Fortinet FortiWeb 4000D
Web Application Firewall

Features & Benefits:

Enhanced Protection with IP Reputation Service

As the internet evolves hackers have begun using orchestrated attacks on organizations’ infrastructure. Attackers now use a wealth of methods to infect innocent hosts, and control these infections through organized botnets in order to launch automated phishing, spamming, and DDoS attacks.

The FortiGuard IP Reputation Service for FortiWeb platforms aggregates data from locations and sources around the world that collaborate to provide up to date information about threatening sources. With feeds from distributed network gateways combined with world class research done from FortiGuard Labs, organizations can stay up to date and proactively block attacks.

Protect your organization from multiple attack vectors

FortiGuard’s IP Reputation Service categorizes and blocks threats from sources associated with:

• DDoS: Sources identified taking part of DDoS attacks
• Phishing: Sources identified taking part of Phishing attacks or hosting Phishing web sites
• Anonymous Proxies: anonymized traffic arriving from paid or anonymous proxies used to disguise real client identity FortiWeb
• Malicious Sources: hosts known to be infected with malicious software
• Spammers: hosts known to send spam

Ultimate Protection and Monitoring

• Auto-Learn Security Profiling - Automatically and dynamically build a security model of protected applications by continuously monitoring realtime user activity. Eliminate the need for manual configuration of security profiles.
• Application Layer Vulnerability Protection - Provide out of the box protection for the most complex attacks such as SQL Injection, Cross Site Scripting, CSRF and many others. Together with the Auto Learn profiling system and advanced abilities, FortiWeb is able to create rules down to the single application element.
• DoS Protection - Multiple protection policies for network and application layer denial of service threats. Sophisticated mechanism helps identify and block automated attacks.
• Data Leak Prevention - Extended monitoring and protection for credit card leakage and application information disclosure by tightly monitoring all outbound traffic. Allow customers to create their own granular signatures and DLP patterns together with predefined rules for any type of events.
• Site Publishing and SSO - Publish Microsoft applications such as Outlook Web Access and SharePoint with authentication delegation and single sign on integration.
• Web Defacement Protection - Unique capabilities for monitoring protected applications for any defacement and ability to automatically and quickly revert to stored version.
• Vulnerability Assessments - Automatically scans and analyzes the protected web applications and detects security weaknesses, potential application known and unknown vulnerabilities to complete a comprehensive solution for PCI DSS.
• HTTP RFC Compliance Validation - FortiWeb blocks any attacks manipulating the HTTP protocol by maintaining strict RFC standards to prevent attacks such as encoding attacks, buffer overflows and other application specific attacks.
• Antivirus - Scan file uploads using Fortinet’s Antivirus engine with regular FortiGuard updates.

Flexible Deployment and Efficient Management

• Multiple deployment options - Transparent Inspection and True Transparent Proxy, Reverse Proxy and Offline modes allow deploying FortiWeb into any environment.
• Geo IP and Bot Analysis - Map requests to their geographic location and analyze traffic from malicious robots, crawlers, scanners and search engines.
• IPv6 Ready - Simplify network configuration with dual-stack support for both IPv4 to IPv6 and IPv6 to IPv4 communication.
• Authentication Offload - Offload your web server authentication to the FortiWeb platform while supporting different authentication schemes such as Local, LDAP, NTLM and RADIUS.
• Pre-defined Policies - Allows for one click deployments and greatly eases the process of policy creation.
• High Availability - The high availability mode provides configuration synchronization and allows for a network-level failover in the event of unexpected outage events. Integrated bypass interfaces provide additional fail open capability for single box deployments.
• Centralized Logging and Reporting - Centrally manage all logs and reports from multiple FortiWeb gateways with FortiAnalyzer integration.
• Virtualization - Provides a Virtual Appliance for VMware ESX/ESXi, Citrix XenServer, Open Source Xen, and Amazon AWS platforms mitigating blind spots in virtual environments.

Application Delivery

• Application Aware Load Balancing - Intelligent, application aware layer 7 load balancing eliminates performance bottlenecks, reduces deployment complexity and provides seamless application integration.
• Data Compression - Allows efficient bandwidth utilization and response time to users by compressing data retrieved from servers.
• SSL Offload - With the integration of award winning FortiASIC™ technology, FortiWeb is able to process tens of thousands of web transactions by providing hardware accelerated SSL offloading.

Aids in Compliance

• PCI DSS compliance - FortiWeb is the only product that provides a Vulnerability Scanner module within the web application firewall that completes a comprehensive solution for PCI DSS requirement 6.6.
• Protects against OWASP top 10 - Incorporating a positive and a negative security module based on bidirectional traffic analysis and an embedded behavioral based anomaly detection engine FortiWeb fully protects against the OWASP TOP 10.
• FortiGuard Labs - Utilizing Fortinet’s renowned FortiGuard service, FortiWeb customers get up to date dynamic protection from the Fortinet Global Security Research Team, which researches and develops protection against known and potential application security threats.

Specifications:

Deployment:

FortiWeb Deployment Options

• Reverse Proxy – Provides additional capabilities such as URL rewrite and advanced routing capabilities.
• Inline Transparent – Layer two bridge that does not require network level redesign.
• True Transparent Proxy – Layer two deployment with no need for network level redesign. The traffic is internally terminated to provide more functionality than pure inspection.
• Offline Sniffing – Monitors environments with zero network footprint and latency.

Services & Support:

FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

Download the Fortinet FortiWeb Series Datasheet (PDF).