The FortiXDR threat detection, Investigation, and response platform makes use of AI for elevating defense postures of enterprises & organizations cutting across sizes and verticals
Fortinet, world’s leading new-age network security products & solutions provider, has launched FortiXDR, a new Extended Detection & Response (XDR) platform that has been designed to reduce complexity, speed up detection, and coordinate responses to cyberattacks across any organization. The FortiXDR is a solution of its kind to leverage artificial intelligence (AI) for the investigation effort critical to incident response. Expanding on the cloud-native endpoint platform of FortiEDR, it enhances an organization’s security fabric and the threat protection powered by FortiGuard Labs security services. Specifically, FortiXDR can fully automate security operations processes typically handled by experienced security analysts to mitigate threats faster across the broad attack surface.
“Cybercriminals are using sophisticated – and increasingly intelligent – tools to target vulnerable network edges resulting from digital innovation. As a result, organizations need smarter, faster security operations to combat sophisticated, organized cybercrime. The FortiXDR is the only XDR solution that leverages artificial intelligence to replicate the hands-on investigation that otherwise leaves organizations playing catch up. Applied across the Security Fabric platform, it helps enterprises keep pace with today’s accelerating threat landscape, even for organizations limited by small teams and few tools”, says Rajesh Maurya, Regional Vice President, India & SAARC, Fortinet.
A large number of security products typically deployed by enterprises has resulted in an unmanageable volume of security information that can actually mask threats, leaving security teams struggling to detect and respond to cyberattacks. As a result, a majority of organizations are either currently or planning in the next two to three years to consolidate security vendors.
Many organizations are gravitating toward consolidation based on an XDR solution. Gartner defines XDR as a security incident detection and response platform that automatically collects and correlates data from multiple security products. Thus, XDR provides an intelligent and automated way to tie traditionally isolated solutions into a single system.
However, while XDR solutions can ease some of the challenges related to vendor complexity, most focus on cross-product alert correlation and still require significant manual intervention of teams already stretched thin due to the cyber skills gap. Security teams require an XDR solution that can automate the entire process, from detection to event investigation to remediating security incidents.
AI-powered FortiXDR
Unlike other solutions, FortiXDR is AI-powered by a patent-pending Dynamic Control Flow Engine and continually trained by the threat data and research of FortiGuard Labs as well as the frontline expertise of its incident responders. The solution starts by leveraging the diverse security information shared across the Fortinet Security Fabric for correlation and analysis, converting them into high fidelity security incidents. These are then investigated by the AI engine, just as a seasoned security analyst would, to come to a final threat classification and scope. Finally, the best possible contextual responses are defined and can be automatically implemented to quickly remediate confirmed incidents.
Also, FortiXDR can ingest telemetry from more aspects of an organization than any other solution, increasing the chance of detecting and properly classifying attacks. It also covers more of the cyber-kill chain stages and supports more points of response to mitigate the impact of an attack more effectively than competitive solutions. All of this enables organizations to reduce mean time to detection (MTTD) and mean time to response (MTTR), while improving security operations efficiency and security posture. As a result, FortiXDR enables organizations to reduce the risk of missing potentially crippling cyber attacks like ransomware, phishing, and more, all while easing the burden on small security teams.
The FortiXDR joins Fortinet’s industry-leading portfolio of AI-driven Security Operations offerings, including incident response components suitable for organization of any size or sophistication. For organizations with more staff, solutions and systemic process, FortiSIEM adds multi-vendor visibility while FortiSOAR orchestrates response. This family of products delivers the right-fit solution to organizations of any size to help teams reduce the risk potential of security incidents by blocking more, detecting sooner, and responding faster.
Key benefits of FortiXDR
- Dramatically reduces the number of alerts across products – by 77 percent or more on average
- Handles complex tasks in seconds that would take experts with specialized tools 30 minutes or more to accomplish; and without human error
- Enables the consolidation of independent security products and an automatic, coordinated response.
- Fully automates intelligent incident investigation rather than relying on scarce human resources.
Qaisar
