Managed SOC & MDR built on Fortinet.
Already running FortiGate firewalls, or planning a Fortinet rollout? We turn your Fortinet environment into round-the-clock monitoring and response, with a local team that explains what's happening in plain language.
Why build security operations on Fortinet?
Fortinet is one of the most widely deployed network security vendors in the world, and many Philippine organizations already rely on FortiGate firewalls at their head office and branches. Fortinet products are designed to share information through the Fortinet Security Fabric, so the firewall, endpoint protection, and log platforms can work together instead of as separate boxes.
That integration is what makes a managed SOC on Fortinet efficient. The security data your devices already produce becomes the raw material for detection, and the same tools can be used to contain a threat once it's confirmed.
The hard part is rarely the technology. It's having people who watch the alerts at 2 a.m., know which ones matter, and act before an incident becomes a breach. That's the gap DefentriGuard fills.
The Fortinet technology we work with.
Every environment is different. These are the components we most often monitor and manage, described in general terms.
FortiGate
Fortinet's next-generation firewall. It inspects traffic, enforces access policy, filters web and application use, and blocks known threats using FortiGuard threat intelligence. Its logs are often the first sign that something is wrong.
FortiAnalyzer
Central log management, analytics and reporting for Fortinet devices. It correlates events, maps detections to the MITRE ATT&CK framework, and includes built-in SOC automation. For many organizations it's the natural starting point for monitoring.
FortiSIEM
Fortinet's security information and event management platform for larger or mixed environments. It collects logs from Fortinet and third-party systems, servers, cloud services and applications, and adds asset discovery and user behavior analytics.
FortiEDR
Endpoint detection and response for workstations and servers. It uses behavior-based protection before and after a program runs, is designed to stop ransomware encryption in real time, and lets responders isolate a device remotely.
FortiGuard Labs
Fortinet's threat research organization. Its intelligence feeds, signatures and indicators of compromise keep detection current across the Fortinet products you use.
FortiSOAR & FortiXDR
Orchestration and extended detection options that automate repeatable response steps and correlate activity across network, endpoint and cloud, where your scale calls for them.
Not every organization needs every product. We design around what you already own, and recommend additions only when they close a real gap.
Fortinet tools, plus the people and process to run them.
- 24/7 monitoring of your Fortinet logs and alerts, triaged so you only hear about what matters.
- Investigation of suspicious activity: what happened, which users and devices are involved, and whether it's contained.
- Response using actions you approve in advance, such as isolating an endpoint in FortiEDR or blocking a malicious address on FortiGate.
- Tuning to reduce noisy rules and false positives, so your team trusts the alerts it receives.
- Plain-language reporting on threats, trends and recommended improvements to your configuration.
- Incident records that support your obligations under the Data Privacy Act of 2012.
The result is enterprise-grade security operations without hiring, training and scheduling an in-house team around the clock.
From assessment to 24/7 coverage.
Assess
Start with our free external assessment. For a deeper view, add a paid internal vulnerability assessment, with an optional Fortinet Cyber Threat Assessment.
Design
We map the devices and logs in scope, agree on escalation contacts, and document which response actions we may take on your behalf.
Connect
We configure logging and integrations, deploy endpoint agents where needed, and learn what normal looks like in your environment.
Operate
Your environment is monitored 24/7. You get alerts that matter, regular reports, and periodic reviews with our team.
A good fit if any of these sound familiar.
- You have FortiGate firewalls, but nobody reviews the logs unless something breaks.
- You've invested in FortiAnalyzer or FortiEDR and want to get full value from them.
- Your IT team is small and can't cover nights, weekends and holidays.
- You handle customer, citizen or student data and need to show reasonable security measures.
Running Sangfor instead, or a mix of vendors? See our Sangfor SOC & MDR page, or ask us. We'll recommend the setup that fits your environment, not a particular brand.
Pricing on request
Every proposal is scoped to the number of users, endpoints and log sources you want covered. Questions first? Read the FAQ.
Find out where you stand.
Start with a free security assessment: a discovery call plus a non-intrusive external scan of your public domains, websites and email security. You get a short findings report and plain next steps. No obligation.
Book a free security assessment