Extending the threat coverage from single endpoint to the entire infrastructure

The integration with firewalls enhances corporate network protection by automating threat blocking and extending security coverage to all connected devices, even those without the ACSIA SOS agent, but located behind the firewall.

Upon detecting a malicious IP, the firewall immediately enforces restrictions on all network traffic from that source, safeguarding the entire corporate infrastructure in real time.

This proactive security approach ensures that threats are neutralized before they can spread, reinforcing network resilience.

At present, the integration is available for FortiGate firewalls.

This integration, along with many other advanced features, demonstrates that ACSIA SOS is more than just an endpoint security platform—it is a comprehensive cybersecurity solution that protects the entire corporate perimeter.
And it doesn’t stop there. Its mission is to become the single point of reference for security, ensuring protection across every digital domain and industry.

ACSIA SOS is redefining cybersecurity—are you ready to take your protection to the next level?

ACSIA SOS communicates with Firewall through the official APIs, using an authentication token generated on the firewall. This ensures a secure and reliable connection between the two platforms.

ACSIA SOS collects and displays Firewall information in its frontend, including:

• Serial number
• Model
• Model name

This enables network administrators to maintain centralised control over all integrated firewalls within the system.

ACSIA SOS automatically sends a list of IP addresses to block to the Firewall, sourced from:

• IOC (Indicators of Compromise) feeds – Lists of known malicious IPs.
• Remediation actions – Automatic blocking of IPs involved in suspicious activity on devices with the ACSIA SOS agent installed.
• Manual network policies – Administrators can define custom blocking rules for one or more monitored machines.