FortiGate Virtual Appliance allows you to mitigate blind spots by implementing critical security controls within your virtual infrastructure. It also allows you to rapidly provision security infrastructure whenever and wherever it is needed. FortiGate Virtual Appliance features advanced security and networking services. You can deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized management platform.
Auto-learn security profiling
Automatically and dynamically build a security model of protected applications by continuously monitoring real-time user activity. Eliminate the need for manual configuration of security profiles.
Application layer vulnerability protection
Provide out-of-the-box protection for complex attacks such as SQL injection, cross-site scripting, CSRF and many others. FortiWeb is able to create rules down to the single application element.
Data leak prevention
Extended monitoring and protection for credit card leakage and application information disclosure by tightly monitoring all outbound traffic. Allow customers to create their own granular signatures and DLP patterns together with predefined rules for any type of events.
Web defacement protection
Unique capabilities for monitoring protected applications for any defacement and ability to automatically and quickly revert to stored version.
Vulnerability assessments
Automatically scans and analyzes the protected web applications and detects security weaknesses, potential application known and unknown vulnerabilities to complete a comprehensive solution for PCI DSS.
HTTP RFC compliance validation
FortiWeb blocks any attacks manipulating the HTTP protocol by maintaining strict RFC standards to prevent attacks such as encoding attacks, buffer overflows and other application specific attacks.
IPv6 ready
Simplify network configuration with dual-stack support for both IPv4 to IPv6 and IPv6 to IPv4 communication.
Authentication offload
Offload your web server authentication to the FortiWeb platform while supporting different authentication schemes.
Predefined policies
Allows for one click deployments and greatly eases the process of policy creation.
High availability
The high availability mode provides configuration synchronization and allows for a network-level failover in the event of unexpected outage events. Integrated bypass interfaces provide additional fail open capability for single box deployments.
