FortiAI-Assist for FortiAIOps
AI-Powered Security Solutions

Overview:

FortiAI-Assist for FortiAIOps

With flexible deployment options, FortiNDR Cloud and FortiNDR, part of the Fortinet SecOps Platform, give your security team the ability to detect, prioritize, investigate, hunt, and respond to attacks across your network. Through the power of AI-based detections and expert analysis, security teams can spot the evidence of attacker behavior early, enabling effective response across your IT/OT/IoT environments.

Agentless Visibility Across Your Network with FortiNDR Cloud

Network detection and response combines AI-based, human, and behavioral network traffic analysis to look for signs of malicious activity without the need for installed agents. Through this metadata analysis, FortiNDR Cloud creates high-fidelity detections that improve response efforts. FortiNDR Cloud is a SaaS offering that is built to meet your architecture and security requirements.

FortiNDR: Ideal for Air-Gapped Environments

Mission-critical infrastructure and air-gapped environments need to meet additional confidentiality and compliance requirements. FortiNDR can operate in an isolated environment, ensuring secure operations while providing full visibility into IT/OT network traffic. The solution automates investigation efforts through AI-driven network-traffic and file-based analysis, providing real-time identification of advanced threats, including persistent threats that may be lingering in your network.

Orchestrated Incident Response

FortiNDR solutions allow security teams to pivot from detection to investigation to response with a few clicks. Providing interactions with the Fortinet Security Fabric and third party tools such as EDR, SOAR, SIEM, NGFW and XDR, FortiNDR solutions ensure you can automate investigation, triage, and remediation.

Features:

Key features and capabilities of FortiNDR include:

• AI-powered detection: Supervised and unsupervised AI/ML continuously analyze network metadata.
• Streamlined threat hunting: Automatic investigations and guided playbooks accelerate triage and response.
• Orchestrated response: Integration with the Fortinet Security Fabric and third-party vendors ensures automated response.
• FortiGuard-powered threat intel: ML and rule-based detections are backed by FortiGuard Labs threat intelligence.
• Designed for OT networks: FortiNDR is an OT-aware solution with optional industrial security and OT malware detection.
• Decreased operational costs: FortiNDR Cloud guided-SaaS reduces NDR management and maintenance costs.

FortiAI-Assist Use Cases

Automated Alert Triage

Prioritizes notifications based on risk, context, and historical patterns; suppresses duplicate alerts; only flags high-confidence threats.

Adaptive Threat Hunting

Scans logs, network traffic, and user behavior to search for threats without waiting for human input.

Root-Cause Tracing

Identifies an attack's origin, method, and impact using AI-driven reasoning.

Auto Configuration

Generates and corrects CLI and Jinja scripts in seconds with FortiAI Script Assistant, validating existing ones and recommending fixes for optimized operations.

Policy Creation

Allows quick policy change script generation, eliminating repetitive labor and human errors.

LAN/WAN Optimization

Enhances visibility and automation, reducing issue resolution time across LAN and SD-WAN through AI-assisted monitoring and trend analysis.

Documentation:

Download the FortiAiOps Data Sheet (PDF).

Pricing Notes:

• All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.
• Hardware plus ASE FortiCare and FortiGuard 360 Protection
  Hardware unit, 24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, 360 Services Bundle (SD-WAN Orchestrator, SD-WAN Cloud Assisted Monitoring, SD-WAN Overlay Controller VPN, FortiManager Cloud, FortiAnalyzer Cloud, Fortinet SOCaaS, IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security and FortiConverter Service) plus term of contract
• Hardware plus 24x7 FortiCare and FortiGuard Enterprise Protection
  Hardware Unit, 24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service) plus term of contract
• Hardware plus 24x7 FortiCare and FortiGuard Unified Threat Protection (UTP)
  Hardware Unit, 24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service) plus term of contract
• 360 Protection (SD-WAN Orchestrator, SD-WAN Cloud Monitoring, FMG/FAZ Cloud, IPAM, IPS, AMP, App Ctrl, Web & Video Filtering, AS, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and ASE FortiCare)
  24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, 360 Services Bundle (SD-WAN Orchestrator, SD-WAN Cloud Assisted Monitoring, SD-WAN Overlay Controller VPN, FortiManager Cloud, FortiAnalyzer Cloud, Fortinet SOCaaS, IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security and FortiConverter Service)
• Enterprise Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and 24x7 FortiCare)
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service)
• Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam Service, and 24x7 FortiCare)
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service)
• Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and 24x7 FortiCare)
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Advanced Threat Protection Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Service, Application Control)
• 24x7 FortiCare Contract
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control
• ASE FortiCare (24x7 plus Advanced Services Ticket Handling)
  24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control.
• Prices are for one year of Premium RMA support. Usual discounts can be applied.
• Annual contracts only. No multi-year SKUs are available for these services.
• Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
• Pricing and product availability subject to change without notice.