安全编排、自动化和响应 (SOAR)
FortiSOAR 统一并优化 SOC 活动，高效防御各类攻击
概述
FortiSOAR 搭载集中事件管理和海量分析活动自动化优势，助力 IT/OT 安全团队高效抵御各类攻击，有效开展威胁调查和事件响应。将 FortiSOAR 部署为运营中心，有利于标准化并执行相关工作流，推动最佳实践落地，支持分析师专注关键任务，保护组织安全。
为何选择 FortiSOAR？
FortiSOAR 可大幅缓解安全团队工作负担，无需同时管理大量安全工具，无需调查大量告警，无需进行大量手动和重复流程，加快响应速度。部署 FortiSOAR，您可实现 IT/OT 安全操作和任何关键企业功能的集中化、标准化和自动化。FortiSOAR 凭借广泛集成、海量丰富的应用场景功能、数百个预构建工作流和简单的 Playbook 创建优势，支持您量身定制一流运维流程，满足各类安全运营需求。
下载解决方案简报
Fortinet Advisor：全过程生成式 AI 支持
Fortinet Advisor 基于自然语言和生成式人工智能（GenAI）技术指导、简化并实现安全分析活动自动化。无缝集成至 FortiSOAR 分析师操作经验，为威胁调查、响应和 Playbook 创建等任务提供价值信息，加快任务处理速度。Fortinet Advisor 和 FortiSOAR 基于机器学习（ML）的推荐引擎，助力安全团队快速做出明智决策，高效应对各类威胁，节省复杂任务处理时间。
阅读 Fortinet Advisor 博客
企业和安全托管服务提供商（MSSP）的理想之选
FortiSOAR 支持丰富功能、灵活部署和弹性许可，对企业和安全托管服务提供商（MSSP）都极具吸引力。企业可灵活选择 SaaS、本地、公有云托管或可信安全托管服务提供商（MSSP）合作伙伴不同部署模式，为您提供无差别强大功能。FortiSOAR 分层、分布式、多租户和共享租户以及本地代理服务模式，全力支持全球企业及安全托管服务提供商（MSSP）所需的各种运营模式。
下载 FortiSOAR MSSP 解决方案简报功能与优势
全面的解决方案
500 + 产品集成、800 个 Playbook、丰富的强大功能和应用场景解决方案，高效支持 SOC/NOC/OT 运营效率
AI 驱动的安全运营
Fortinet Advisor 和推荐引擎指导并实现分析师活动、Playbook 创建等操作自动化
内置威胁情报
内置 FortiGuard Labs 威胁情报和公共资源，为调查和赋权活动提供价值信息
内容中心和社区
众多连接器、Playbook、解决方案包、最佳实践视频和社区，共同助力用户获得持续优势
创建无代码/低代码 Playbook
专利设计经验支持直观拖放和快速开发模式，快速创建 Playbook
灵活的部署选项
用户可灵活选择 SaaS、本地、公共云托管或可信安全托管服务提供商（MSSP）合作伙伴不同部署模式，为您提供无差别强大功能。
FortiSOAR 应用场景
安全事件管理
实现告警调查与响应的集中化、标准化和自动化。运用全套作战室工具，快速应对各类攻击。
NOC 响应和优化
跨多供应商安全解决方案触发自动修复和防御措施。自动执行任意 NOC 任务。
OT 安全自动化
通过资产和漏洞管理、威胁响应 Playbook 以及全面的 OT 生态系统集成优势，提高 OT 安全性。
资产与漏洞管理
跟踪 IT/OT 资产，评估安全风险，并实现变更管理工作流自动化。跟踪 CSV，基于风险等级进行优先级排序，并自动进行威胁修复。
员工与运营管理
自动分配任务，管理队列和计划。根据 SLA 协议跟踪并报告指标和团队绩效。
提升企业整体运营效率
通过灵活简单的自定义操作和 Playbook 创建，为任意应用场景提供最佳实践标准，并提高运营效率。
企业分析师权威认可
KuppingerCole SOAR 领导力指南针报告
Fortinet SecOps Fabric ESG 经济验证报告
Fortinet 荣获 2023 年 KuppingerCole SOAR 领导力指南针领导者殊荣
该报告对 14 家供应商进行了详细分析，FortiSOAR 凭借遥遥领先的产品、创新和市场占有率表现获评综合领军产品。
“在自动化和最大限度利用现有工具方面，FortiSOAR 无愧最佳产品。”
Fortinet 安全运营解决方案量化优势
随着企业的不断发展、新技术的不断涌现以及网络犯罪分子持续引入更多复杂攻击，安全领导者及其团队在保护组织网络方面面临重重挑战。企业战略组（Enterprise Strategy Group）研究团队在最新发布的报告中，详细介绍了企业部署 Fortinet 安全运营解决方案后获得的诸多优势，包括提高运营效率和构建更有效的风险管理体系。
下载报告 »
案例研究
众多知名工业企业、政府机构和安全服务提供商均部署 FortiSOAR 自动化事件管理解决方案，并将其作为安全运营的强大支持。
300 多家企业、政府机构和 MSSP 客户
FortiSOAR 支持 SaaS 部署，或以虚拟机 (VM) 、容器模式部署在本地、私有云和公有云中，或作为 FortiCloud 托管私有解决方案部署。无论您正寻找任务关键型 SOC 平台，还是随运营持续扩展的一站式 SaaS 解决方案，FortiSOAR 都是助您优化安全运营的正确选择。
阅读安全网络防御案例研究
资源
技术参数表
分析报告
电子书
解决方案简报
Improve Security Operations Across the Security Fabric »
The Security Operations Center (SOC) Automation Model is designed to help security teams identify appropriate Fortinet security products for their SOC, based on their existing investment in people and processes.
SOAR Through Implementation »
Security operations teams face the challenge of maintaining the longevity of their security infrastructures against the evolving threat landscape and operational complexities.
Optimize MSSP Operations with FortiSOAR »
Given that speed matters more than ever as malicious actors advance their efforts, organizations are also demanding rapid and in-depth detection and analysis capabilities from the MSSP services they use.
Optimize Security Operations with FortiSOAR »
FortiSOAR enables organizations to centralize, standardize, and automate IT/OT security operations and critical enterprise functions.
FortiSOAR: Optimize OT Security Operations »
Whether you’re extending your SOC to protect OT or growing the cybersecurity capabilities of your OT control center, FortiSOAR is key to your OT security posture, threat responsiveness, and SecOps efficiency.
生态系统
FortiSOAR 无缝集成 500 多种多供应商产品，助您轻松新建连接器。访问 FortiSOAR Content Hub（内容中心），查看完整列表并了解更多信息。
Amazon Web Services
AWS services are trusted by more than a million active customers around the world – including the fastest growing startups, largest enterprises, and leading government agencies – to power their infrastructures, make them more agile, and lower costs.
Learn more on the Fortinet-AWS alliance
Anomali
Anomali delivers high-fidelity threat intelligence from diverse sources to Fortinet, providing the contextualized threat intelligence and triggers necessary to prioritize and initiate an incident response, and when paired with event data, allowing your SOC analysts to focus on the real threats, rather than false positives.
Armis, Inc.
Armis the leading unified asset visibility and security platform designed to address the new threat landscape that connected devices create. Our real-time and continuous protection sees the full context of all managed, unmanaged, and IoT devices, including medical devices, operational technology, and industrial control systems.
- Blog - FortiGate Integration
- Blog - Armis and Fortinet Partnership
- Armis FortiSOAR
- Partner Interview Video
- Solution Brief - Security
- Solution Brief - Healthcare
Attivo Networks
Attivo Networks is an award-winning innovator in cyber security defense. As the leader in deception-based threat detection technology, Attivo empowers continuous threat management using dynamic deceptions for the real-time detection, analysis, and accelerated response to cyber incidents.
Axonius
Axonius is the cybersecurity asset management platform that gives organizations a comprehensive asset inventory, uncovers security coverage gaps, and automatically enforces security policies. Together with Fortinet, customers can analyze all assets on their network and automatically enforce policies when assets deviate from policies.
Braintrace
Braintrace, a leader in offering next-generation cybersecurity products and services, understands that data security and privacy are paramount. To this end, Braintrace focuses its efforts on detecting threats inside encrypted traffic. Requiring only a minimal set of datapoints, DragonflyNTA integrates with Fortinet products to identify network threats with real-time analytics.
Cisco
Cisco is the worldwide leader in IT that helps companies seize the opportunities of tomorrow by proving that amazing things can happen when you connect the previously unconnected.
Cloud Range
Cloud Range is the industry’s leading cyber preparedness simulation platform that reduces exposure to cyber risk across the organization. Fortinet and Cloud Range have partnered to provide cybersecurity teams with full-service, live-fire simulation exercises designed explicitly for OT/ICS, IT, IoT, and converged environments.
CrowdStrike, Inc.
CrowdStrike has redefined security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk — endpoints and cloud workloads, identity, and data.
CyberArk
CyberArk is the global leader in privileged account security, a critical layer of IT security to protect data, infrastructure and assets across the enterprise, in the cloud and throughout the DevOps pipeline. CyberArk delivers the industry’s most complete solution to reduce risk created by privileged credentials and secrets.
培训和认证
Fortinet Certified Professional — 安全运营
In this course, you will learn about FortiSOAR architecture, and how to deploy, configure, manage, operate, and monitor FortiSOAR in a SoC environment.
其他培训
In this course, you will learn how to use FortiSOAR to design simple to complex playbooks, examine the role of FortiSOAR in mitigating malicious indicators, and learn how to create interactive dashboards to display relevant information about alerts and incidents. You will also learn how to integrate FortiSOAR with FortiGate, FortiSIEM, and FortiMail.
