FortiGuard Inline Malware Prevention Service
AI-powered inline protection against unknown, zero-days, and sophisticated threats
Download Data Sheet
Overview
The FortiGuard AI-Powered Inline Malware Prevention Service protects against unknown threats by blocking all unknown and suspicious traffic on the NGFW. The service leverages a combination of antivirus, advanced threat filtering, static and dynamic analysis, deep neural networks, AI/ML, and FortiGuard Labs threat intelligence to deliver real-time verdicts without compromising productivity or security.
Inline Malware Prevention Delivers Real-Time Zero-Day Protection
How the Inline Malware Prevention Service Works
FortiGuard IMLPS provides real-time protection against unknown threats by blocking and analyzing threats inline. This stops malicious files from slipping through your defenses.
The service uses AV, advanced threat filtering, AI/ML, and threat intelligence to identify and classify file-based threats. This eliminates false positives.
Static and dynamic analysis of suspicious files results in sub-second malware detection and verdicts. If the file is clean, the NGFW will release the file to the user. Otherwise, the file will be blocked and quarantined for further action.
What is Advanced Threat Filtering?
Advanced threat filtering is a sophisticated technique designed to optimize file analysis while minimizing false positives. By combining several technologies like AV, CPRL, AI/ML, behavioral and heuristic analysis, and deep inspection, this approach effectively filters out benign files, focusing resources on high-risk unknown and zero-day threats.
This intelligent filtering process significantly reduces file processing time, enabling faster time-to-verdict and improves threat response times, thus protecting your organization from potential breaches.
Threat Intelligence Sharing
To strengthen security across the Cyber Kill Chain, the inline malware prevention service generates new prevention measures based on the analysis of newly discovered threats. This intelligence is shared with other products and services within the Fortinet ecosystem, enhancing overall protection of networks and assets in real time.
Features and Benefits
The inline malware prevention service is an AI-powered sandboxing service that protects organizations with lightning-fast real-time analysis, protection, and response capabilities.
Real-time protection
Provides real-time protection against threats including zero-days and sophisticated AI threats
Inline blocking
Blocks unknown and zero-day threats inline and prevents threats from entering the network
Quick verdicts
Provides verdicts in seconds to ensure no loss in productivity or added security overhead
False positives elimination
Eliminates false positives with AI/ML and advanced threat filtering
Proactive Protection
Proactively assesses any file using multiple techniques across the network, email, and endpoints
Key Use Cases
Improve security posture
Reduce the risk of malicious traffic and improve your security posture in real time
Reduce security overhead
Reduce security overhead by not having to chase malicious files that may have been allowed in
Maintain productivity
Analyze suspicious files and block malicious attacks, all in real time. There should not be any traffic slowdowns or impact on business productivity.
Focus on real risk
Filter out the noise and eliminate false positives to focus only on the files that truly contain unknown threats. This saves time and resources that may otherwise be spent remediating or chasing threats that pose no risk.
Resources
Ordering Guides
Data Sheets
Checklists
Solution Briefs
White Papers
FortiGuard AI-Powered Security »
The FortiGuard AI-Powered Security suite of services provides market-leading security capabilities designed to protect application content, web traffic, devices, and users wherever they are.
Stop Zero-Day and Previously Unknown Threats with the FortiGuard Inline Sandbox Service »
Instead of forcing a choice between security and performance, FortiGuard Inline Sandbox solutions hold suspicious files until they are found to be safe, without any performance impact.
