Does the Fortigate have an antivirus which scans the device itself?

[jefazo92]

Hi everyone, 

Does the Frotigate come with any malware-protection software to prevent the device itself from becoming infected? Or are users exclusively dependent on security patches pushed by Forticare? 

[ozkanaltas]

Hi @jefazo92 ,

Even though FortiOS is a hardened operating system, vulnerabilities can sometimes occur. In order to close these vulnerabilities, Fortinet releases new versions with closed vulnerabilities and we need to apply these updates on the device.

After 7.2.4, FortiGate introduced virtual patching for some of its vulnerabilities. For some vulnerabilities, we can use this feature to temporarily close the vulnerabilities without making an update.

https://docs.fortinet.com/document/fortigate/7.2.0/new-features/393161/virtual-patching-on-the-local...

[amrit]

Fortigate doesn’t come with inbuilt antivirus program. To harden the device security we recommend using best practices for Admin Access and device protection. 

Always control the device management and admin access using authentication, trusted host and MFA restrictions. To protect the firewall from denial of service use Ddos policies . Use local in policies to control the Access on the firewall interfaces. Most important is to staying updated on the latest firmware upgrades and vulnerability fixes. Most vulnerabilities have Indicators of compromise , check if there is any unwanted access or config changes in the firewall. Last but not the least check for PSIRT advisories . 

https://www.fortiguard.com/psirt

You can follow this link for more details 

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/3b0843e9-aada-11ec-9fd1-fa163e...