Scans network traffic for known attack patterns and blocks them.
The firewall compares traffic to a continuously updated signature database and blocks matches. This is often called virtual patching.
Beyond attacks from outside, this can block attempts by people inside inmate networks to exploit kiosks or reach other systems.
- Blocks exploit attempts from inmate networks.
- Protects older systems that are hard to patch.
- Logs the attempts for review.
- Signature updates from FortiGuard.
- Can sit between internal zones.
- Virtual patching for delayed updates.
| Control | Priority | How this helps |
|---|---|---|
| SI-4System Monitoring | P1 | Detects intrusion attempts. |
| SI-3Malicious Code Protection | P1 | Blocks exploit-based malware. |
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table