Fortinet FortiGate-60E FortiGuard IPS Service Instruction Manual

1. FortiGuard IPS 서비스 소개

This document serves as an instruction manual for the Fortinet FortiGuard IPS (Intrusion Prevention System) Subscription service for the FortiGate-60E model. The FortiGuard IPS service enhances the security capabilities of your FortiGate firewall by providing advanced threat protection against network intrusions and exploits.

Intrusion Prevention Systems (IPS) technology is a critical component of modern network security defenses. Fortinet has developed its IPS technology over many years, integrating it seamlessly with FortiGate firewalls to deliver high-performance security. FortiGate IPS offers innovative approaches to threat detection and prevention, distinguishing it from traditional standalone IPS products.

2. Service Overview 및 혜택

The FortiGuard IPS service provides real-time threat intelligence and protection to safeguard your network from various cyber threats. It is designed to identify and block malicious traffic patterns, known exploits, and suspicious activities before they can compromise your systems.

이미지: 이상view of Fortinet Security Subscriptions. This image illustrates the comprehensive benefits of Fortinet's security subscriptions, including real-time threat intelligence, global threat insight, automated analytics, high-fidelity back-end processes, proactive threat research, and proven effectiveness.

Key benefits of FortiGuard IPS include:

• Up-to-the-minute threat intelligence: Continuously updated to detect and stop the latest threats.
• Insight into threats: Leverages a global network of over three million sensors for broad threat visibility.
• Fast and comprehensive intelligence: Utilizes automated and advanced analytics, including machine learning, for cross-discipline information.
• High fidelity and rigorous back-end processes: Ensures accurate and reliable threat detection.
• Prevention of exploitation: Proactive threat research helps prevent new avenues of attack.
• Top-rated effectiveness: Achieved through independent, real-world testing.

3. Activation and Renewal

The FortiGuard IPS service is provided as a 1-year license contract. Upon purchase, the license contract is typically delivered via e-mail within 1-2 business days. This license is for new activations or renewals for your FortiGate-60E device.

3.1. 라이센스 활성화

To activate your FortiGuard IPS service, you will need to apply the license key received via email to your FortiGate-60E device. Specific activation steps can be found in the FortiGate administration guide or by logging into your Fortinet Support account.

3.2. Service Renewal and Continuity

Fortinet designs its support and subscriptions for continuous service. It is crucial to renew your license before the expiration date to avoid any lapse in service. A lapse in the service period means your FortiGate-60E will no longer receive the latest IPS updates, potentially leaving your network vulnerable to new threats.

Ensure timely renewal to maintain uninterrupted protection and access to the latest threat intelligence.

4. FortiGuard Subscription Options

FortiGuard offers a comprehensive suite of security subscriptions that work in conjunction with your FortiGate device to provide multi-layered protection. The IPS service is a core component, often bundled with or complementing other services.

Image: Detailed FortiGuard Subscription Options. This image provides an in-depth look at various FortiGuard services, explaining their functions and benefits, such as IPS, Antivirus, Web Filtering, Antispam, Vulnerability Scan, Botnet IP/Domain Reputation, Database Security, Mobile Security, and Advanced Threat Protection.

간략한 이상view of key FortiGuard subscription options:

• Next Generation Application Control and IPS: Application control and intrusion prevention (IPS) are foundational security technologies for Next-Generation Firewall (NGFW) solutions. FortiGuard IPS blocks approximately 470,000 network intrusions, and new IPS signatures are created and deployed daily.
• Web 필터링: FortiGuard Labs processes nearly 50 million URL categorization requests and blocks over 160,000 malicious websites daily. Web Filtering services rate over 250 million websites and deliver nearly 1.5 million new URL ratings every week.
• 바이러스 백신: FortiGuard Labs has identified and neutralized nearly 100,000 malware programs targeting traditional, mobile, and IoT platforms. Fortinet's Recognition Language (CPRL) enables FortiGuard Antivirus to identify thousands of current and future malware variants.
• Web Application Security Service: The FortiWeb Security subscription service provides fully automated updates to protect your sensitive data and content from the latest application-layer threats. FortiGuard Labs provides updates on the latest advanced application vulnerabilities, bots, suspicious URL patterns, data-type patterns, and heuristic detection engines.
• Antispam: FortiGuard Antispam detects unwanted and often malicious email with global spam filtering that uses server IP reputation and spam signatures. FortiGuard Labs delivers nearly 46 million new and updated spam rules every single week.
• Vulnerability Scan: The FortiGuard Vulnerability Scan service helps FortiClient solution accurately identify and manage the latest software vulnerabilities on endpoint devices. It identifies the OS and applications, and discovers known vulnerabilities in versions of software currently running on the endpoints in your organization.
• Botnet IP and Domain Reputation: Every minute of every day, FortiGuard Labs blocks approximately 32,000 botnet command & control communication attempts. A key part of a botnet's attack kill chain requires an infected device to communicate with a command & control server.
• Database Security Control: FortiGuard's Database Security service offers centrally managed, enterprise-scale database protection for Fortinet's FortiDB product line. Automated content updates provide the latest pre-configured policies that cover known exploits, configuration weaknesses, OS issues, operational risks, data access privileges, and industry/regulatory best practices.
• Mobile Security Service: Protect your organization against attacks targeting your mobile platforms. Fortinet's Mobile Security Service gives you the ability to create effective protection against the latest threats targeting mobile devices.
• Advanced Threat Protection (FortiSandbox Cloud): Thousands of organizations leverage FortiSandbox to identify advanced threats. FortiSandbox utilizes the full FortiGuard antivirus database, along with community reputation lookups, platform-independent code emulation, and virtual sandboxing to identify zero-day threats and attacks using new evasion tactics.

5. FortiCare 지원 서비스

Fortinet offers various FortiCare support services to ensure the optimal performance and reliability of your FortiGate-60E and its FortiGuard services. These services provide technical assistance and hardware replacement options.

Image: FortiCare Support Services Overview. This image details the different tiers of FortiCare support, including 8x5, 24x7, and 360 services, along with explanations of Premium RMA and Secure RMA for hardware replacement.

5.1. FortiCare 8x5 서비스

이 서비스는 기술 지원을 받을 수 있도록 제공합니다. web portal, online chat system, and telephone during business hours (8 hours a day, 5 days a week). It includes return and replace service for hardware failures and offers fast, easy written access to technical support requests.

5.2. FortiCare 24x7 서비스

For mission-critical requirements, the 24x7 service offers round-the-clock access to technical support (365 days a year, 24 hours a day, 7 days a week). This tier also includes advanced replacement service for hardware failures, ensuring minimal downtime.

5.3. FortiCare 360° Service

The FortiCare 360° service encompasses all benefits of the 24x7 service, plus premium support with a recurring health check through a personalized monthly audit report for your FortiGate and FortiWiFi appliances. This service proactively identifies and remediates potential security and performance issues, helping to prevent unplanned service disruptions.

5.4. FortiCare Premium RMA Service

Designed to minimize downtime, this service offers three options for parts delivery following RMA approval by Fortinet support:

• Next-day Delivery: Parts delivered the day following RMA approval.
• 4-Hour Courier: Parts delivered on-site within 4 hours of RMA approval (24 hours a day, 7 days a week).
• 4-Hour On-site Engineer: Parts delivered on-site with an engineer within 4 hours of RMA approval (24 hours a day, 7 days a week).

5.5. FortiCare Secure RMA Service

This service allows for non-return of an appliance for customers with strict rules and requirements for physical data protection.

6. 사양

7. 중요 사항

To ensure continuous and uninterrupted protection, it is essential to manage your FortiGuard IPS service license proactively. Fortinet's support and subscriptions are designed to be continuous. A lapse in the service period occurs if a customer does not renew by the expiration date. This lapse means your device will no longer receive critical security updates, potentially exposing your network to emerging threats.

Always refer to the official Fortinet documentation and your Fortinet Support portal for the most current and detailed information regarding your FortiGuard IPS service and FortiCare support options.