Fortinet upgrades FortiAnalyzer for enhanced cyber defence

Fortinet has announced significant updates to its FortiAnalyzer platform, aiming to enhance security operations for midsize enterprises affected by a shortage of cybersecurity skills.

FortiAnalyzer is designed to streamline security operations by offering a comprehensive solution for both on-premises and cloud environments. The platform provides a unified data view, advanced threat detection, and automated incident response, facilitating the management of security operations from a single, centralised location.

Nirav Shah, Senior Vice President of Products and Solutions at Fortinet, explained, "Security teams today are stretched thin, yet they're expected to defend against increasingly complex and targeted threats. With the latest advancements in FortiAnalyzer, we've eliminated the need for additional SecOps tools, making it the ideal turnkey AI-driven security operations platform supporting on-premises and cloud environments. This is a game-changer for lean security teams, allowing them to enhance threat detection, automate incident response, and streamline critical security operations functions from a single platform."

The enhanced FortiAnalyzer leverages a unified data lake to provide centralised visibility, combining network and security logs and analytics with compliance reporting. This integration aims to reduce complexity for security teams by offering improved insights into incidents and vulnerabilities.

FortiAnalyzer incorporates AI-powered analytics from FortiGuard Labs, which assist users in identifying and addressing threats more quickly. Features such as zero-trust network access-based detections are included to effectively identify and mitigate emerging threats.

The platform also enhances automation for incident response by offering prebuilt content packs, including event handlers and playbooks. These tools are designed to enable security teams to manage threats with minimal manual intervention, reducing response times and improving incident resolution.

Native integration with Fortinet's Security Fabric and third-party device support ensures that organisations can incorporate FortiAnalyzer into their existing infrastructure. This integration seeks to provide end-to-end protection through AI-driven insights.

Additionally, FortiAI, a Gen-AI assistant, is embedded within FortiAnalyzer to improve threat investigation and response speed.

Current FortiAnalyzer customers with FortiGuard subscription services automatically receive these new features, with content updates scheduled regularly to accommodate new threats.