FortiSIEM представляет собой единое масштабируемое решение, которое объединяет функции обеспечения доступности данных, корреляции, автоматического реагирования и исправления. Она упрощает управление операциями сети и безопасности, что позволяет эффективно высвободить ресурсы, улучшить систему обнаружения нарушений и даже предотвратить нарушения. Более того архитектура позволяет унифицировать сбор сведений и аналитические данные от различных источников информации, включая журналы, показатели производительности, предупреждения системы безопасности и изменения конфигурации. Решение FortiSIEM сводит воедино аналитические данные, традиционно отслеживаемые в отдельных хранилищах центра контроля информационной безопасности (SOC) и сетевого операционного центра (NOC) для получения более целостного представления о системе безопасности и доступности бизнеса. Кроме того, функция анализа поведения пользователей и организаций (UEBA) решения FortiSIEM использует машинное обучение и методы статистических вероятностей для формирования базы обычного поведения и применяет действенную оценку в реальном времени при аномальном поведении пользователей в отношении важнейших бизнес-данных. Объединяя телеметрические данные, получаемые от датчиков конечных точек, потоков данных сетевых устройств, журналов серверов и приложений, а также облачных API, решение FortiSIEM позволяет создавать комплексные профили пользователей, одноранговых групп, конечных точек, приложений, файлов и сетей. Функция обнаружения отклонений от нормального поведения (UEBA) решения FortiSIEM представляет собой экономичный, но высоконадежный способ получения сведений о межконцевой активности от конечных точек до локальных серверов, а также от сетевой активности до облачных приложений.
Примечание
FortiSIEM End-Point Device Subscription License 1 Year Per End-Point Subscription License for minimum 5000 End-Points, 2 EPS/End-Point. Does not include Maintenance & Support
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 300 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiSIEM End-Point Device Subscription License 1 Year Per End-Point Subscription License for minimum 1000 End-Points, 2 EPS/End-Point. Does not include Maintenance & Support
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 200 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiSIEM All-In-One Subscription License 1 Year Per Device Subscription License that manages minimum 500 devices, 10 EPS/Device. Does not include Maintenance & Support
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 3,000 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiCare Support for Hardware based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (More than 100000 points) for FortiSIEM hardware appliance. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 20000 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiSIEM-UEBA Subscription License 1 Year Per Advanced Agent - UEBA Telemetry Subscription License, a minimum of 500 Agents. Does not include Maintenance & Support. Not supported on F Series hardware. Powered by FortiInsight AI
Примечание
FortiSIEM End-Point Device Subscription License 1 Year Per End-Point Subscription License for minimum 50 End-Points, 2 EPS/End-Point. Does not include Maintenance & Support
Примечание
FortiSIEM End-Point Device Subscription License 1 Year Per End-Point Subscription License for minimum 150 End-Points, 2 EPS/End-Point. Does not include Maintenance & Support
Примечание
FortiSIEM End-Point Device Subscription License 1 Year Per End-Point Subscription License for minimum 300 End-Points, 2 EPS/End-Point. Does not include Maintenance & Support
Примечание
FortiSIEM Subscription License for Advanced Agents 1 Year Per Agent Subscription License - Log & FIM - minimum 200 Advanced Agents.Does not include Maintenance & Support.
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 1000 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiSIEM Subscription License for Advanced Agents 1 Year Per Agent Subscription License - Log & FIM - minimum 4000 Advanced Agents.Does not include Maintenance & Support.
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 400 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 10000 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiSIEM All-In-One Subscription License 1 Year Per Device Subscription License that manages minimum 50 devices, 10 EPS/Device. Does not include Maintenance & Support
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 4,000 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiCare Support for Hardware based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 50000 points) for FortiSIEM hardware appliance. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 500 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiSIEM All-In-One Subscription License 1 Year Per Device Subscription License that manages minimum 5000 devices, 10 EPS/Device. Does not include Maintenance & Support
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 50000 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiSIEM All-In-One Subscription License 1 Year Per Device Subscription License that manages minimum 300 devices, 10 EPS/Device. Does not include Maintenance & Support
Примечание
FortiSIEM End-Point Device Subscription License 1 Year Per End-Point Subscription License for minimum 2000 End-Points, 2 EPS/End-Point. Does not include Maintenance & Support
Примечание
FortiSIEM All-In-One Subscription License 1 Year Per Device Subscription License that manages minimum 1000 devices, 10 EPS/Device. Does not include Maintenance & Support
Примечание
FortiSIEM End-Point Device Subscription License 1 Year Per End-Point Subscription License for minimum 4000 End-Points, 2 EPS/End-Point. Does not include Maintenance & Support
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (More than 100000 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.
Примечание
FortiCare Support for Software based FortiSIEM deployments 1 Year 24x7 FortiCare Contract (1 - 1500 points) for FortiSIEM Software deployments. 1 Device or 2 End points or 3 Advanced Agents – Log & FIM or 10 Advanced Agents - UEBA Telemetry equals 1 point.