Network Monitoring Appliances

Account Credentials, User Access, and Activity

Privileged Access and Session Management for managing account credentials, controlling privileged user access, and monitoring activity on privileged accounts. FortiPAM ensures uptime with high availability active/standby HA capabilities.

FortiPAM privileged access management provides controls over elevated privileged access and permissions for users, accounts, processes, systems, and sensitive data across the entire IT environment. FortiPAM is an integral component of the Fortinet Identity and Access Management (IAM) solution which allows organizations to provide tight security for privileged accounts and privileged credentials. FortiPAM provides tightly controlled privileged access to the most sensitive resources within an organization. It enables end-to-end management of privileged accounts, control of privileged user access, and visibility of account usage including monitoring and audit capabilities. These features allow FortiPAM to introduce zerotrust principles to privileged accounts and dramatically lower an organizations' overall attack surface.

Organizations looking to modernize IAM capabilities need to look beyond standard user identities and bring in controls for privileged accounts in the form of a PAM solution. These accounts have access to the most sensitive information which necessitates an extra level of security. FortiPAM can assist with three primary use cases when it comes to privileged accounts. These are managing account credentials, controlling privileged user access, and monitoring privileged activity.

ZTNA Elements - FortiPAM as Access Proxy

The components of a client-based ZTNA solution.

Manage Account Credentials

Managing privileged accounts goes beyond storing privileged credentials. It means fully automating the privileged-accounts lifecycle. Organizations often struggle with orphaned privileged accounts or ensuring these accounts have updated credential policies. FortiPAM can help manage privileged accounts by automatically changing passwords based on policy. FortiPAM owns the privilegedcredential vault of specific resources so that users will not need to know the resource's credentials. This reduces the risk of the credentials falling into the wrong hands. FortiPAM also ensures that no sensitive privileged account information will be delivered to the end-user's device in proxy mode.

Control Privileged User Access

Privileged accounts need to use zero-trust principles because of the sensitive company resources they have access to. FortiPAM can bring zero-trust to these privileged accounts by ensuring that end users are only granted access to critical resources based on roles, such as standard user or administrator, and always ensuring least privilege. FortiPAM provides full controls of all resource secrets through administrator-defined central policies. These include options for automatic password changes after check-in. Organizations are also able to use FortiPAM to implement a hierarchical approval system and control risky commands.

Monitor Privileged Access

In addition to managing and controlling privileged accounts, it's just as important to provide monitoring capabilities for users of these highly sensitive resources. FortiPAM can provide reporting of privileged account usage in the case of a security incident. FortiPAM can provide fullsession video recordings to provide a view of the users logged into privileged accounts, including monitoring keystrokes and mouse events. When needed for audit purposes, FortiPAM can provide full audit tracking of all privileged account usage.

FortiMonitor

FortiMonitor consolidates multiplatform monitoring data into a single SaaS platform which collects telemetry across complex, hybrid infrastructures. FortiMonitor visualizes the information in a unified capacity, enabling seamless incident correlation & diagnostics.

FortiManager provides automation-driven centralized management of your Fortinet devices from a single console. This process enables full administration and visibility of your network devices through streamlined provisioning and innovative automation tools.

Integrated with the Fortinet Security Fabric advanced security architecture and automation driven network operations capabilities provide a solid foundation to secure and optimize your network security.

Single-Pane Management and Provisioning streamlines centralized policy and object management and provisioning, automatic revision history and control, and enhanced role-based access control (RBAC) features for script management and IPS management with role separation.

Fabric Automation simplifies the zero-touch provisioning (ZTP) deployment process for SD-Branch (FortiGates and access devices) with powerful templates that directly utilize meta-variables for scalable provisioning to thousands of sites.

Monitoring and Visibilityfor device inventory, applications, SD-WAN, LAN edge, management extension applications (MEAs), traffic, public cloud, and more.

Automation-Driven Centralized Device Management from a Single Console

FortiManager provides automation-driven centralized management of your Fortinet devices from a single console. This process enables full administration and visibility of your network devices through streamlined provisioning and innovative automation tools.

Integrated with the Fortinet Security Fabric advanced security architecture and automation driven network operations capabilities provide a solid foundation to secure and optimize your network security. Built-in Fortinet factory default templates with best security practice and relevant network configuration for specific use cases.

Highlights | Single-Pane Management and Provisioning

Single-Pane Management and Provisioning streamlines centralized policy and object management and provisioning, automatic revision history and control, and enhanced role- based access control (RBAC) features for Firewall management and IPS management with role separation.

Fabric Automation

Fabric Automation simplifies the zero-touch provisioning (ZTP) deployment process for SD- Branch (FortiGates and access devices) with powerful templates that directly utilize meta- variables for scalable provisioning to thousands of sites.

Monitoring, Visibility, and Troubleshooting

Monitoring and visibility for device inventory, applications, SD-WAN, LAN edge, management extension applications (MEAs), traffic, public cloud, and more.

Built-in speed tests to troubleshoot branch office connectivity and packet capture to investigate LAN related issues.

Key Features

• Centrally manage network and security policies for thousands of FortiGate NGFWs and Secure SD-WAN plus FortiSwitches, FortiAP, and FortiExtender. Provide signature updates to FortiGate, FortiMail, FortiSandbox, and FortiClient
• License management, centralized distribution of security content and signatures through the use of the built-in FortiGuard module which are designed to work in air-gapped networks
• Simplify configuration, deployment, and maintenance for Secure SD-WAN at scale. Accelerate FortiExtender Wireless WAN connectivity with centralized management across distributed sites
• Reduce complexity and costs by leveraging automated REST API, scripts, CLI and Jinja templates, connectors, and automation stitches
• Automate workflows and configurations for Fortinet firewalls, switches, and wireless infrastructure
• Separate customer data and manage domains leveraging ADOMs to be compliant and operationally effective

FortiManager provides Automation-Driven Centralized Management of your Fortinet devices from a single console for full adminstration and visibility of your network devices through streamlined provisioning and innovative automation tools.

Integrated with Fortinet's Security Fabric, the advanced security architecture and FortiManager's Automation Driven Network Operations capabilities provide a solid foundation to secure and optimize your network security.

Single-Pane Management streamlines centralized policy and object management, automatic revision history and control, and enhanced RBAC features for script management and IPS management with role separation.

Security Fabric Automation simplifies the ZTP deployment process for SD-Branch (FortiGates and access devices) with powerful templates that directly utilize metavariables for scalable provisioning to thousands of sites.

NOC Cloud Services offers the FortiManager platform as a service with new management extensions that can be pulled and installed from the cloud.

FEATURE HIGHLIGHTS

Single Pane Management

FortiManager's Single Pane Management provides centralized management and provisioning strategy built around Fortinet's Security Fabric, that tightly integrates an organization's network infrastructure and security architecture to apply access control, segmentation and consistent protection of devices, applications and users.

Device Configuration and Provisioning

FortiManager expands the network administrator's capabilities with a rich set of tools to centrally manage up to 100,000 devices including FortiGates, FortiExtender, FortiSwitch, FortiAPs, SD-WAN and more.

Collectively configure device settings and use new enhanced CLI templates with variables, and provisioning templates to assign firmware and policy packages from a single console, including policy and object revision history for auditing.

FortiManager includes extended SSL and Certificate support for enhanced ssl-ssh-profile configuration, as well as Restricted IPS Admin Profiles to support customers who are transitioning and upgrading from dedicated IPS solutions to Fortinet products.

Automated device configuration backups and revision control make daily administrative tasks easy, with change tracking in the enhanced Event Log view for review of configuration and change detail for auditing & compliance.

FortiManager also now enables Admins to configure and assign custom commands on FortiSwitch and configure MCLAG from the FortiSwitch Manager.