Deal will provide MSSPs with more complete MDR service to offer
Cybersecurity vendor Fortinet is expanding the endpoint security capabilities in its portfolio with the acquisition of privately held enSilo as it eyes an increasingly decentralized environment that includes the edge and the Internet of Things (IoT).
The Lowdown: Fortinet will integrate enSilo’s technology into a number of its products, which will give enterprises improved visibility into their endpoints and better control of network, user, and host activities in their environments. In addition, managed security service providers (MSSPs) will be able to offer their customers a more complete managed detection and response (MDR) service.
The Details: EnSilo’s endpoint detection and response (EDR) technology will be integrated into such Fortinet products as FortiSIEM for security information and event management, FortiInsight UEBA (user entity behavior analytics), and FortiNAC (network access control). Given that enSilo has been a partner for Fortinet’s Security Fabric technology, its offerings already work well with Fortinet products.
The integration of enSilo’s technology will bring a number of features to Fortinet Security Fabric, including:
> Automated real-time protection: To protect against advanced threats and provide incident response services.
> Code tracing: To stop attacks, prevent data exfiltration, protect against ransomware, and ensure regulatory compliance.
> Multiple OS support: A lightweight agent can work in Linux, Windows, and macOS environments.
> Integrated access control and endpoint security: For coordinated IoT security.
> Scalablity: For both on-premises and cloud deployments with multi-tenancy and the ability to support hundreds of thousands of endpoints.
The Buzz: “As businesses become more networked and operations extend from the cloud to the edge and Internet of Things, the digital attack surface has expanded exponentially and has become more complex to secure,” said Ken Xie, CEO, founder, and chairman of Fortinet. “Manual threat hunting or point security solutions are ineffective when managing or securing these new environments. Instead, security and the network need to be integrated and orchestrated to enable advanced threat containment at network speeds. In acquiring enSilo, we add automated, real-time detection, protection, and response enhancements to our Fortinet Security Fabric to further protect endpoints and corresponding edge data.”
“Together, enSilo and Fortinet share the commitment to solve customers’ most difficult challenges and to protect the endpoint and their corresponding operations and data,” said enSilo CEO and co-founder Roy Katmor. “Now, enSilo brings its patented approach for advanced endpoint protection and response to Fortinet and its broad security portfolio.”
“According to ESG research, 76% of organizations find threat detection and response more difficult today than two years ago,” said Dave Gruber, senior analyst at Enterprise Strategy Group. “Vendors like Fortinet are tackling this problem by constructing an integrated security platform across endpoints, network, and cloud infrastructure. The move to natively add enSilo’s automated EDR capabilities to the Fortinet platform should improve and accelerate alert correlation, leading to faster threat detection and incident response.”