Fortinet FortiScan 1000B

Overview:

The FortiScan-1000B Operating System Vulnerability Management Platform provides enterprise-level support for up to thousands of Operating System (OS) assets. This appliance provides a centrally managed, enterprise-scale solution that enables organizations to close information technology (IT) compliance gaps, and implement continuous monitoring in order to audit, evaluate, and comply with internal, industry, and regulatory policies for IT controls and security at the Operating System (OS) level. Organizations realize quick time-to-value with easy to install, intuitive, high value standard compliance policies (NIST SCAP, FDCC, PCI-DSS, SOX, GLBA, HIPAA) ready out-of-the-box with regular updates by FortiGuard to ensure OS regulatory compliance requirements are met.

FortiScan-1000B Benefits:

• Identifies security vulnerabilities and finds compliance exposures on hosts, servers and throughout the network transparently.
• Network discovery, asset prioritization and profile-based scanning.
• Uses industry, regulatory and best practices, including standard templates for ISO 17799, SOX, HIPAA, GLBA, NIST, SCAP, and FISMA.
• Audits and monitors across heterogeneous systems and provides industry standard benchmarks for IT compliance audits for Operating Systems, and aids compliance for regulatory mandates with 360 degree Reporting, Analysis, and Views.
• Delivers patch management with ready-to-deploy remediation and enforcement actions - remediation capability goes beyond traditional patch management, allowing network managers to change configurations and potentially mitigate weak settings, including disabling an application or denying a network request.
• Reduced errors, repeatable processes, and predictable results delivered with extensive libraries of templates that enable IT staff to leverage industry standard best practices that produce measurable results.

FortiScan-1000B Features:

• Supports thousands of operating system assets
• 4 10/100/1000 Base-T Ethernet interfaces
• 2 x 1 TB total hard drive capacity
• FortiScan Asset Agents have small 500 KB footprints for client installs
• OS support: Windows 2000 / XP; Windows Server 2000 / 2003; Red Hat Enterprise WS, ES, AS 3.0, 4.0 and 5.0; Sun Solaris 8, 9 and 10
• Browser support: Internet Explorer 7.x, Firefox 3.x

Efficient IT Governance, Risk & Compliance (ITGRC)

today’s businesses are required to address security and compliance risks on their It infrastructure on a daily basis. Most businesses rely on a collection of point products and manual processes when attempting to solve this problem. Driven by an increasing number of regulatory mandates, increasing costs of achieving and maintaining compliance, increased It risk (e.g., security breaches) that may even affect Standard & Poor evaluations of risk, customer and shareholder confi dence, security compliance programs are fast becoming an essential component of any enterprise It Strategy. ItGRC requirements affect It security at multiple levels, from the network down to endpoint client machines and other network devices. It departments need to keep up with new regulations and modifi cations to existing regulations to pass audits, while reducing costs, complexity and redundant work. Vigilence in keeping up with current operating System (oS) vulnerabilities and associated patches is critical as zero-day attacks at the oS level become more sophisticated. Maintaining homegrown and manual security compliance processes is no longer a viable option.

Automating Compliance at the Operating System Level

FortiScan provides a centrally managed, enterprise-scale solution that enables organizations to close It compliance gaps, and implement continuous monitoring in order to audit, evaluate, and comply with internal, industry, and regulatory policies for It controls and security at the oS level. organizations realize quick time-to-value with easy to install, intuitive, high value standard compliance policies (NISt SCAP, FDCC, PCI-DSS, SoX, GlbA, HIPAA) ready outof- the-box with regular updates by FortiGuard to ensure oS regulatory compliance requirements are met. FortiScan dedicated hardware appliances easily plug into the network for fast deployment. FortiScan integrates endpoint vulnerability management, industry and federal compliance, patch management, remediation, auditing and reporting into a single, unifi ed appliance for immediate results. A centralized administration console facilitates management of multiple FortiScan appliances across the enterprise.

Features and Benefits:

Key Features and Benefits: Vulnerability Management (VM) Identifi es security vulnerabilities and compliance exposures through deep inspection with client-resident asset agents – transparent to end users. Agent-less Vulnerability Assessment Asset prioritization and profi le-based scanning to automatically discover, inventory and assess security posture of the oS on networked devices, including mail servers, FtP servers or other UNIX or Windows hosts. Auditing Monitors across heterogeneous systems and provides industry-standard benchmarks for IS compliance audits for operating systems; Select from the list of audit benchmarks or create custom policies. Patch Management and Remediation Delivers patch management with ready-to-deploy remediation and enforcement actions; remediation capability goes beyond traditional patch management, allowing network managers to change confi gurations and potentially mitigate weak settings, including disabling an application or denying a network request. Reporting and Compliance Compliance for regulatory mandates with 360 degree reporting and analysis; provides industry, regulatory and best practices for NISt SCAP, FDCC, PCI-DSS, SoX, GlbA, HIPAA, ISo 17799, FISMA, and more. Pre-defi ned reports and views for compliance are also provided. Smart Automation Reduced errors, repeatable processes, and predictable results delivered with an extensive libraries of templates that enable It staff to leverage industry standard best practices that produce measurable results. Enterprise Scalability Supports fl exible deployments across the network of up 60 databases per appliance for consistent enterprise-wide policy enforcement, processing tens of millions of audit records from databases per day.

Minimal Impact and Low Total Cost of Ownership (TCO) Failing to keep up with regulations, vulnerabilities and patches for the oS can have grave cost implications. FortiScan simplifi es the process with regular policy updates through FortiGuard for current patches and industry leading remediation advice that strengthens the integrity and security of operating systems— mitigating threats and managing vulnerabilities to prevent costly breaches.

Technical Specifications:

FortiAnalyzer Series Specifications:
FortiScan Models
	FortiScan-1000B
System Specifications
Security Hardened Platform	Yes
Asset Agent Licenses	2,000
Agent-less Scans	Unlimited
Hardware Specifications
10/100/1000 Ethernet	4
Number of Drive Bays	2
Total Hard Drive Capacity	2 x 1 TByte
Storage key (boot image)	1 GB USB
RAID Storage Management	Yes (0,1)
Redundant Hot Swap Power Supplies	No
Dimensions (H, W, L)	1.7 x 16.7 x 30.4 in (4.3 x 42.6 x 77.2 cm)
Weight	39 lbs (17.7 kg)
Rack Mountable	Yes
AC Power Required	100-240 VAC, 50-60 Hz, 4.8 Amp (Max)
Auto-Switching Universal	110/220 Volts
Average Power Consumption	295 Watts
Environmental
Operating Temperature	50 to 95 deg F (10 to 35 deg C)
Storage Temperature	-40 to 149 deg F (-40 to 65 deg C)
Humidity	5 to 95% non-condensing
Regulatory
Regulatory	FCC Class A Part 15 / CE Mark
Browser Support
Browser Support	Internet Explorer 7.x, Firefox 3.x
Features	FortiScan Administration Console
System Requirements	1.0 GHz CPU, 1024 MB RAM, 80 GB HDD
Operating System support	Windows 2000 / XP; Windows Server 2000 / 2003
Features	FortiScan Asset Agents
Operating System support	Windows 2000 / XP; Windows Server 2000 / 2003; Red Hat Enterprise WS, ES, AS 3.0, 4.0 and 5.0;; Sun Solaris 8, 9 and 10
Footprint	500 KB

Typical Applications:

Services & Support:

FortiCareSupport Services

•  24 x 7 x 365 FortiCare Web Service [1]
• 8x5 Telephone-based Technical Support [2]
• 1-Year Limited Hardware Warranty
• 90-Day Limited Software Warranty

[1] Annual renewal required to maintain service
[2] 24 x 7 Telephone Technical Support available.

Documentation:

Download the Fortinet FortiScan Datasheet (PDF).