Every day, new vulnerabilities appear in any organization's network, due to flaws in software, faulty application configuration, etc. Detecting, removing and controlling them require a powerful, yet flexible Vulnerability and Compliance Management solution. Our solution enables users to manage this risk effectively, focusing on discovery , then periodic assessment of where those risks lie, and providing up to date information to mitigate those risks. Core to this solution is our ever expanding, comprehensive vulnerability Database, and the periodic delivery of signature updates via the FortiGuard distribution network.
FortiGuard VCM Service packages are purchased on an annual subscription basis. The following features are available:| Feature | FortiAnalyzer/FortiGate VCM Service | FortiScan VCM Service |
|---|---|---|
| Web-based management | ![]() | ![]() |
| Executive summary reports | ![]() | ![]() |
| Network discovery and mapping | | |
| Asset grouping and prioritization | ![]() | ![]() |
| Up to date service-defined vulnerability sensors and profiles | ![]() | ![]() |
| Scheduled and on-demand agentless vulnerability scans | ![]() | ![]() |
| Scheduled and on-demand agent-based vulnerability scans | ![]() | |
| Accurate and detailed vulnerability scan reports | | |
| Executive and technical PCI Compliance reports | ![]() | ![]() |
| Vulnerability trend reports | ![]() | ![]() |
| Comprehensive up-to-date Vulnerability Database | ![]() | ![]() |
| CVE compatiblity with search by CVE names | ![]() | ![]() |
| Scheduled and on-demand agent-based compliance audit scans | ![]() | |
| Native XCCDF compliance benchmarks | ![]() | |
| Scheduled and on-demand agent-based patch scans | ![]() | |
| Baseline templates for system hardening | ![]() | |
| Comprehensive up-to-date Remediation Database | ![]() | |
| Detailed OVAL Definition Database | ![]() | |
| OVAL 5.6 compliant | ![]() | |
| Integration with FortiGuard IPS services | ![]() | ![]() |
VCM Updates