Fortinet FortiDeceptor-100G

Hauptmerkmale

• Implement zero-day protection: Attackers often target vulnerable assets first. With FortiDeceptor’s advanced outbreak feature, you can now purposefully deploy decoys with recently disclosed vulnerabilities to attract, automatically detect, and quarantine malicious activities early in the kill chain. When a vulnerability is reported by FortiGuard Labs, the vulnerability emulator is automatically pushed as a feed to the outbreak decoy without requiring a software update.
• Rapid threat hunting to identify indicators of compromise (IOCs): FortiDeceptor’s integration with SOAR provides on-demand deception asset deployment, triggered by SOAR playbooks to help hunt and quarantine any malicious activity. When suspicious activity is detected, a SOAR playbook can automatically initiate the deployment of decoys and tokens in that specific segment to help detect an attack and capture intel.
• Provide actionable insights, increase SOC effectiveness
• Extend support to challenging areas (IoT and OT environments)
• Provide early, substantiated warning (no false-positives)
• Scale automatically as the risk level increases
• Detect new or unknown threats and malicious insiders

Technische Daten