Fortinet FortiWeb VM04
Web Application Firewall

Overview:

FortiWeb virtual appliances allow you to mitigate blind spots by implementing critical web security controls within your virtual infrastructure. They also allow you to rapidly provision security infrastructure whenever and wherever it is needed. Moreover, FortiWeb virtual appliances feature all of the web application security and networking services common to traditional hardware-based FortiWeb appliances.

FortiWeb virtual appliances fully support all deployment modes supported by the hardware version – Reverse Proxy, Transparent Inspection, True Transparent Proxy and Sniffer (out-of-band).

FortiWeb Virtual Appliance Features & Benefits:

• Aids in PCI DSS 6.6 compliance by protecting against OWASP top 10 web application vulnerabilities
• Provides multiple protection layers to prevent attacks against vulnerable web applications: Application signatures, HTTP RFC compliance, auto-learn based violations and data leak prevention
• Automatically and dynamically profiles user activity to create a baseline of allowed activity
• Network and application layer DoS/DDoS protection
• Real time data analysis provides an analytics interface that helps organizations analyze their web application usage from multiple vectors and maps requests to their geographic location
• Integrated Web vulnerability scanner provides analysis of existing application vulnerabilities complementing web application firewall for PCI DSS.

Web Application Firewall Secures web applications to help customers meet compliance requirements

Web Vulnerability Scanner Scans, analyzes and detects web application vulnerabilities

Application Delivery Assures availability and accelerates performance of critical web applications

Need for PCI DSS Compliance

Network security threats have evolved to target web-based applications that are the interface to confidential information stored on back-end databases. In response to major security breaches, the credit card industry created the PCI standards. However, ensuring any web-application is free of vulnerabilities is complicated by the ongoing discovery of new vulnerabilities, patching challenges, code revisions, time-to-market pressures, the inherent difficulty of vulnerability identification, and even access to the application code.

Unmatched Protection for Web Applications

The FortiWeb family of web application firewalls provides specialized, layered application threat protection for medium and large enterprises, application service providers, and SaaS providers. FortiWeb web application protects your web-based applications and internetfacing data from attack and data loss. Using advanced techniques to provide bidirectional protection against sophisticated threats like SQL injection and cross-site scripting, FortiWeb platforms help you prevent identity theft, financial fraud and corporate espionage. FortiWeb delivers the technology you need to monitor and enforce government regulations, industry

Accelerate Deployment and Lower Costs

FortiWeb significantly reduces deployment costs by consolidating Web Application Firewall, web traffic acceleration, and application traffic balancing into a single device with no per-user pricing. It drastically reduces the time required to protect your regulated internetfacing data and eases the challenges associated with policy enforcement and regulatory compliance. Its intelligent, application-aware load-balancing and data compression and optimization engine increases application performance, improves resource utilization and application stability while reducing server response times.

Geo IP Analytics and Security

FortiWeb's real time data analysis provides an analytic interface that helps organizations analyze their web application usage from multiple vectors, maps requests to their geographic location and allows blocking access from specific countries.