Integration at a glance
| Item | Detail |
|---|---|
| Partner product | Fortinet FortiGate next-generation firewall |
| Integration method | DeRISK supports the native configuration export of each local firewall appliance. |
| Data used | Network zones and interfaces, firewall policies (who may talk to whom) |
| Built and supported by | DeNexus |
| DeRISK grades supported | Level 4 · Evidence-Grade (facility data) and Level 5 · Engineering-Grade (zone data), as each grade becomes available |
The challenge
FortiGate is often the main control between IT and OT, and between OT zones. Its policies hold real evidence about exposure. That evidence rarely reaches the people deciding where to spend on risk.
How it works
FortiGate enforces zones and firewall policies between OT, IT and the internet.
DeRISK CRQ reads those zones and policies from each firewall’s native configuration export.
DeRISK combines them with vulnerability data from monitoring or scanning tools, where available.
DeRISK simulates how likely (frequency) and how severe (magnitude) cyber incidents could be, and reports the results in dollars.
What you get together
Firewall evidence in the risk model.
Your zones and policies become part of the evidence behind each facility’s results.
Vulnerabilities in context.
When firewall data is available with vulnerability data, DeRISK uses the firewall data to determine which vulnerabilities are mitigated by its policies.
Better-informed projects.
Compare segmentation changes with other mitigation options before you spend.
Requirements
- Fortinet FortiGate protecting OT networks
- The native configuration export from each local firewall appliance
- A DeRISK CRQ subscription at Evidence-Grade or Engineering-Grade, as each grade becomes available
- For vulnerability context: an OT monitoring or vulnerability tool, such as the partners on this page
About Fortinet
Fortinet (Nasdaq: FTNT) is a driving force in the evolution of cybersecurity and the convergence of networking and security. Our mission is to secure people, devices and data everywhere, and today we deliver cybersecurity everywhere our customers need it with the largest integrated portfolio of over 50 enterprise-grade products.