Fortinet FortiGate FG-60F Network Security/Firewall Appliance

Network and File Security
Network and file security services protect against network and file-based threats. With over 18,000 signatures, our industry-leading intrusion prevention system (IPS) uses AI/ML models for deep packet and SSL inspection, detecting and blocking malicious content, and applying virtual patches for newly discovered vulnerabilities. Anti-malware protection defends against both known and unknown file-based threats, combining antivirus and sandboxing for multi-layered security. Application control improves security compliance and provides real-time visibility into applications and usage.

Web/DNS Security
Web and DNS security services protect against DNS-based attacks, malicious URLs (including those in emails), and botnet communications. DNS filtering blocks the full spectrum of DNS-based attacks, while URL filtering uses a database of over 300 million URLs to identify and block malicious links. IP reputation and anti-botnet services guard against botnet activity and DDoS attacks. FortiGuard Labs blocks over 500 million malicious, phishing, and spam URLs weekly, and prevents 32,000 botnet command-and-control attempts every minute, demonstrating the robust protection offered through Fortinet.

SaaS and Data Security
SaaS and data security services cover key security needs for application use and data protection. This includes data loss prevention to ensure visibility, management, and protection (blocking exfiltration) of data in motion across networks, clouds, and users. The inline cloud access security broker service protects data in motion, at rest, and in the cloud, enforcing compliance standards and managing account, user, and cloud app usage. These services also assess infrastructure, validate configurations, and highlight risks and vulnerabilities, including IoT device detection and vulnerability correlation.

Zero-Day Threat Prevention
Zero-day threat prevention is achieved through AI-powered inline malware prevention that analyzes file content to identify and block unknown malware in real time, delivering sub-second protection across all NGFWs. The service integrates the MITRE ATT&CK matrix to speed up investigations. Integrated into FortiGate NGFWs, it provides comprehensive defense by blocking unknown threats, streamlining incident response, and reducing security overhead.

OT Security
With over 1000 virtual patches, 1100+ OT applications, and 3300+ protocol rules, integrated OT security capabilities detect threats targeting OT infrastructure, perform vulnerability correlation, apply virtual patching, and use industry-specific protocol decoders for robust defense of OT environments and devices.