Fortinet announced the launch of FortiSandbox 2.0, delivering enhanced features to their FortiSandbox Advanced Threat Detection Appliances and FortiSandbox Cloud solutions. Integrated with FortiGate, FortiSandbox Cloud offers the ability to quarantine compromised users and end points with one-click, delivering additional mitigation against zero-day and advanced threats. When used together with FortiMail, previously unknown email threats are proactively and automatically blocked, the press release claimed.FortiSandbox 2.0 combined with Fortinet’s Advanced Threat Protection (ATP) Framework ensures a new level of protection from sophisticated cyber threats.
Protection from Advanced Threats
Combatting these advanced threats, Fortinet’sFortiSandbox enhances its independently rated and NSS Labs Recommended 99% breach detection rating with new features that scan more file types including Microsoft Office, PDFs, Internet Explorer, web URLs, shared file repositories and can even unzip and scan archived files.
“The number one most exploited vector for attacks within an enterprise has consistently been through an organizational emails.” Said Rajesh Maurya, Country Manager, India & SAARC at Fortinet. “Our updated FortiSandbox 2.0 and overhauled Advanced Threat Protection Framework were engineered to shine a light on the dark places, like emails and attached documents, where many other security solutions just can’t see.
Flexible Deployment
FortiSandbox advanced threat protection is available as physical, virtual and new add-on cloud solutions, while seamlessly integrating with existing FortiGate and FortiMail infrastructure to deliver an advanced integrated security solution without the complexity and cost.
Breaking The Kill Chain
Say a malicious email is sent to someone in the network that is protected by Fortinet ATP framework featuring FortiGate firewalls, FortiMail email security and FortiSandbox. FortiGate reroutes file elements within the email to FortiSandbox for analysis, while FortiMail automatically holds the offending mail until it can be confirmed clear of malicious intent. If that email is found to contain nefarious elements, FortiMail will block the email and FortiSandbox uploads the data from its analysis to FortiGuard, which then triggers an automatic update to the entire Fortinet security ecosystem across the globe.