Fortinet offers integrated cloud app security service

Fortinet has melded some of its previously available services into an integrated cloud package aimed at helping customers secure applications.

The new service, FortiAppSec Cloud, brings web and API security, server load balancing, and threat analytics under a single console that enterprise customers can use to more efficiently manage their distributed application environments, according to Vincent Hwang, vice president of cloud security at Fortinet.

“Managing application security across multiple environments isn’t easy because each cloud platform, tool, and service introduces new layers of complexity. With applications spread across diverse environments, misconfigurations and shadow APIs can easily slip through the cracks, creating difficult-to-find vulnerabilities. Add evolving threats like AI-powered bot attacks and zero-day exploits, and the stakes couldn’t be higher,” Hwang wrote in a blog about the new service.

“Often, businesses end up with inconsistent management practices and resource inefficiencies that hinder security and performance. With security teams stretched thin, and slower, less reliable application experiences impacting users, it’s clear that it’s time for a consolidated security approach that simplifies operation and security without sacrificing quality or performance,” Hwang wrote.

With FortiAppSec Cloud, Fortinet is delivering a wide range of capabilities in a unified way and can address a variety of use cases that fragmented solutions simply cannot, Hwang said.

FortiAppSec Cloud uses machine learning and AI technology to bolster application behavioral analysis and identify attack patterns across customer web application with the idea to defend those applications from thefts and other intrusions. The service also integrates real-time threat intelligence from the vendor’s FortiGuard Labs to spot anomalies and threats and inspect application payloads.

Organizations will have fewer false positives, faster response times, and stronger protection against sophisticated cyberattacks, Hwang stated.

Utilizing its FortiADC and FortiGSLB offerings, the service lets customers distribute traffic across multiple data centers to ensure high app availability and reliability, Hwang stated.

With FortiAppSec Cloud, customers don’t need to juggle multiple separate tools to secure and ensure delivery of core applications, saving time and costs. In addition, automated analytics can reduce alert fatigue, Hwang stated.

FortiAppSec Cloud is a part of the vendor’s overarching Security Fabric platform that ties together security products including FortiGate firewalls, FortiAnalyzer security management and FortiClient endpoint protection.