Fortinet FortiWeb 1000B

Data Leak Prevention - Extended monitoring and protection for credit card leakage and application information disclosure by tightly monitoring all outbound traffic.

Anti Web Defacement - Unique capabilities for monitoring protected applications for any defacement and ability to automatically and quickly revert to stored version.

HTTP RFC Compliance Validation - FortiWeb blocks any attacks manipulating the HTTP protocol by maintaining strict RFC standards to prevent attacks such as encoding attacks, buffer overflows and other application specific attacks.

Web Application Vulnerability Assessments - Automatically scans and analyzes the protected web applications and detects security weaknesses, potential application known and unknown vulnerabilities to complete a comprehensive solution for PCI DSS.

Auto-Learn Security Profiling - Automatically and dynamically builds a security model of protected applications by continuously monitoring real time user activity. Access outside the baseline can then be alerted or blocked.

Application Layer Vulnerability Protection - Out of the box protection for the most complex attacks such as SQL Injection, Cross Site Scripting, CSRF and many others. Together with the Auto Learn profiling system and advanced abilities to create rules down to the single application element. FortiWeb provides the ultimate protection from today’s most sophisticated hackers.

FortiGuard - Utilizing Fortinet’s renowned FortiGuard service FortiWeb customers get up to date dynamic protection from the Fortinet® Global Security Research Team, which researches and develops protection against known and potential application security threats.

PCI DSS - Helps organizations meet PCI compliance requirements by providing a comprehensive solution for web application protection.

XML Firewall - Provides an XML firewall capability with schema validation, XML Firewall, IPS and routing capabilities.

Multiple Deployment Options - FortiWeb provides a flexible solution that you can easily introduce into any environment or existing network implementations:

• Inline Transparent Mode – Layer two bridge that does not require network level redesign
• Inline Reverse Proxy – Provides additional capabilities such as URL rewrite and advanced routing capabilities
• Non-Inline Sniffing – Monitors environments with zero network footprint and latency

Authentication Offload - FortiWeb introduces a simple integration with any environment allowing you to offload your web server authentication to the FortiWeb platform while supporting different authentication schemes such as Local, LDAP and NTLM.

High Performance and Availability - With the integration of award winning FortiASIC™ technology, FortiWeb is able to process tens of thousands of web transactions and provide hardware accelerated SSL offload and advanced load balancing capabilities. The high availability mode provides configuration synchronization and allows for a network-level failover in the event of unexpected outage events.

Logging and Reporting - FortiWeb’s extensive and accurate logging capabilities provide you with the specific attack details you need to pinpoint the threat as it happens. Hundreds of out-of-the-box report types allow administrators or auditors to analyze attacks, events, and traffics for regulatory compliance purposes.