FortiProxy SWG Protection Liznenz

Web and Video Filtering

FortiGuard’s cloud-delivered AI-driven web filtering service provides comprehensive threat protection to address threats including ransomware, credential-theft, phishing, and other web-borne attacks. It uses AI-driven behavior analysis and correlation to block unknown malicious URL’s almost immediately, with near-zero false-negatives.

The Web Filtering service leverages industry-leading threat intelligence from FortiGuard labs. This is based on telemetry gathered from over 10 billion real-world events per day. FortiGuard Web Filtering has a database of hundreds of millions of URLs classified into 90+ categories to meet granular web controls and reporting. Help achieve regulatory compliance and granular video control with industry-first advanced video filtering.

DNS Filtering

Protect against sophisticated DNS-based threats including DNS tunneling, C2 server identification, and domain generation algorithms (DGAs). DNS filtering provides full visibility into DNS traffic while blocking high-risk domains including malicious newly registered domains (NRDs), parked domains, and more.

Granular Application Control

With the constant increase in the usage of social apps, it’s vital for organizations to provide very granular controls. For instance, they may want to allow access but prevent specific actions like posts. FortiProxy supports all major social websites (including Facebook, LinkedIn, Twitter, Instagram), and supports more than 3000 apps. In addition, SaaS Apps can be classified using the cloud database that’s maintained by FortiGuard.

Data Loss Prevention

Protect sensitive data from leaving your network, ensure data privacy and regulatory compliance requirements. Sensitive files can be fingerprinted or watermarked and the outgoing traffic is examined to identify any data leakage.

Intrusion Prevention

FortiProxy uses a combination of signature as well as signature-less engines to prevent intrusions. IPS signatures can be based on exploits, known vulnerabilities or anomaly patterns. Signature-less techniques are used to detect SQL injection, domain generation algorithm attacks, java and flash exploits. FortiGuard Labs generates more than 100 IPS rules every week, blocking more than 4 million network intrusion attempts.

Anti-Botnet

With the addition of the Anti-Botnet service, you can block unauthorized attempts to communicate with compromised remote servers for both receiving malicious commands and extracting information. This prevents botnets and other threats from communicating with command & control servers to exfiltrate data or download malware.

Sandboxing

Complement with a two-step AI based sandboxing approach. Suspicious and at-risk files are subjected to the first stage of analysis that quickly identifies known and emerging malware through FortiSandbox’s ML powered static analysis. Second stage analysis is done in a contained environment to uncover the full attack lifecycle leveraging behavior-based ML with dynamic analysis detection engine more efficient and effective against new zero-day threats

Content Analysis

Enforce acceptable usage by detecting and preventing illicit images and videos with AI-driven content analysis. With the addition of the Content Disarm and Reconstruction service, you can reduce mean time to detection (MTTD) with low latency content sanitization. A broad range of file types are supported beyond traditional signature-based and reputationbased measures.

WAN Optimization and Advanced Caching

Today at many locations, bandwidth is a bottleneck, and to keep operation costs low, it may be prohibitive to provide additional bandwidth. In these environments, FortiProxy is also able to greatly optimize and accelerate the network by enabling caching of content and by enabling WAN Optimization features.