as Bayesian training in FortiMail. See the documentation of respective products for more information.
• Dedicated service team. A dedicated team of engineers and analysts in the Foritnet Threat Research Team monitors the global spam activities and analyze latest spam techniques to provide our customer with the most comprehensive protection against spams.

How Does Fortinet antispam Solution Work? 
Fortinet Antispam solution consists of FortiGate, FortiMail, and FortiClient as the service delivery unit, combined with FortiGuard Antispam service to provide constant signature updates. FortiGuard Antispam provides global filters, while the service delivery units complete the antispam solution with local filters.

• FortiGate obtains the SMTP mail server source address and email header, subject, and body of the email for common spam content.
• FortiGuard Antispam checks the information against the antispam IP address list.
• If the source address matches the list of known spammers, FortiGuard-Antispam tags the email or terminates the session according to the configuration in the firewall protection profile.
• If FortiGuard Antispam does not find a match, the email is allowed.

The mail server sends the email to the recipient.

Provides fully automated updates to ensure protection against the latest content level threats. With a global high speed distribution network, fast and reliable access to critical signature updates is guaranteed.

What Is Fortinet's FortiGuard Antivirus / Antispyware Service? 
The FortiGuard Antivirus Service prevents both new and evolving virus, spyware and malware threats and vulnerabilities from gaining access to your network and its valuable applications or data assets by preventing and responding to today's fast-spreading attacks. Fortinet provides the industry's fastest response and global updates via the FortiGuard global distribution network. FortiGuard Antivirus Service employs the most advanced virus, spyware, and heuristic detection engines to provide comprehensive protection against all the content level threats.

Key Features & Benefits:

• Automated Content Updates: Keeps defenses up-to-date with the latest virus, spyware, and heuristic detection engines.
• Proactive Threat Library: Complete protection against all network and content threats.
• Simple Setup: Fast implementation with no ongoing overhead for true “set and forget” functionality.
• Two-Way Updates: Both Push and Pull updates provide the fastest possible update times.
• Device-based Licensing:No user-based licensing significantly lowers entry cost and ongoing maintenance costs year over year..

Why Choose the FortiGuard Antivirus / Antispyware Service?
As measured by independent industry groups, FortiGuard Antivirus Services have consistently lead the industry with the best response times and have provided the highest levels of protection.

How Does FortiGuard Antivirus Service Work?

• Threats Replication / Characterization by Fortinet engineers.
• Antivirus signature developed & tested by Fortinet engineers.
• Signature-Database uploaded to FortiGuard Network.
• The FortiGuard Antivirus Service automatically pushes update to the Fortinet security systems.
• FortiGate/FortiClient/FortiMail units are dynamically updated.
• Cyber attack is launched.
• FortiGate/FortiClient/FortiMail units block the cyber attack.
• The FortiGuard Antivirus Service continues to provide signature updates

Surfing the Internet has become a critical part of conducting business and often a requirement for government and educational institutions. However inappropriate Internet usage has led to lower productivity, inappropriate use of company resources, harassment, legal liability, and human resource issues. Fortinet's FortiGuard Web Filtering Service delivers updates from the Fortinet Global Threat Research Team to regulate web activities to meet different usage polices and compliance requirements. With 75 web content categories, over 30 million rated websites and more than two billion web pages, the FortiGuard Web Filtering Service is one of the industry's most accurate integrated web filtering services.

What Is Fortinet's FortiGuard Web Filtering Service? 
It is a hosted service designed to provide Web URL filtering for schools, libraries, government agencies, and enterprise businesses of all sizes. The FortiGuard Web Filtering solution consists of two parts, the FortiGuard Rating Server and the FortiGate multi-threat security system. The FortiGuard Rating Server is a master ratings database that consists of billions of web page addresses. The FortiGuard Web Filtering service can be activated on all FortiGate security systems to regulate and block access to harmful, inappropriate and dangerous websites which may contain Phishing attacks and/or malware such as spyware. 

Key Features & Benefits:

• Granular Blocking & Filtering: Provides policy based access control based on catagories, website and pages.
• Comprehensive URL Database: With 75 categories, over 30 million rated websites and more than two billion web pages.
• Device-based Licensing: Eliminate per-user based licensing delivers lower TCO.
• FortiGate Integration: Fully integrates with all FortiGate appliances with automatic pull and push signature updates .
• Powered by Fortinet: Real-time updated from Fortinet Global Threats Research Team.

Why Choose the FortiGuard Web Filtering Service?
With the industry leading content ratings database providing up-to-date website categorization and web page ratings, Fortinet consistently deliver highly accurate content filtering service. With the combination of high accuracy, easy configuration, and over 75 rating categories, the FortiGuard Web Filtering offers undisputed value and performance that can help customers regulate and filter web activities.

How Does FortiGuard Web Filtering Work?

• User requests access to a web page.
• If the rating for the web page is already cached in the FortiGate unit, it is immediately compared with the policy for the user. If the web page is allowed, the request is sent to the website (3a) and the response is retrieved (4b).
• If the web page rating is not in the FortiGate cache, the request is sent to the website (3a) and a rating request is made simultaneously to the FortiGuard Rating Server (3b).
• 4. When the rating response is received by the FortiGate unit (4a), it is compared with the requestor's policy rules (2).

If the policy is to allow the page, the Web site response (4b) is passed to the requestor (5). Otherwise, a user-definable "blocked" message is sent to the requestor and the event is logged in the content filtering log.

Fortiguard IPS Service provides the latest defenses against stealthy maliciou and suspicious network-level threats. Fortinet 's Global Threat Research Team works with worldwide organizations around the clock to isolate the latest application and OS vulnerabilities - creating the latest network level detection and prevention technologies to keep customers one step ahead of the attackers.

What Is Fortinet's Intrusion Prevention Service? 
Using FortiGuard Subscription services prevents both new and yet unknown threats and vulnerabilities from gaining access to your network and its valuable applications or data assets by preventing and responding to today's fast-spreading attacks.

Key Features & Benefits:

• Automated Updates: Keeps defenses up-to-date with the latest virus, spyware, and heuristic detection engines.
• Comprehensive Intrusion Prevention System (IPS) Library: Over 4000 IPS signatures and the latest anomaly inspection, deep packet inspection, full content inspection, and activity inspection engines proactively updated on a daily bases.
• Flexible Policies: Full control of all attack detection methods to suite the most demanding security applications.
• Two-Way Updates: Both Push and Pull updates provide the fastest possible update times.
• Device-based Licensing: Attractive pricing model eliminates budgeting complexity.

Why Choose the FortiGuard Intrusion Prevention Service?
The FortiGuard Intrusion Prevention Service provides alerts based on a customizable database of more than 4000 known attack signatures. This enables FortiGate Security Systems to stop attacks that evade conventional host-based antivirus systems, and provides immediate response to fast spreading threats. Fortinet 's worldwide IPS engineering teams "follow the sun" allowing Fortinet to provide customers with real-time attack signatures. Using the global FortiGuard Distribution Network, FortiGate systems stop the most damaging attacks at the network border regardless of whether the network is a wired, wireless, partner extranet or branch office network connection. Furthermore Fortinet's unique technology also supports behavior-based heuristics adding valuable recognition capabilities beyond simply matching content against known signatures.

How Does FortiGuard Intrusion Prevention Work?

• Threats Replication / Characterization by Fortinet engineers.
• Signature developed & tested by Fortinet engineers.
• Signature-Database uploaded to FortiGuard Network.
• FortiGuard Center information portal is updated.
• The FortiGuard Intrusion Prevention Service automatically pushes update to the Fortinet security systems.
• FortiGate/FortiClient units are dynamically updated.
• Cyber attack is launched.
• FortiGate/FortiClient units block the cyber attack.
• The FortiGuard IPS Servic continues to provide signature updates.