How to secure enterprise AI workloads on OCI with Fortinet

Protecting enterprise AI workloads running on Oracle Cloud Infrastructure

Enterprises moving generative AI and machine learning workloads to Oracle Cloud Infrastructure (OCI) face new attack surfaces: exposed inference APIs, training data leakage, model poisoning and lateral movement between GPU-backed services. Traditional perimeter controls do not see prompts, embeddings or model outputs, which leaves CISOs without telemetry on how AI is actually used. Fortinet addresses this gap with a unified security stack integrated natively with OCI. Softprom is the official distributor of Fortinet.

What was announced

Fortinet published an updated reference architecture for deploying its Security Fabric to protect enterprise AI workloads on Oracle Cloud Infrastructure. The design combines FortiGate NGFW, FortiWeb, FortiCNAPP and FortiGate Cloud-Native Firewall (CNF) to cover network, application, API and workload layers around AI services on OCI, including deployments that use OCI Generative AI and NVIDIA GPU shapes.

Why this matters

For CIOs, CISOs and procurement leaders, AI pipelines concentrate the most sensitive corporate data: source code, customer records, financials and intellectual property. A single exposed inference endpoint can turn into a data exfiltration channel. The Fortinet + OCI design gives security teams consistent policy, logging and threat intelligence from FortiGuard across hybrid and multicloud environments, which reduces audit effort and shortens incident response time.

Technical details

• FortiGate NGFW on OCI: segmentation, IPS and TLS inspection for traffic to and from AI services.
• FortiGate CNF: cloud-native firewall-as-a-service managed through the OCI console, with no VM to operate.
• FortiWeb: protection for AI and LLM APIs against OWASP Top 10, bot traffic and prompt-based abuse.
• FortiCNAPP: CSPM, CIEM and workload protection for GPU compute, storage and OCI Generative AI resources.
• FortiGuard AI-powered services: real-time threat intelligence feeding all enforcement points.
• Integration: Terraform templates, OCI Marketplace images and REST APIs for automated deployment.

FAQ

Which AI risks does this architecture address?

It covers data exfiltration through inference APIs, prompt injection, model abuse, misconfigured storage and lateral movement between GPU nodes, using network, API and workload controls in one policy model.

Does it work with OCI Generative AI services?

Yes. FortiGate, FortiWeb and FortiCNAPP can inspect and protect traffic to OCI Generative AI endpoints and third-party LLMs hosted on OCI compute.

How is the solution deployed and licensed?

Components are available via OCI Marketplace with BYOL or PAYG models, deployable through Terraform and manageable from FortiManager and FortiAnalyzer for central operations.

Softprom and Fortinet

Softprom is the official distributor of Fortinet and supports enterprise customers with architecture design, licensing and deployment of Fortinet Security Fabric on Oracle Cloud Infrastructure.

Prepared by the Softprom editorial team based on vendor materials (Softprom DistriFlow). Source: original article.