As threat actors become more proficient, sophisticated, and effective, organizations often turn to point-products as a solution. The result is dozens of tools that lack cohesive visibility across an environment, an inability to correlate the disparate data sources to develop actionable insights and, ultimately, not achieving the security outcomes needed to address ever-present threats.
With tightening budgets, security skills shortages, and a focus on improved security posture, it’s no surprise security leaders seek more scalable, sustainable, comprehensive, 24/7 detection and response solutions.
Comprehensive Coverage and Visibility
With Fortra Extended Detection and Response (XDR), visibility extends across the entire IT estate including endpoints, networks, and cloud, as well as thirdparty vendors and sources. This solution combines industry-leading managed detection and response (MDR) with a lightweight Fortra agent uniquely designed to target endpoint telemetry.
The result: A managed XDR solution offering comprehensive coverage and enhanced visibility. This solution empowers better serviceability for security operations teams to gather insights from richer data collection and telemetry sources to improve mean-time-to-detection (MTTD). Our XDR solution’s seamless integration with existing tools like EDR and identity management solutions, as well as existing infrastructure, enables organizations to realize continued value from prior investments while fortifying their security strategy, technology, and expertise.
Request My Demo
Key Features
- 24/7 threat management and security expertise
- 15-minute escalation SLA (critical and high incidents)
- Security Operations Center (SOC) threat hunting
- SOC-deployed response actions performed for the customer
- Fortra Platform support for Fortra Endpoint Manager
- Automated response (SOAR) for core use cases
- Incident correlation with endpoint and network traffic*
- Correlated observations with third-party endpoint and antivirus integrations*
- Self-serve, real-time reporting and dashboards on threats, vulnerabilities, topology, and service value
Broad Detection and Response
Effective extended detection and response solutions require broad coverage, centralized analytics, and automation to quickly identify, analyze, correlate, and take action on unwanted activity. Fortra XDR delivers integrated detection capabilities for known and unknown threats, identifying known threats by analyzing thousands of data points, a broad range of telemetry sources, as well as leveraging threat intelligence from the Fortra Threat Brain. Deep analytics, machine learning and powerful search functions enable analysts to identify unknown and emerging threats. The outcome is actionable guidance to customers to comprehensively remediate to ultimately reduce the potential impact of an attack (reduce dwell time) and prevent reinfection.
Organizations can gain efficiency with our automated response by streamlining repetitive tasks. This scalable, integrated approach to automation provides the flexibility to take response actions such as host isolation. Our technology is augmented by our SOC team, whereby verified malicious actions detected on the endpoint will result in SOC-deployed response actions on behalf of the customer.
24/7 Managed Expertise and SOC Services
Delivered as a managed solution, Fortra XDR safeguards your business-critical assets with 24/7 threat detection and incident management, delivered by a global SOC with more than 120 experts in security and information technology disciplines. By fusing the Fortra XDR platform technology and a purpose-built SOC tooling with decades of experience, our security operations teams leverage threat intelligence to perform tasks such as incident triage, threat hunting, security investigations, and tuning. Backed by a 15-minute escalation SLA, our managed XDR solution provides continuous monitoring and security expertise giving you peace of mind.
Features and Capabilities
Core features and capabilities delivered by Fortra XDR include:
DETECTION |
RESPONSE |
|
Supports third-party network and identity response:
Supports third-party EDRs:
Response actions:
|
To install the agent, the following server operating systems are required: Linux (Debian, Ubuntu, CentOS, Red Hat Enterprise, SUSE, Amazon Linux), Windows (Windows Server 2003 SP1 through 2022)
To install the agent, the following client operating systems are required: Windows 10, Windows 11, macOS†
* Addition for client operating systems, targeted for 2024 release
† Targeted for 2024 release