Remote Access / VPN
Securing the Remote Workforce
The IPsec and SSL VPNs integrated into every FortiGate NGFW offer an extremely flexible deployment model. Remoteworkers can either take advantage of a clientless experience or gain access to additional features through a thick clientbuilt into the FortiClient endpoint security solution.
Power users and super users would benefit from deploying a FortiAP or aFortiGate NGFW for additional capabilities.Fortinet solutions are designed to be easy to use from initial purchase through end of life.
FortiGate NGFWs and FortiAPwireless access points include zero-touch deployment functionality. Appliances deployed at remote sites can be preconfigured before they ship, allowing for automatic set up onsite, which ensures business continuity and support fortelework.
The Fortinet Security Fabric takes advantage of a common Fortinet operating system and an open application programminginterface (API) environment to create a broad, integrated, and automated security architecture. With the Fortinet Security
Fabric, all of an organization’s devices, including those deployed remotely to support telework, can be monitored and managed from a single pane of glass. From a FortiGate NGFW or a FortiManager centralized management platform deployed at the headquarters environment, the security team can achieve full visibility into all connected devices, regardless of their deployment situation.
In the event of a natural disaster or other event that disrupts normal business operations, an organization must be capable of rapidly transitioning to a fully remote workforce. Table 1 shows the number of concurrent VPN users that each model of the FortiGate NGFW can support.
Beyond offering encryption of data in transit, via a VPN, Fortinet solutions offer a number of other features that can help an organization to secure its remote workforce. These features include:
• Multifactor authentication: FortiToken and FortiAuthenticator enable dual factor authentication of remote employees.
• Data loss prevention (DLP): FortiGate and FortiWiFi provide DLP functionality for remote workers, which is essential for teleworking executives with frequent access to sensitive company data.
• Advanced threat protection: FortiSandbox offers analysis of malware and other suspicious content within a sandboxed environment before it reaches its destination.
• Wireless connectivity: FortiAPs provide secure wireless access at remote work locations with full integration and configuration management in a single pane of glass.
Use Cases for Supporting Remote Work
Not every employee in an organization requires the same level of access to company resources when working remotely. Fortinet provides tailored telework solutions for every remote worker:
1. Basic teleworker:
The basic teleworker only requires access to email, internet, teleconferencing, limited file sharing, and function-specific capabilities (finance, HR, etc.) from their remote work site. This includes access to Software-as-a-Service (SaaS) applications in the cloud, such as Microsoft Office 365, as well as a secure connection to the corporate network. Basic teleworkers can connect to the organization using FortiClient integrated VPN client software and verify their identity with FortiToken for multifactor authentication. Note that power users and super users would revert to the basic teleworker profile when they roam from their remote work location.
2. Power user:
Power users are employees that require a higher level of access to corporate resources while working from a remote location. This may include the ability to operate in multiple, parallel IT environments and includes employees such as system administrators, IT support technicians, and emergency personnel.
For these power users, deployment of a FortiAP access point at their alternate work site provides the level of access and security that they require. This enables secure wireless connectivity with a secure tunnel to the corporate network.
FortiAPs can be deployed with zero-touch provisioning (ZTP) and will be managed by the FortiGate NGFWs in the office. Should a corporate phone need to be deployed, it can simply plug into the FortiAP for connectivity back to the main office.
3. Super user:
A super user is an employee that requires advanced access to confidential corporate resources, even when working from an alternate office location. They frequently processe extremely sensitive and confidential information.
This employee profile includes administrators with privileged system access, support technicians, key partners aligned to the continuity plan, emergency personnel, and executive management.
For these super users, their alternate work site should be configured as an alternate office location. While they require the same solutions as basic telecommuters and power users, they also require additional functionality. FortiAP can be integrated with a FortiGate NGFW or FortiWiFi appliance for secure wireless connectivity with built-in DLP.
Achieve Full Security Integration
FortiClient strengthens endpoint security through integrated visibility, control, and proactive defense and enables organizations to discover, monitor, and assess endpoint risks in real time.
FortiGate NGFWs utilize purpose-built cybersecurity processors to deliver top-rated protection, end-to-end visibility and centralized control, as well as high-performance inspection of clear-texted and encrypted traffic.
FortiWiFi wireless gateways combine the security benefits of FortiGate NGFWs with a wireless access point, providing an integrated network and security solution for teleworkers.
FortiToken confirms the identity of users by adding a second factor to the authentication process through physical or mobile application based tokens.
FortiAuthenticator provides centralized authentication services including SSO services, certificate management, and guest management.
FortiAP delivers secure, wireless access to distributed enterprises and remote workers and can be easily managed from a FortiGate NGFW or via the cloud.
FortiManager provides single-pane-of-glass management and policy controls across the extended enterprise for insight into networkwide, traffic-based threats. This includes features to contain advanced attacks as well as scalability to manage up to 10,000 Fortinet devices.
FortiAP delivers secure, wireless access to distributed enterprises and remote workers and can be easily managed from a FortiGate NGFW or via the cloud.
FortiAnalyzer provides analytics-powered cybersecurity and log management to enable improved threat detection and breach prevention.
Fortinet sandboxing solutions offer a powerful combination of advanced detection, automated mitigation, actionable insight, and flexible deployment to stop targeted attacks and subsequent data loss. Available as a cloud service that is included in most FortiGuard subscriptions.
Click here for full size animated gif
