Fortinet
Fortinet offers a portfolio covering assessing cloud exposure or protecting running workloads, endpoint protection and incident investigation, controlling communications and inspecting traffic, protecting or governing business messaging, controlling elevated credentials and privileged sessions, applying access policy to users, applications or traffic, collecting and analyzing security-relevant events, coordinating repeatable security actions across tools and applying security rules to application requests. The entries in this catalog include FortiCNAPP, FortiEDR, FortiGate, FortiMail, FortiMail Workspace Security and FortiPAM, with 4 additional product or service profiles. FortiCNAPP focuses on cloud security posture assessment and runtime threat detection. FortiEDR focuses on endpoint threat prevention and response. FortiGate focuses on next-generation firewall policy and threat prevention. When reviewing Fortinet, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - FortiCNAPP: the catalog lists Lacework-derived cloud security, Cloud security posture management, Cloud workload protection. - FortiEDR: the catalog lists Malware prevention, Policy management. - FortiGate: the catalog lists Fortinet Security Fabric context, Intrusion prevention, Application-aware policy. - FortiMail: the catalog lists Phishing detection, Business email compromise detection, Account takeover detection. - FortiMail Workspace Security: the catalog lists Collaboration application protection, Phishing detection, Business email compromise detection. - FortiPAM: the catalog lists Privileged credential vaulting, Credential rotation, Session recording. - FortiSASE: the catalog lists Zero trust network access, Secure web gateway, Cloud access security broker. - FortiSIEM: the catalog lists Security log collection, Event correlation, Behavior analytics. - FortiSOAR: the catalog lists Workflow orchestration, Playbook automation, Tool integrations. - FortiWeb: the catalog lists Web request filtering, API traffic protection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Documented Software Products (11)
Fortinet FortiGate Next-Generation Firewall
High-performance Next-Generation Firewall (NGFW) providing AI-powered threat protection, deep packet inspection, and integrated SD-WAN.
FortiSASE
FortiSASE from Fortinet focuses on cloud-delivered secure network access. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - Private application access: Connects authorized users to private applications according to access policy. - Internet traffic inspection: Inspects the traffic paths supported by the selected deployment and policy configuration. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. - WAN connectivity integration: Combines access security with the networking functions documented for the platform. Use and operational context FortiSASE is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiSASE focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
FortiCNAPP
FortiCNAPP from Fortinet focuses on cloud security posture assessment and runtime threat detection. It is cloud security technology used for assessing cloud exposure or protecting running workloads. Capabilities - Lacework-derived cloud security: Includes the cloud-security technology and capabilities documented for the Lacework-derived FortiCNAPP platform. - Cloud security posture management: Finds cloud configuration risks so teams can prioritize corrections across connected environments. - Cloud workload protection: Focuses on protecting workloads running in the cloud rather than only inspecting account configuration. - Cloud entitlement analysis: Examines cloud permissions to identify overly broad or risky access. - Kubernetes security: Brings Kubernetes assets or configuration into the cloud security assessment workflow. - Runtime threat detection: Uses activity from running workloads to identify or respond to active threats. - Infrastructure-as-code scanning: Checks infrastructure definitions for security issues before or alongside deployment. - Vulnerability prioritization: Helps order remediation work using the risk context available in the platform. Use and operational context FortiCNAPP is relevant to cloud and security teams working across accounts and workloads when the requirement centers on assessing cloud exposure or protecting running workloads. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiCNAPP focuses on assessing cloud exposure or protecting running workloads. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
FortiEDR
FortiEDR from Fortinet focuses on endpoint threat prevention and response. It is endpoint security software used for endpoint protection and incident investigation. Capabilities - Malware prevention: Provides controls intended to detect or block malicious files and execution. - Policy management: Lets administrators apply protection settings to groups of managed endpoints. Use and operational context FortiEDR is relevant to security teams administering employee devices or servers when the requirement centers on endpoint protection and incident investigation. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiEDR focuses on endpoint protection and incident investigation. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
FortiGate
FortiGate from Fortinet focuses on next-generation firewall policy and threat prevention. It is network security technology used for controlling communications and inspecting traffic. Capabilities - Fortinet Security Fabric context: Can be evaluated as part of the documented Fortinet integration and policy-management architecture. - Intrusion prevention: Inspects traffic for attack patterns that can be blocked under the configured network policy. - Application-aware policy: Uses application context when defining or enforcing network access rules. - VPN connectivity: Supports encrypted network access or site connectivity described by the vendor. - SD-WAN functions: Brings wide-area connectivity choices and policy into the vendor's networking portfolio. - TLS traffic inspection: Allows encrypted traffic inspection where enabled and appropriate to the organization's policy. - Network segmentation: Separates access between network or workload groups to constrain unnecessary communication. - Traffic visibility: Helps administrators understand observed connections and network activity. Use and operational context FortiGate is relevant to network teams protecting branches, data centers or workloads when the requirement centers on controlling communications and inspecting traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Physical appliance, virtual firewall and supported cloud firewall deployments; form factor depends on the selected product. Before adoption, review traffic throughput, network topology, policy administration and the effect of inspection on business applications. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiGate focuses on controlling communications and inspecting traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
FortiMail
FortiMail from Fortinet focuses on email threat filtering and message protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Account takeover detection: Brings signs of compromised email or cloud accounts into the investigation workflow. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Malicious link protection: Addresses threats carried through links in messages. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Message remediation: Supports handling messages identified as suspicious or malicious. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. Use and operational context FortiMail is Fortinet's email protection entry. Review the chosen message-processing architecture, protection policy and administrator workflow, then test how the system handles both a suspicious message and a legitimate message with similar business characteristics. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiMail focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
FortiMail Workspace Security
FortiMail Workspace Security from Fortinet focuses on threat protection for email and collaboration applications. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Collaboration application protection: Extends the documented protection scope beyond email into supported collaboration services. - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Account takeover detection: Brings signs of compromised email or cloud accounts into the investigation workflow. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Malicious link protection: Addresses threats carried through links in messages. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Message remediation: Supports handling messages identified as suspicious or malicious. Use and operational context FortiMail Workspace Security is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiMail Workspace Security focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
FortiPAM
FortiPAM from Fortinet focuses on privileged access control and session management. It is privileged access management technology used for controlling elevated credentials and privileged sessions. Capabilities - Privileged credential vaulting: Stores privileged credentials under centrally administered access controls. - Credential rotation: Supports changing privileged credentials to reduce the exposure associated with long-lived passwords. - Session recording: Provides a record of privileged activity to support investigation and accountability. - Least-privilege enforcement: Restricts routine access so users and applications do not retain unnecessary elevated permissions. - Remote session brokering: Provides controlled access paths for administrators or external support providers. - Approval workflows: Routes access requests through the authorization process configured by the organization. - Service account management: Addresses access and credential administration for nonhuman accounts used by applications and services. Use and operational context FortiPAM is relevant to administrators governing access to sensitive systems when the requirement centers on controlling elevated credentials and privileged sessions. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review credential onboarding, access approvals, session controls and the operational impact of least-privilege policies. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiPAM focuses on controlling elevated credentials and privileged sessions. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
FortiSIEM
FortiSIEM from Fortinet focuses on event correlation and security monitoring. It is security analytics technology used for collecting and analyzing security-relevant events. Capabilities - Security log collection: Brings supported logs and events into a common security analysis workflow. - Event correlation: Connects related observations so analysts can investigate a potential incident in context. - Behavior analytics: Examines patterns associated with users or entities to help identify suspicious deviations. - Threat hunting: Lets analysts investigate hypotheses across the security data available in the platform. - Incident investigation: Organizes evidence and investigative activity around incidents or cases. - Response automation: Connects detection and investigation with the automated actions documented for the offering. - Third-party integrations: Connects security data sources or response tools supported by the platform. - Security reporting: Produces views or reports for communicating detected issues and operational activity. Use and operational context FortiSIEM is relevant to security operations teams investigating alerts and incidents when the requirement centers on collecting and analyzing security-relevant events. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review source onboarding, detection content, query performance, data retention and the cost implications of event volume. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiSIEM focuses on collecting and analyzing security-relevant events. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
FortiSOAR
FortiSOAR from Fortinet focuses on security workflow orchestration and automation. It is security workflow automation technology used for coordinating repeatable security actions across tools. Capabilities - Workflow orchestration: Coordinates actions and information across the systems involved in a security process. - Playbook automation: Packages repeatable investigation or response steps into reusable workflows. - Tool integrations: Connects the external applications supported by the product's integration model. - Incident case management: Tracks investigation context, decisions and response tasks around a security case. Use and operational context FortiSOAR is relevant to security operations teams standardizing investigation or response tasks when the requirement centers on coordinating repeatable security actions across tools. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review connector permissions, failure handling, approval checkpoints and a test workflow using the organization's own tools. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiSOAR focuses on coordinating repeatable security actions across tools. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
FortiWeb
FortiWeb from Fortinet focuses on web application traffic inspection and protection. It is web application protection technology used for applying security rules to application requests. Capabilities - Web request filtering: Applies protection rules to requests reaching the web applications covered by the deployment. - API traffic protection: Brings API traffic into the application protection scope where included in the selected offering. Use and operational context FortiWeb is relevant to application owners and security teams protecting web services when the requirement centers on applying security rules to application requests. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review application onboarding, rule tuning, false-positive handling and behavior under representative legitimate traffic. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiWeb focuses on applying security rules to application requests. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Official Product Demos & Technical Videos (1)
Verified product demonstrations, architecture walkthroughs, and technical overviews direct from Fortinet.
