28 Mar 2018

Pulse Secure, global provider of secure access solutions to both enterprises and service providers, has announced a technology integration with Fortinet to enrich endpoint intelligence and automate threat response to protect networks from attack and data breach. 

The joint solution incorporates Pulse Policy Secure network access control (NAC) with Fortinet FortiGate enterprise firewall and the Fortinet Security Fabric. The advantages this bi-directional integration includes sharing security context and applying policy-based mitigation to reduce network exposures and cyber threat response time. Pulse Secure NAC data can be used by Fortinet to trigger firewall traffic controls, and Fortinet can quarantine malicious endpoints on the network through Pulse Secure NAC. 

The Fortinet Security Fabric enables security components to collect and share intelligence between devices, systems and partners, support unified management, and synchronise and automate responses to threats. It allows organisations to address the full spectrum of challenges they currently face across the expanding attack surface.

Channel partners of both Pulse Secure and Fortinet now have a new combined solution to bring to customers and explore the business value of enterprise-grade NAC and next gen firewall integration.

Policies may be based on authentication, endpoint configuration (posture) or users' role/identityPulse Secure-Fortinet integration

As enterprises support workforce mobility and expand BYOD initiatives, they need to consider how to address inherent endpoint security risks including malware, ransomware and IoT,” said Andreas Koch, vice president of strategy, corporate development and alliances at Pulse Secure.

The interoperability between Pulse Secure and Fortinet solutions allows organisations to take advantage of more automated response to reduce network security gaps and data leakage. We are pleased to be a part of the Fortinet Security Fabric.” 

Gartner defines network access control as “technologies that enable organisations to implement policies for controlling access to corporate networks by devices such as the Internet of Things (IoT) and by users. Policies may be based on authentication, endpoint configuration (posture) or users' role/identity. NAC also includes post connect policies, in which the NAC solutions integrate with other security products.” 

Network visibility and control

The report continues, “Network visibility and control continue to be drivers for the adoption of NAC. Other NAC use cases include: Management of access from consultants, contractors and other guests taking control over the devices' connectivity to limit their access; Visibility and control over the connectivity of bring your own device (BYOD) programs, primarily wireless, to enable employees to access networks with personally owned devices; and Management or identification of IoT devices on the network.

Pulse Policy Secure NAC identifies, analyses, monitors and applies policy to corporate, BYO and IoT devices requesting access to or working within a corporate network. Organisations require that devices connect to protected network resources managed by next-generation firewalls. Pulse Secure dynamically captures and sends identity and security posture check data to the FortiAuthenticator. The resulting enriched security intelligence is then used to invoke policy-based compliance controls on the FortiGate firewall to allow or block traffic at the network perimeter.

Fortinet and Pulse Secure share a commitment to offer integrated and automated solutions that mitigate IoT and endpoint security threats"FortiGate firewall

Threats beyond the network perimeter are blocked by the firewall. However, a single compromised endpoint on the network can put other network devices at risk of being compromised. With alert-based admission control integration, the Fortinet FortiGate firewall can inform Pulse Policy Secure NAC to readily isolate a compromised device on the network. As a result, organisations can improve threat response time from days to seconds, lower administrative overhead, and reduce reputation, compliance, and liability exposure.

Our technical alliance goes beyond a traditional compatibility partnership, as Fortinet and Pulse Secure share a commitment to offer integrated and automated solutions that mitigate IoT and endpoint security threats,” said John Maddison, senior vice president of products and solutions at Fortinet. “Both companies are moving forward on a go-to-market plan to further advance interoperability and joint channel enablement.