Fortinet FortiGate Rugged 70G-5G
Security Solutions for Mission Critical Industrial Environments

Industrial Security

• Implement industrial-grade security across the industrial networks with industry certified next-generation firewall appliances
• Secure industrial networks with deep packet inspection (DPI) for 80+ OT applications and protocols supporting up to payload level visibility and control
• Apply virtual patching or vulnerability shielding with OT-centric IPS (intrusion prevention system) and minimize risks against security threats that have potential to exploit known or unknown vulnerabilities

Next Generation Firewall (NGFW)

• FortiGuard Labs' suite of AI-powered Security Services—natively integrated with your FortiGate Rugged NGFW—secures web, content, and devices and protects networks from ransomware and sophisticated cyberattacks
• Real-time SSL inspection (including TLS 1.3) provides full visibility into users, devices, and applications across the attack surface
• Fortinet's patented SPU (Security Processing Unit) technology provides industry-leading high-performance protection

Network Segmentation and Microsegmentation

• Network segmentation implements the concept of security zones and conduits and prevent unauthorized access to critical OT assets, the firewall acts as a conduit between different zones and offers secure pathway for communication
• Network segmentation limits the impact of any security incidents that occur within a specific zone and supports North and South network traffic monitoring and threat protection
• Network microsegmentation further segments the security zones based on different security requirements and supports East and West network traffic monitoring and deep packet inspection preventing lateral movement attacks

Secure SD-WAN

• FortiGate enables best-of-breed WAN Edge with integrated SD-WAN, WAN optimization, security, and unified management from a single FortiOS operating system
• FortiGate, built on a patented SD-WAN based ASIC, delivers faster applications identification which avoids delay in accessing applications and accelerates overlay performance regardless locations
• Achieve operational efficiencies at any scale through automation, deep analytics, and self-healing

Universal ZTNA

• Control access to applications no matter where the user is and no matter where the application is hosted for universal application of access policies
• Provide extensive authentications, checks, and enforce policy prior to granting application access—every time
• Agent-based access with FortiClient or agentless access via proxy portal for guest or BYOD

Access Layer Security

• The Fortinet single Security Fabric platform enables FortiGate NGFWs to automatically discover and secure IoT and IIoT devices for faster branch onboarding
• Fully integrated with FortiSwitch ethernet switches and FortiAP access points, FortiGate easily extends security to LAN, WAN, and WLAN at branch offices or remote sites for unified protection and reliable connectivity
• FortiGate and Fortinet products work seamlessly with FortiManager that gives IT/OT teams centralized visibility to simplify management across locations
• FortiLink protocol enables you to converge security and the network access by integrating the FortiSwitch into the FortiGate as a logical extension of the NGFW. These FortiLink enabled ports can be reconfigured as regular ports as needed.

Network and File Security

Services provide protection against network-based and file-based threats. This consists of Intrusion Prevention (IPS) which uses AI/M models to perform deep packet/SSL inspection to detect and stop malicious content, and apply virtual patching when a new vulnerability is discovered. It also includes Anti-Malware for defense against known and unknown file-based threats. Anti-malware services span both antivirus and file sandboxing to provide multilayered protection and are enhanced in real-time with threat intelligence from FortiGuard Labs. Application Control enhances security compliance and offers real-time application visibility.

---

Web / DNS Security

Services provide protection against web-based threats including DNS-based threats, malicious URLs (including even in emails), and botnet/command and control communications. DNS filtering provides full visibility into DNS traffic while blocking high-risk domains, and protects against DNS tunneling, DNS infiltration, C2 server ID and Domain Generation Algorithms (DGA). URL filtering leverages a database of 300M+ URLs to identify and block links to malicious sites and payloads. IP Reputation and anti-botnet services prevent botnet communications, and block DDoS attacks from known sources.

---

SaaS and Data Security

SaaS and Data Security Services address numerous security use cases across application usage as well as overall data security. This service consists of Data Leak Prevention (DLP) which ensures data visibility, management, and protection (including blocking exfiltration) across networks, clouds, and users, while simplifying compliance and privacy implementations. FortiGuard DLP provides advanced data protection by using real-time data classification and pattern matching to identify sensitive information. It offers comprehensive monitoring and control over data movement, ensuring that sensitive data is not inadvertently or maliciously transmitted outside the organization. Additionally, FortiGuard DLP facilitates compliance with various regulatory requirements by automating the enforcement of data security policies and providing detailed reporting and audit trails.

---

Zero-Day Threat Prevention

Zero-day threat prevention entails Fortinet's AI-based inline malware prevention, our most advanced sandbox service, to analyze and block unknown files in real-time, offering subsecond protection against zero-day and sophisticated threats across all NGFWs. The service also has a built-in MITRE ATT&CK® matrix to accelerate investigations. The service focuses on comprehensive defense by blocking unknown threats while streamlining incident response efforts and reducing security overhead.

---

OT Security

The service provides OT detection, OT vulnerability correlation, virtual patching, OT signatures, and industry-specific protocol decoders for overall robust defense of OT environments and devices.