AVFirewalls.com is a Fortinet Gold Partner

AVFirewalls.com is a Fortinet Certified Network Security Professional



Free iPad 2 with select purchases!

Fortinet - Multi-threat Security Systems For Real Time Network Protection, Network Virus Protection, VPN, Intrusion Detection & Prevention

Fortinet FortiScan Virtual Appliances

Automated Vulnerability and Compliance Management (VCM) for virtual machines

 

Fortinet Products
FortiScan Virtual Appliances
FortiScan-VM with 10 embedded assets #FSC-VM-Base
Our Price: $1,000.00
FortiScan-VM 100 Asset Add-on #FSC-VM-100-UG
Our Price: $1,000.00
FortiScan-VM 1,000 Asset Add-on #FSC-VM-1000-UG
Our Price: $6,000.00
FortiScan-VM 5,000 Asset Add-on #FSC-VM-5000-UG
Our Price: $20,000.00

Click here to jump to more pricing!

Live Demo! Click here to loadOverview:

FortiScan-VM, is a complete vulnerability and compliance management solution in the form of a stackable Virtual Appliance. As an enterprise-grade, carrier-scale software solution that runs on VMware vSphere (ESX and ESXi) , CITRIX™ Xenserver, and Open Source XenServer Hypervisors, FortiScan-VM integrates endpoint and server vulnerability management, industry and federal compliance, patch management, remediation, auditing and reporting capabilities into a single, unified offering.

FortiScan Virtual Appliance Features & Benefits:

  • Flexible hardware deployment with all the benefits of full-feature vulnerability and compliance management lifecycle
  • Support for both agentless and agent-based operations
  • Ability to scale as your organization grows and use available resources in virtual machines
  • Capability to support cloud deployments
  • Customizable with granular policy definitions such as application control
  • Supported by the world-class FortiGuard Distribution Network’s threat and research services

Flexible Vulnerability and Compliance Management

As organizations grow in size and complexity, the need for a flexible vulnerability and compliance management becomes omnipresent. Whether the driving factor is IT governance or meeting regulatory compliance, solutions must be easy to deploy and manage in order to improve productivity. The FortiScan-VM offers a soft appliance which runs on VMware vSphere Hypervisor™ (ESX and ESXi), CITRIX™ Xen Hypervisor and XenServer. It scales as your organizations's assets grow in size. It is suited for organization of all sizes since the architecture supports stacking asset groups and managing them through Administrative Domains (ADOM). The flexible architecture and service-oriented design of

Build Cloud-based Compliance Solutions

FortiScan-VM™ empowers you to add vulnerability and compliance solutions to any size organization, from small retail to large enterprise. It is an enterprisegrade, carrier-scale solution that integrates endpoint vulnerability management, industry and federal compliance, patch management, remediation, auditing and reporting into a single, unified appliance for immediate results. It enables organizations to close IT compliance gaps, and implement continuous monitoring in order to audit, evaluate, and comply with internal, industry, and regulatory policies for IT controls and security at the OS and application level. Organizations realize quick time-to-value with easy to install, intuitive and standard compliance policies (NIST SCAP, FDCC, PCI-DSS, SOX, GLBA, HIPAA) out-of- the-box with regular updates from the FortiGuard. Furthermore, customized reporting provides a snapshot of your assets' state compliance measurement.

Full-feature VCM with low Total Cost of Ownership (TCO)

The FortiScan VM enables you to apply proactive vulnerability scanning and risk management to avoid the cost of non-compliance and productivity loss. The FortiScan simplifies the process with regular policy updates through FortiGuard Threat Research and Response for current patches and industry leading remediation advice that strengthens the integrity and security of operating systems—mitigating threats and managing vulnerabilities to prevent costly

Features & Benefits:

Features: Benefits:
Vulnerability Management Identifies security vulnerabilities and compliance exposures through deep inspection with clientresident asset agents – transparent to end users.
Agent-less Vulnerability Assessment Asset prioritization and profile-based scanning to automatically discover inventory and assess security posture of the OS on networked devices, including mail servers, FTP servers or other UNIX or Windows hosts. Trend and remediation history is also available as part of the reporting.
IS Auditing Monitors across heterogeneous systems and provides industry-standard benchmarks for IS compliance audits for operating systems; Select from the list of audit benchmarks or create custom policies.
Patch Management and Remediation Delivers patch management with ready-to-deploy remediation and enforcement actions; remediation capability goes beyond traditional patch management, allowing network managers to change on configurations and potentially mitigate weak settings, including disabling an application or denying a network request.
Reporting and Compliance Compliance for regulatory mandates with 360-degree reporting and analysis; provides industry, regulatory and best practices for NIST SCAP, FDCC, PCI/DSS, SOX, GBLA, HIPAA, ISO 17799, FISMA, and more. Pre-defined reports and views for compliance are also provided. FortiScan is OVAL compliant.
Integrated Asset Management Fully integrated Asset management function enables users to run agent-less and agent-based OVAL scans directly on asset groups configured in the product.
Smart Automation Reduced errors, repeatable processes, and predictable results delivered with an extensive library of templates that enable IT staff to leverage industry standard best practices that produce measurable results.

Keeping Up With Compliance - PCI DSS,SOX, GLBA, HIPAA

  • Unified platform for auditing, policy and vulnerability management
  • Industry and federal standards-based
  • Easy to deploy and manage
  • Automated compliance management
  • Both agent-less and agentbased
  • Timely updates from FortiGuard™

Key Benefits

  • Identifies security vulnerabilities and finds compliance exposures
  • Easy grouping and prioritization of assets through ADOMs
  • Delivers patch management with ready-to-deploy remediation and enforcement actions
  • Aids regulatory mandates with compliance reports
  • Soft appliance creates maximum flexibility for cloud deployments

Technical Specifications:

  FortiScan Virtual Appliance
Cpacity Specifications
Maximum Licensed Assets 20,000 (present ceiling which will increase in the future)
Administrative Domains 200
Administrators 200
Cpacity Specifications
Hypervisors Supported VMware ESX/ESXi 4.0/4.1, Citrix Xen, OpenSource Xen
Virtual Machine Form Factor Open Virtualization Format (OVF)
Virtual NICs Required Open Virtualization Format (OVF)
Virtual Machine Storage Required (Minimum) Default 30 GB, recommended to increase to 1 TB for acceptable or 2 TB for optimal performance
Virtual Machine Memory Required (Minimum) 4 GB to accommodate up to 2000 assets
Memory Size Recommendation
Less than 2000 assets 4 GB
2000 to 10,000 assets 8 GB
10,000 to 20,000 assets 16 GB
Virtual CPU Specifications 2 (default) for up to 10000 assets, 4 for up to 20000 assets and 8 for more than 20000 assets

Asset Platform Support
FortiScan agents support the following asset platforms:

  • Windows 2000
  • Windows XP (32-bit or 64-bit)
  • Windows Vista (32-bit or 64-bit Enterprise or Business)
  • Windows 7 (32-bit or 64-bit)
  • Windows Server 2003 (32-bit or 64-bit)
  • Windows Server 2008 (32-bit or 64-bit)
  • Windows Server 2008 Release 2 (64-bit)
  • Red Hat 9
  • Red Hat Enterprise Server 3, 4
  • Red Hat Enterprise Server 5 (32-bit or 64-bit)
  • Red Hat Enterprise Server 6 (32-bit or 64-bit)
  • Fedora 13 (32-bit or 64-bit)
  • Fedora 14 (32-bit or 64-bit)
  • CentOS 3, 4, 5
  • Solaris Sparc 9, 10
  • Solaris 10 (x86 32-bit or 64-bit)

FortiScan provides the following features:

FortiScan Security Features
Scan Engines
  • Network discovery, asset prioritization and profilebased scanning
  • Innovative, non-intrusive scan engine with extensive network throttling capabilities
  • Complete asset inventory with accurate OS detection
  • Both agent-less and agent based scanning are available from the same product

Compliance Management

  • Identifies security vulnerabilities and finds compliance exposures on hosts, servers and throughout the network.
  • Industry, regulatory and best practices, including templates for ISO 17799, SOX, HIPAA, GLBA, NIST, SCAP, and FISMA.
  • All security content complies with the OVAL 5.6 standard
  • Performs IS compliance audits
  • Common Vulnerability Enumeration (CVE) Search

Remediation/Patch Management

  • Delivers patch management with ready-to-deploy remediation and enforcement actions
  • Allows network managers to change configurations and mitigate weak settings.
  • Audits and remediates across heterogeneous systems for IS compliance
  • Extensive libraries of templates that enable IT staff to leverage industry best practices to produce measurable results.
Flexible Deployment
  • Runs on Windows 2000, XP, Vista, Windows 7, server 2003 and 2008, RedHat 9, 3, 4, 5, CentOS 5, Solaris Sparc 9, 10.
  • Agent-based or network-based (agent-less) scan
  • Role-based security delegation
Standards Based
  • Compliant with SOX, HIPAA, OVAL, XCCDF, CPE, CCE, CVE, CVSS
  • Supports the latest SCAP version
  • Comes with a comprehensive set of Compliance Benchmarks, Vulnerability database, Remediation templates and Patch policies.

Reporting

  • Automated, list of pre-defined reports include: Executive Security Posture Report, LOB Manager Security Posture Report, Sys admin Security Posture Report, Vulnerability Assessment etc.
  • Reports can be executed real-time, scheduled, or sent over email
  • 360-degree Reporting , Analysis and Views
  • Trending reports, showing a host's remediation history, or how hosts vulnerability changes over time
Interoperability
  • Easy integration via SNMP, SMTP, Repository Database
  • Compliant with OVAL, XCCDF, CPE, CCE, CVE, CVSS
Product / Integration
  • Secure access to the Repository Schema
  • SNMP support
  • Support for file (results) uploads via FTP, SFTP, and SCP
  • E-mail Alerts
  • Integrate with FortiGuard IPS services

Research

  • Backed by an unrivalled vulnerability research team
  • Identifies known, published zero-day and unknown vulnerabilities
  • Automated updates for latest vulnerability checks and information

Services & Support:

FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

PDF File
Download the Fortinet FortiScan Virtual Appliances Datasheet (PDF).

 

Fortinet Products
FortiScan Virtual Appliances
FortiScan-VM with 10 embedded assets #FSC-VM-Base
Our Price: $1,000.00
FortiScan-VM 100 Asset Add-on #FSC-VM-100-UG
Our Price: $1,000.00
FortiScan-VM 1,000 Asset Add-on #FSC-VM-1000-UG
Our Price: $6,000.00
FortiScan-VM 5,000 Asset Add-on #FSC-VM-5000-UG
Our Price: $20,000.00