FortiGuard IP Reputation & Anti-Botnet Security Service
Proactively Block Attacks
Attack signatures change. New bots and worms constantly evolve behaviors. Compromised hosts can remain launch pads for malware indefinitely. A key part of the attack kill chain on an organization is when the threat communicates with a command & control server – either to download additional threats or to exfiltrate stolen data. IP and domain address reputation block this communication, neutralizing threats.
The FortiGuard IP Reputation Service aggregates malicious source IP data from the Fortinet distributed network of threat sensors, CERTs, MITRE, cooperative competitors, and other global sources that collaborate to provide up-to-date threat intelligence about hostile sources. Near real-time intelligence from distributed network gateways combined with world-class research from FortiGuard Labs helps organizations stay safer and proactively block attacks.
The anti-botnet security service is available through the FortiGate next generation firewall.
The FortiGuard Anti-botnet Service:
Prevents botnets and other threats from communicating with command & control servers to exfiltrate data or download malware
Blocks large-scale DDoS attacks from known infected sources
Protects against malicious sources associated with web attacks, phishing activity, web scanning, scraping, and more
Lowers management and operational costs with “set and forget” functionality
FortiGuard Labs Global Threat Intelligence
Every minute of every day FortiGuard Labs blocks approximately 32.000 botnet command & control communication attempts.
Knowledge of the threat landscape combined with the ability to respond quickly at multiple levels is the foundation for providing effective security. Hundreds of researchers at FortiGuard Labs scour the cyber landscape every day to discover emerging threats and develop effective countermeasures to protect organizations around the world. More than 250.000 organizations globally use FortiGuard security.