FortiCNP to help teams proactively manage cloud risk

Bangalore: Fortinet announced a new built-in-the-cloud offering FortiCNP that correlates security findings from across an organisation’s cloud footprint to facilitate friction-free cloud security operations.

FortiCNP’s patented Resource Risk Insights (RRI) technology produces context-rich, actionable insights that help teams prioritize the remediation and mitigation of risks with the highest potential impact on cloud workload security without slowing down the business.

Also, Fortinet has become an Amazon Web Services (AWS) launch partner for Amazon GuardDuty Malware Protection, which provides agentless malware detection capabilities across AWS data stores, disk volumes, and workload images.

FortiCNP supports Amazon GuardDuty Malware Protection, delivering near-real-time threat protection with zero-permission capabilities to actively scan running workloads with no impact or delays to operations.

Each of these solutions comes with a litany of alerts that often require manual analysis and can quickly compound across an organisation’s cloud deployment.

“Without the proper tools, security professionals must manually sift through hundreds, if not thousands, of security alerts on a daily basis,” said Doug Cahill, VP – Analyst Services and Senior Analyst, Enterprise Strategy Group (ESG).

“Inundated with alerts, teams can face decreased productivity, inefficient workflows, and security risks accumulating faster than they can be addressed. FortiCNP helps cut through the noise, pointing teams to the security alerts that matter most,” added Cahill.

Customers are already experiencing the benefits of FortiCNP’s approach to cloud-native risk management. “FortiCNP gives us comprehensive cloud visibility with an intuitive dashboard that allows us to easily track risk management over time,” said Caio Hyppolito, CTO of BK Bank.

“Most importantly, it enables our team to focus on securing high-priority resources instead of spending time working through long lists of security findings. Integrations with the products we already have allowed us to get even more value out of our deployment and allow broader visibility and easier, more proactive cloud security management,” added Hyppolito.

A defining feature of FortiCNP is integration with AWS security products and services, and the Fortinet Security Fabric, which helps organisations more effectively secure their cloud environments and maximize their cloud security investments.

“Security partners like Fortinet with their FortiCNP offering built on AWS and integrated with our security services like Amazon GuardDuty give customers a choice to simplify and accelerate their cloud journey with cloud-native security services,” said Jon Ramsey, VP of AWS Security.

A defining feature of FortiCNP is integration with AWS security products and services, and the Fortinet Security Fabric, which helps organisations more effectively secure their cloud environments and maximize their cloud security investments.

FortiCNP delivers the following features that allow security teams to effectively manage risk in the cloud:

• FortiCNP Resource Risk Insights (RRI) leverages a patented risk score algorithm to contextualise security findings from Fortinet Cloud Security solutions and AWS products and services to provide teams with prioritized, context-rich, and actionable insights about resources that present the highest risk and need immediate attention.
• By analyzing, correlating, and contextualizing security findings from AWS cloud security services with FortiCNP, customers maximize the value and benefit from easy deployment capabilities offered by Amazon GuardDuty Malware Protection, Amazon Inspector, AWS Security Hub, AWS CloudTrail, and AWS Organisations
• Integrations with Amazon GuardDuty Malware Protection leverage a zero-permission, agentless approach for detecting malware throughout the data supply chain by scanning cloud data stores, disk volumes, and workload images.
• Integrations with digital workflow solutions turn FortiCNP RRIs into intuitively actionable workflow tasks as part of the cloud infrastructure lifecycle.
• For customers utilizing Fortinet Cloud Security solutions such as FortiGate-VM and FortiWeb, RRIs will be able to trigger stop-gap remediations to block high-impact threats.
• FortiCNP continuously scans and monitors changes to cloud data with industry-leading threat intelligence and content scanning powered by FortiGuard Labs.

“FortiCNP is the latest example of Fortinet’s commitment to delivering Fabric solutions that extend enterprise security with cloud-native integrations,” said Vishak Raman, VP of Sales, India, SAARC and Southeast Asia – Fortinet.

“We’re pleased to continue to deliver solutions that allow security professionals to transition from time-consuming triage and manual analysis processes to proactively securing their cloud workloads and easily understand their cloud security risk,” added Raman.