Cloud Security Features

FortiCASB comes with a series of features that give you visibility of data access and usage, control over data security and threat protection, and peace of mind over compliance with standards and federal regulations.

Visibility

• Automatic on-demand data scan—FortiCASB examines existing content in all folders to identify sensitive data subjects or security policies.
• Cloud usage analytics— FortiCASB visually summarizes key usage statistics, including trends over different time periods as well as drilldown, access count, and usage over time.
• User entitlements review— FortiCASB gives visibility of privileged users, dormant users, and external users.
• File exposure— FortiCASB highlights the most shared files overall, as well as each user's most shared files.

Data security and threat protection

• Cloud data loss prevention— FortiCASB enforces DLP policies based on data identifiers, keywords, and regular expressions for data at rest.
• Threat detection—FortiCASB offers an abundant number of out-of-the-box policies to immediately detect account-centric threats.
• Malware detection— FortiCASB features a malware detection policy to detect malicious files before they compromise sensitive data.
• Geo-location analytics—FortiCASB visualizes global access patterns and analyzes activity to identify unlikely cross-region access attempts indicative of compromised accounts.
• Shadow IT discovery — FortiCASB offers an overview of unsanctioned cloud applications used in the organization and gives users the ability to control application usage.
• Configuration assessment —FortiCASB offers an large number of out-of-the-box policies for automated validation of best security practices against the your cloud storage account.

Compliance

• Predefined compliance policies—FortiCASB provides predefined compliance policies designed to help maintain compliance with ISO 270001, NIST 800-53 V4, and NIST 800-171 regulations.
• Compliance report—FortiCASB can produce compliance reports for audit purposes. These reports show compliance with ISO 270001, NIST 800-53 V4, and NIST 800-171 regulations.