AntiExploit

The antiexploit detection feature helps protect vulnerable endpoints from unknown exploit attacks. FortiClient monitors the behavior of popular applications, such as web browsers (Internet Explorer, Chrome, Firefox) and Microsoft Office applications, against exploits that use zero-day or unpatched vulnerabilities to infect the endpoint. Once detected, the compromised application process is terminated. The antiexploit detection feature also helps protect against memory-based attacks and drive-by download attacks. It also detects and blocks unknown and known exploit kits. It is a signature-less solution. The anti-exploit detection feature protects applications from any activities that can be harmful, regardless if legitimate applications or malicious code are causing them.

Due to a feature enhancement, antiexploit detection now supports the following applications:

• Microsoft applications:

  • Word
  • Excel
  • PowerPoint
  • Equation Editor
  • Outlook
• Browsers:
  • Chrome
  • Firefox
  • Internet Explorer
  • Microsoft Edge

The antiexploit detection feature is available only for FortiClient (Windows).