New features and enhancements

FortiNDR detects anomalies using a variety of methods, such as FortiGuard feeds like IPS, botnet IP and DNS DB, as well as added features such as IOC campaign lookup, vulnerable protocols and weak ciphers detection. Apart from detecting protocols like FortiOS NGFW, FortiNDR also looks into the behavior of devices & users, such as FTP download, or SMB copy.

CLI

• The new diagnose debug icap command will display most recent ICAP file event and related error messages from FortiNDR's ICAP Server. For information see,FortiNDRCLI Reference Guide.