Fortinet introduces FortiInsight for enhanced insider threat protection

Fortinet has introduced FortiInsight to help organizations mitigate insider threats. FortiInsight uses machine learning analytics to effectively monitor endpoints, data movements, and user activities to detect unusual, malicious behavior and policy violations. When integrated with FortiSIEM, as part of the Fortinet Security Fabric, FortiInsight provides organizations with complete visibility into their data activity, enabling them to reduce the risks of insider threats that can lead to a breach or to compliance issues.

Today’s increasingly complex networks, compounded by the proliferation of data, devices, applications, and users accessing networked resources, make it difficult for security teams to detect and prevent insider threats, regardless of whether those breaches are malicious or the result of negligence. With the inclusion of FortiInsight into the Fortinet Security Fabric, these concerns can now be addressed head on. FortiInsight’s robust solution delivers endpoint behavioral monitoring everywhere, securing endpoint devices even when they are off the corporate network, to provide visibility into user behavior, data movement, and accessed resources.

With its ability to monitor, detect, and alert on potential insider threats, including such things as policy violations, privilege misuse or abuse, data exfiltration, account takeover, or even compromised accounts, security teams have more granular visibility and control over insider threats than ever before.

FortiInsight’s powerful rule-based engine can identify policy violations, unauthorized data access, data exfiltration – whether data is being moved to the cloud or onto a local USB device, and compromised accounts. And FortiInsight’s machine learning capabilities automatically baseline user behavior across peer groups, allowing it to quickly detect unusual behavior or changes in behavior. This heightened visibility, enabled by its advanced machine learning analytics and rule-based engine, gives security teams the insight they need to be able to respond efficiently before risk escalates to an incident, thereby preventing breaches.