Using an advanced multi-layered and correlated approach, FortiWeb provides complete security for your external and internal web-based applications from the OWASP Top 10 and many other threats. Using IP Reputation services, botnets and other malicious sources are automatically screened out, before they can do any damage. Dos detection and prevention keeps your applications safe from being overloaded by Layer 7 Dos attacks. FortiWeb checks, that the request hasn't been manipulated, using HTTP RFC validation. Requests are checked against FortiWeb's signatures to compare them against known attack types to make sure they're clean. Any files, attachments or code are scrubbed with FortiWeb's built-in antivirus and antimalware services. FortiWeb's auto-learning behavioral detection engine reviews all requests, that have passed the tests for known attacks. If the request is outside of user or automatic parameters, the request is blocked. Lastly, FortiWeb provides a correlation engine, where multiple events from different security layers are correlated to make a more accurate decision and help protect against the sophisticated attacks. This combination provides excellent protection from any web application attack, including zero-day threats.
Vulnerability scanning
FortiWeb's vulnerability scanning dives deep into all application elements and provides in-depth results of potential weaknesses in your applications. Vulnerability scanning is always up-to-date with regular updates from FortiGuard labs.
FortiWeb user tracking
FortiWeb monitors users authenticating to web applications and tracks all their subsequent activity. All traffic and attack logs are attached with the username allowing rule enforcement and forensics at the user level.
Virtual patching
FortiWeb provides integration with third-party vulnerability scanners to provide dynamic virtual patches to security issues in application environments. Vulnerabilities, found by the scanner, are quickly and automatically turned into security rules by FortiWeb to protect the application until, developers can address them in the application code.
Blazing fast SSL offloading
FortiWeb is able to process multiple web transactions by providing hardware accelerated SSL offloading. With near real-time decryption and encryption using ASIC-based chipsets, FortiWeb can easily detect threats, that target secure applications.
