安全编排、自动化和响应 (SOAR)
FortiSOAR 统一并优化 SOC 活动，防止攻击
免费产品演示 下载解决方案简介
概述
FortiSOAR 通过集中事件管理和自动化分析活动，帮助 IT/OT 安全团队阻止攻击，从而有效开展威胁调查和响应。以 FortiSOAR 作为运营中心来标准化和执行这些工作流，可以执行最佳实践，并允许分析师专注于保护组织的重中之重。
为什么选择 FortiSOAR？
FortiSOAR 减轻了安全团队的负担，以前安全团队有太多的工具需要管理，太多的警报需要调查，太多的手动和重复流程需要完成，它们会减缓响应速度。有了 FortiSOAR，您可以实现 IT/OT 安全操作和任何关键企业功能的集中化、标准化和自动化。FortiSOAR 凭借广泛的集成、丰富的用例功能、数百个预构建的工作流和简单的程序创建，支持根据您的特定需求量身定制的一流程序。
OT 安全运营的关键
FortiSOAR 通过基于风险的资产和漏洞管理、MITRE ATT&CK ICS 视图、OT 威胁修复程序和完整的 OT 生态系统集成等功能，完全支持独特的 OT 要求。无论您是扩展 SOC 以保护 OT，还是提高 OT 控制中心的安全能力，FortiSOAR 都是您的 OT 安全态势、威胁响应能力和 SecOps 效率的关键。
下载 FortiSOAR OT 解决方案简介
企业和 MSSP 部署的理想选择
FortiSOAR 的丰富功能、灵活性和许可对企业和管理式安全服务提供商都很有吸引力。企业可以从 SaaS、本地、公共云托管或可信的 MSSP 合作伙伴中进行选择，它们都具有相同的强大功能。FortiSOAR 分层、分布式、多租户和共享租户选项以及本地代理，完全支持全球企业以及 MSSP 所需的各种运营模式。
功能与优点
综合解决方案
500 多个集成、800 个程序、强大的功能、用例解决方案支持 SOC/NOC/OT 效率
AI 驱动的推荐引擎
嵌入式 AI 支持自动化和
决策，包括警报分组、威胁
评估、程序
内置威胁情报
内置 FortiGuard Labs 全球情报
和公共资源充实了调查和权力行为
内容中心和社区
连接器、程序、解决方案包、最佳实践视频和社区推动持续效益
创建无代码/低代码程序
专利设计经验提供视觉拖放和快速开发模式，以创建程序
灵活的部署选项
选择 SaaS、本地、公共云托管或可信的 MSSP 合作伙伴，它们都具有相同的功能
FortiSOAR 用例
安全事件管理
集中化、标准化和自动化警报调查与响应。运用全套作战室工具，快速应对攻击。
NOC 响应和优化
触发跨多供应商安全解决方案的自动修复和预防措施。自动执行任何 NOC 任务。
OT 安全自动化
通过资产和漏洞管理、威胁响应程序以及完整的 OT 生态系统集成来提高 OT 安全性。
资产与漏洞管理
跟踪 IT/OT 资产，评估风险，并将变更管理工作流程自动化。跟踪 CSV，按风险进行优先排序，以及自动修复。
员工团队与运营管理
自动分配任务，管理队列和计划。根据 SLA 跟踪并报告指标和团队绩效。
提高整个企业的效率
通过灵活简单的自定义操作和手册创建，为任何用例提供最佳实践标准并提高效率。
企业分析师验证
KuppingerCole Leadership Compass for SOAR
GigaOm Radar for SOAR
Fortinet SecOps Fabric 上的 ESG 经济验证
Fortinet 荣获 2023 KuppingerCole Leadership Compass for SOAR 评选的“领导者”称号
该报告对 14 家供应商进行了分析，将 FortiSOAR 评为在产品、创新和市场占有率标准方面排名第一的综合领军产品。
“在自动化和最大限度利用现有工具方面，FortiSOAR 为最佳产品。”
FortiSOAR 被评为 2023 年 GigaOm Radar for SOAR 的“全面领先者”(Overall Leader) 和“出类拔萃者”(Outperformer)
该报告在功能、优势、用例和创新方面对 15 家 SOAR 供应商进行了全面评估和分析。FortiSOAR 在所有类别中均名列前茅或跻身领先行列，并因其产品发展速度而被评为“出类拔萃者”(Outperformer)。
阅读博客 »
Fortinet 安全运营解决方案的量化优势
随着企业的发展，新技术的出现，网络犯罪分子引入了更复杂的攻击，安全领导者及其团队在保护组织网络方面面临着各种挑战。Enterprise Strategy Group 发布的这份新报告详细介绍了使用Fortinet 安全运营解决方案的好处，包括提高运营效率和更有效的风险管理。
下载报告 »
案例研究
行业、政府和安全服务提供商中的众多知名企业和机构均依赖 FortiSOAR 自动化事件管理作为其安全运营的支柱。
300 多家企业、政府机构和 MSSP 客户
FortiSOAR 以 SaaS 形式提供，也可作为虚拟机 (VM) 或容器部署在企业内部、私有云和公共云中，或作为 FortiCloud 托管的私有解决方案。无论您是在寻找任务关键型 SOC 平台，还是在寻找可随运营扩展的交钥匙 SaaS 解决方案，FortiSOAR 都是优化您安全运营的正确选择。
阅读安全网络防御案例研究
资源
技术参数表
分析报告
电子书
解决方案简介
Improve Security Operations Across the Security Fabric »
The Security Operations Center (SOC) Automation Model is designed to help security teams identify appropriate Fortinet security products for their SOC, based on their existing investment in people and processes.
SOAR Through Implementation »
Security operations teams face the challenge of maintaining the longevity of their security infrastructures against the evolving threat landscape and operational complexities.
Optimize MSSP Operations with FortiSOAR »
Given that speed matters more than ever as malicious actors advance their efforts, organizations are also demanding rapid and in-depth detection and analysis capabilities from the MSSP services they use.
Optimize Security Operations with FortiSOAR »
FortiSOAR enables organizations to centralize, standardize, and automate IT/OT security operations and critical enterprise functions.
FortiSOAR: Optimize OT Security Operations »
Whether you’re extending your SOC to protect OT or growing the cybersecurity capabilities of your OT control center, FortiSOAR is key to your OT security posture, threat responsiveness, and SecOps efficiency.
生态系统
FortiSOAR 开箱即与 500 余种多供应商产品集成，您可以轻松创建新的连接器。访问 FortiSOAR Content Hub（内容中心），查看完整列表并了解更多信息。
Amazon Web Services
AWS services are trusted by more than a million active customers around the world – including the fastest growing startups, largest enterprises, and leading government agencies – to power their infrastructures, make them more agile, and lower costs.
Learn more on the Fortinet-AWS alliance
Anomali
Anomali delivers high-fidelity threat intelligence from diverse sources to Fortinet, providing the contextualized threat intelligence and triggers necessary to prioritize and initiate an incident response, and when paired with event data, allowing your SOC analysts to focus on the real threats, rather than false positives.
Armis, Inc.
Armis the leading unified asset visibility and security platform designed to address the new threat landscape that connected devices create. Our real-time and continuous protection sees the full context of all managed, unmanaged, and IoT devices, including medical devices, operational technology, and industrial control systems.
- Blog - FortiGate Integration
- Blog - Armis and Fortinet Partnership
- Armis FortiSOAR
- Partner Interview Video
- Solution Brief - Security
- Solution Brief - Healthcare
Attivo Networks
Attivo Networks is an award-winning innovator in cyber security defense. As the leader in deception-based threat detection technology, Attivo empowers continuous threat management using dynamic deceptions for the real-time detection, analysis, and accelerated response to cyber incidents.
Axonius
Axonius is the cybersecurity asset management platform that gives organizations a comprehensive asset inventory, uncovers security coverage gaps, and automatically enforces security policies. Together with Fortinet, customers can analyze all assets on their network and automatically enforce policies when assets deviate from policies.
Braintrace
Braintrace, a leader in offering next-generation cybersecurity products and services, understands that data security and privacy are paramount. To this end, Braintrace focuses its efforts on detecting threats inside encrypted traffic. Requiring only a minimal set of datapoints, DragonflyNTA integrates with Fortinet products to identify network threats with real-time analytics.
Cisco
Cisco is the worldwide leader in IT that helps companies seize the opportunities of tomorrow by proving that amazing things can happen when you connect the previously unconnected.
Cloud Range
Cloud Range is the industry’s leading cyber preparedness simulation platform that reduces exposure to cyber risk across the organization. Fortinet and Cloud Range have partnered to provide cybersecurity teams with full-service, live-fire simulation exercises designed explicitly for OT/ICS, IT, IoT, and converged environments.
CrowdStrike, Inc.
CrowdStrike has redefined security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk — endpoints and cloud workloads, identity, and data.
CyberArk
CyberArk is the global leader in privileged account security, a critical layer of IT security to protect data, infrastructure and assets across the enterprise, in the cloud and throughout the DevOps pipeline. CyberArk delivers the industry’s most complete solution to reduce risk created by privileged credentials and secrets.
培训 & 认证
NSE 6
In this course, you will learn about FortiSOAR architecture, and how to deploy, configure, manage, operate, and monitor FortiSOAR in a SoC environment.
NSE 7
In this course, you will learn how to use FortiSOAR to design simple to complex playbooks, examine the role of FortiSOAR in mitigating malicious indicators, and learn how to create interactive dashboards to display relevant information about alerts and incidents.
