Firewall-grade protection delivered from the cloud. It follows staff laptops and devices wherever they go.
Staff devices run an agent or are pointed at Fortinet’s cloud. Traffic goes through its nearest point of presence, where secure web gateway, firewall, CASB, data protection and zero-trust access are applied, using the same FortiOS engine as FortiGate.
Control shouldn’t end at the facility gate. Probation and parole staff work off-site with sensitive records, and agencies want the same visibility of those devices as of on-site ones.
- Applies the same access and web rules to staff devices off-site.
- Shows what remote staff devices are accessing.
- Replaces older VPN setups.
- Consistent policy on and off the network.
- Secure private access to internal apps without broad VPN access.
- Device posture checks before access.
- Unified logging with on-site firewalls.
| Control | Priority | How this helps |
|---|---|---|
| AC-17Remote Access | P1 | Controls and monitors remote access. |
| SC-8Transmission Confidentiality and Integrity | P2* | Encrypts traffic from remote devices. |
| AC-19Access Control for Mobile Devices | P2* | Applies policy to mobile endpoints. |
| SI-3Malicious Code Protection | P1 | Scans remote users’ traffic for malware. |
| SA-9External System Services | P2* | This is an external service, so review it as one. |
If CJI could pass through this cloud service unencrypted, confirm data location, personnel screening and contract terms before using it.
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table