NSE 6 FortiNAC 9.1
新的 NSE 6 FortiNAC 9.1 课程现已推出。
安全网络访问控制
FortiNAC 可发现您网络中连接的所有设备，控制其对网络资源的访问，并自动响应安全漏洞
免费产品演示
概述
FortiNAC 是一种零信任访问解决方案，可监督和保护连接到企业网络的所有数字资产，包括从 IT、IoT、OT/ICS 到 IoMT 等各种设备。FortiNAC 通过网络访问控制增强 Fortinet Security Fabric，提供对连接到网络的所有设备的可见性、控制和自动响应。FortiNAC 可防范物联网威胁，将控制扩展到第三方网络设备，并协调对各种网络事件的自动响应。
持续创新和工作流程自动化
20 多年来，FortiNAC 一直在努力保护不断扩张的网络和数字资产，为组织的数字化转型保驾护航。随着技术不断进步，创新成果不断涌现，FortiNAC 扩大了保护范围，竭力保护如今不断增大的动态攻击表面。它通过实时可见性、简化执行、动态策略调整以及对遭入侵的设备或异常活动的自动响应来实现保护。
多供应商和合作伙伴生态系统
FortiNAC 集成了 FortiGate 及其他 Fortinet Security Fabric 安全架构解决方案，可更全面、更准确地了解连接的设备和用户。凭借真正的多供应商环境，FortiNAC 功能更为强大，可以利用现有基础设施并协调网络分段和自动响应。
功能与优点
FortiNAC 具有一系列强大的功能，使网络访问管理更加轻松快捷。从先进的设备分析到自动化的工作流程，FortiNAC 方方面面都经过精心设计，尽可能提供最佳用户体验。
无代理扫描
检测和识别连接到网络的无外设设备
21 种分析方法
利用 21 种不同方式来确定设备身份
Fortinet Security Fabric 安全架构集成
利用 Security Fabric 提高可见性，改善分段执行和政策调整
微分段
严密限制对已识别设备的网络资产的访问
广泛的多供应商支持
配置 150 多家供应商的网络设备（交换机、AP、防火墙、客户端）并与之交互
可扩展性
支持有效扩展至多站点，支持数百万台设备
FortiNAC 使用案例
库存管理
提供整合的可见性、分类和安全状态。还可用于监控和管理所有数字资产。
微分段
设置基于规则的安全策略，对网络进行动态分段和微分段。
设备载入和用户引导
利用访客和承包商管理功能，载入和管理自带设备。FortiNAC 可以查看和控制所有设备。
自动化流程
识别和映射安全事件，推送通知。将这些通知发送给管理员，然后执行操作，动态缓解威胁。
SIEM 协调
自动控制网络访问，并通过端点可见性和实时行为，提供详细工作流程作为响应。
对设备零信任
为已连接设备启用对网络资源的最低访问权限。同时还执行重新验证和持续监控。
案例研究
Electricity Providers
Broad Fortinet Security Fabric Implementation Secures Electricity Provider’s Critical Infrastructure
Mount Desert Island Hospital
Network Reliability Enhances Patient Health: How Fortinet Secures a Critical Access Hospital
CB&S Bank
Fortinet Simplifies Networking and Security for a Community Bank with a Penchant for M&A
Cirion Technologies
Digital Technology and Infrastructure Provider Optimizes Its Security Service in Latin America with Fortinet’s Advanced Support
Gartner Peer 评论
Gartner 同行评论是一个用户分享平台，分享他们对各种解决方案的体验和见解。其 NAC 同行评论旨在帮助 IT 专业人员和决策者根据真实用户的真实反馈评估和比较不同的 NAC 解决方案。
型号与规格
FortiNAC 产品系列包括硬件设备、虚拟机和许可。每个 FortiNAC 部署都需要一个控件和应用程序服务器。如果您的部署规模超过单个服务器可以支持的范围，则可以堆叠多个服务器来增加容量。FortiNAC 不限制可支持的并行端口数量。
View by:
功能 |
Control and Application Server |
容量 |
Each server manages up to 2,000 ports in the network |
功能 |
Control and Application Server |
容量 |
Each server manages up to 15,000 ports in the network |
功能 |
Control and Application Server |
容量 |
Each server manages up to 25,000 ports in the network |
功能 |
Management Server |
容量 |
Unlimited |
FNC-CAX-VM
功能 |
FortiNAC Control and Application next-gen VM Server (VMware/Hyper-V/AWS/Azure/KVM) |
FNC-MX-VM
功能 |
FortiNAC Manager next-gen VM Server (VMware or Hyper-V) |
功能 |
FortiNAC Control and Application VM Server (VMware/ Hyper-V/AWS/Azure/KVM) |
功能 |
FortiNAC Manager VM Server (VMware or Hyper-V) |
| FortiNAC 基本许可 | ||
|---|---|---|
| 功能 | 端点可见性和自动配置 | |
| 永久许可（每个许可的并行端点设备） | ||
| 100 | LIC-FNAC-BASE-100 | |
| 1,000 | LIC-FNAC-BASE-1K | |
| 10,000 | LIC-FNAC-BASE-10K | |
| 50,000 | LIC-FNAC-BASE-50K | |
| 订阅许可 | ||
| 25 | FC1-10-FNAC1-215-01-DD | |
| 500 | FC2-10-FNAC1-215-01-DD | |
| 10,000 | FC3-10-FNAC1-215-01-DD | |
| FortiNAC Plus 许可 | ||
|---|---|---|
| 功能 | 可见性和控制 | |
| 永久许可（每个许可的并行端点设备） | ||
| 100 | LIC-FNAC-PLUS-100 | |
| 1,000 | LIC-FNAC-PLUS-1K | |
| 10,000 | LIC-FNAC-PLUS-10K | |
| 50,000 | LIC-FNAC-PLUS-50K | |
| 订阅许可 | ||
| 25 | FC1-10-FNAC1-213-01-DD | |
| 500 | FC2-10-FNAC1-213-01-DD | |
| 10,000 | FC3-10-FNAC1-213-01-DD | |
| FortiNAC Pro 许可 | ||
|---|---|---|
| 功能 | 可见性、控制和响应 | |
| 永久许可（每个许可的并行端点设备） | ||
| 100 | LIC-FNAC-PRO-100 | |
| 1,000 | LIC-FNAC-PRO-1K | |
| 10,000 | LIC-FNAC-PRO-10K | |
| 50,000 | LIC-FNAC-PRO-50K | |
| Subscription Licenses | ||
| 25 | FC1-10-FNAC1-209-01-DD | |
| 500 | FC2-10-FNAC1-209-01-DD | |
| 10,000 | FC3-10-FNAC1-209-01-DD | |
FortiCare 支持和专业服务
Fortinet 致力于帮助客户取得成功，每年 FortiCare 服务都会帮助成千上万的组织充分利用其对 Fortinet 产品和服务的投资。为此，FortiCare 采用生命周期方法，并提供独特的服务来帮助客户成功。
FortiCare for FortiNAC
高级技术支持、固件更新、硬件更换、培训和资源、SLA
FortiNAC 专业服务
架构和设计、实施、与其他 Fortinet 产品集成、自定义和优化
FortiNAC QuickStart 服务
快速部署、最佳实践、知识转移、降低风险
资源
解决方案简介
技术参数表
电子书
白皮书
分析报告
FortiNAC integrations into the Security Fabric »
FortiNAC has many integrations across the Security Fabric to both share information and direct enforcement actions.
FortiNAC: Role-based Dynamic Network Access »
With the cost of an endpoint-based breach reaching into the millions of dollars per event, it is critical for security teams to understand and address network access control (NAC) vulnerabilities that can’t be secured by outdated solutions.
Helping to Ensure OT Security Using FortiNAC »
The digital transformation of OT has introduced many new IP devices to those networks. Learn how FortiNAC provides visibility and control in OT environments.
FortiNAC Provides Evolved Network Access Control for Healthcare »
The Internet of Medical Things (IoMT) are providing great advancements in health services, but require special attention to keep networks safe from cyber attack.
Securing Diverse Network Environments for K-12 School Districts »
In the last two years there were 386 cyber incidents in U.S. public schools. Securing today's primary and secondary school networks require containment of personal data.
Network Access Control in ICS/OT Using FortiNAC »
Secure IT/OT Convergence with the Fortinet Network Access Control Solution
Understanding 802.1X and NAC: 3 Problems to Avoid »
How to Successfully Design a Network Access Solution
The Evolution of Network Access Control (NAC) »
How IoT and BYOD Devices Have Changed NAC Solutions
生态系统
Arista
Arista Networks was founded to pioneer and deliver software-driven cloud networking solutions for large data center storage and computing environments.
Armis, Inc.
Armis the leading unified asset visibility and security platform designed to address the new threat landscape that connected devices create. Our real-time and continuous protection sees the full context of all managed, unmanaged, and IoT devices, including medical devices, operational technology, and industrial control systems.
- Blog - FortiGate Integration
- Blog - Armis and Fortinet Partnership
- Armis FortiSOAR
- Partner Interview Video
- Solution Brief - Security
- Solution Brief - Healthcare
Cisco
Cisco is the worldwide leader in IT that helps companies seize the opportunities of tomorrow by proving that amazing things can happen when you connect the previously unconnected.
CyberMDX
Coupling CyberMDX detection and identification capabilities with Fortinet, healthcare organizations are equipped with unmatched IoMT & IoT asset visibility, classification and attack-prevention enforcement tools.
CyGlass, Inc
CyGlass is an AI based SaaS security platform that uses network data to uncover, pinpoint, and respond to advanced cyber threats that have evaded traditional security controls.
Cynerio
The Cynerio-Fortinet joint solution equips healthcare IT security teams with comprehensive security and remediation policies that ensure uninterrupted clinical services. Armed with detailed insights into medical device behavior, impact, and criticality, hospitals can enforce customized cybersecurity policy using ACLs, VLANs, NAC and firewalls.
Extreme Networks
Extreme Networks, Inc. delivers software-driven networking solutions that help IT departments everywhere deliver the ultimate business outcome: stronger connections with customers, partners, and employees.
Google Cloud Platform
Google Cloud Platform is a secure, dedicated public cloud computing service operated by Google which provides a range of infrastructure and application services that enable deployments in the cloud. Fortinet provides critical firewalling, advanced security and scalable BYOL protection for elastic compute, container, and machine-learning workloads in Google’s innovative public cloud.
Hewlett Packard Enterprise
Hewlett Packard Enterprise is an industry-leading technology company that enables customers to go further, faster. With the industry’s most comprehensive portfolio, HPE's technology and services help customers around the world make IT more efficient, more productive, and more secure.
- Fortinet-HPE Alliance Brief
- HPE Aruba Solution Brief
- HPE Aruba Technical Guide
- Fortinet and HPE-GreenLake Solution Brief
- Fortinet and HPE Edgeline Converged Edge Systems and OT Link Solution Brief
- Fortinet and HPE IT OT Convergence Security Solution White Paper
- Fortinet and HPE Proliant for Microsoft Azure Solution Brief
- Fortinet and HPE Proliant for Microsoft Azure White Paper
- Fortinet-HPE SDN Solution Brief
- Fortinet, HPE, and Pensando Innovative Edge-to-Core Solution Brief
- Fortinet, HPE, and Scality Distributed Object Storage Environment Solution Brief
- Fortinet and HPE Zerto Ransomware Protection Solution Brief
Intel
Intel invents at the boundaries of technology to make amazing experiences possible for business and society, and for every person on Earth. To learn more about Intel and our technologies, please visit: www.intel.com
培训 & 认证
NSE 6
In this course, you will learn how to leverage the powerful and diverse capabilities of FortiNAC, using best practices for achieving visibility, control, and response. These fundamentals will provide you with a solid understanding of how to implement network visibility and security automation.
NSE 7
Learn how to design, deploy, administrate, and monitor FortiGate, FortiNAC, FortiAnalyzer, and FortiSIEM devices to secure OT infrastructures. These skills will provide you with a solid understanding of how to design, implement, and operate an OT security solution based on Fortinet products.
