Demo 1 – FortiDevSec: Secure Your Application Development Lifecycle with Automated Application Security Testing

Product Demo:

FortiDevSec - Secure Your Application Development Lifecycle with Automated Application Security Testing

Synopsis:

Modern application development has helped DevOps automate, orchestrate, and integrate new applications into the software development lifecycle faster than before. While speed is important, it should not come at the expense of Security. Modern application security is essential throughout the development lifecycle.

In this demo, you will see FortiDevSec as an automated continuous application security testing solution that helps developer detect and remediate software vulnerabilities during development, without the need for specialized experts.  

We will demonstrate integration with Jenkins (CI/CD tool), and by making changes in the code repository. The trigger will build code scanning with multiple AppSec scanning technologies and produce the results on the FortiDevSec portal.  The dashboard reflects the correlated results using a risk-based prioritization process. The consolidated dashboard correlates and normalizes all scan results.

Demo 2 – Proactively Manage Your Applications & Cloud Risks with Actionable Insights using FortiCNP

Product Demo:
Proactively Manage Your Cloud Risk with FortiCNP

Synopsis:
FortiCNP is a cloud-native protection platform natively integrated with Cloud Service Providers’ (CSP) security services and Fortinet’s Security Fabric to deliver a full-stack cloud security solution for securing cloud workloads.
 

In this demo session, you will be able to see:

• Risk management - FortiCNP's patented RRI correlates and contextualizes security alerts and findings from CSP security services and Fortinet Security Fabric solutions to analyze cloud risk.
• Threat management - Native integrations with CSP security services such as Amazon GuardDuty Malware Protection and Amazon Inspector and Fortinet Security Fabric solutions to deliver real-time threat protection with zero-permission security coverage.
• Data security - Detects and protects against malware, sensitive data, data loss, and misconfigurations in cloud storage repositories.
• Container security - Protects against vulnerabilities in container images and registries throughout the application lifecycle.
• Compliance - Simplifies compliance for regulatory requirements that include CIS benchmarks, as well as corporate and regulatory standards such as PCI, HIPAA, SOX, GDPR, ISO 27001, and NIST.

Demo 3 – Protect Your Web Applications & APIs with FortiWeb

Product Demo:
FortiWeb - Protect Your Web Applications and APIs

Description:
Companies rely on web applications for all sorts of functions. When these application fails, the disruption not only affects corporate operations but also ripples up and down the supply chain. A right solution provides full Web / API protect and also easy to deploy is important to the success of companies.

In this demonstration, we will demonstrate how easy the Wep Application can be on-board in FortiWeb Cloud. Also, we will demonstrate how the API Application can be protected by the FortiWeb Cloud.

FortiMonitor – Gain End-to-End Performance Visibility of Your Application Development Lifecycle  

Organizations face increased complexity in the application delivery infrastructure they manage, and it’s getting more and more difficult to know about issues and resolve them quickly. FortiMonitor is an easy-to-use SaaS service that helps them to correlate end-to-end performance metrics and execute automated Countermeasure to quickly identify root causes of technical issues, whether related to endpoint devices, local networks, VPNs, remote offices, SD-WAN, or on-premises and cloud-based services and applications.  

In this demo, we use FortiMonitor to gain performance visibility at the Run stage of the Application Lifecycle. They include:

• Visualizing application performance with Dashboards
• Incident handling
• Knowing about problems before your users do
• Automating the response with Countermeasures
• Using Fortinet Fabric Integration to go beyond SNMP monitoring
• Monitoring cloud application performance from different perspectives