Fortinet FWN-1000E FortiWeb Web Application and API Protection, 140W

Features:

• Machine learning that detects and blocks threats while minimizing false positives
• Advanced Bot Mitigation effectively protect web assets without imposing friction on legitimate users
• Protection for APIs, including those used to support mobile applications
• Enhanced protection with Fortinet Security Fabric integration
• Simplified attack investigation with Threat Analytics
• Third-party integration and virtual patching
• Deployment Options:
  • Reverse Proxy
  • Inline Transparent
  • True Transparent Proxy
  • Offline Sniffing
  • WCCP
• Web Security:
  • AI-based Machine Learning
  • Automatic profiling (white list)
  • Web server and application signatures (black list)
  • IP address reputation
  • IP address geolocation
  • HTTP RFC compliance
  • Native support for HTTP/2
  • WebSocket protection and signature enforcement
  • Man in the Browser (MiTB) protection
• Application Attack Protection:
  • OWASP Top 10
  • Cross Site Scripting
  • SQL Injection
  • Cross Site Request Forgery
  • Session Hijacking
  • Built-in Vulnerability Scanner
  • Third-party scanner integration (virtual patching)
  • File upload scanning with AV and sandbox
• Security Services:
  • Malware detection
  • Virtual patching
  • Protocol validation
  • Brute force protection
  • Cookie signing and encryption
  • Threat scoring and weighting
  • Syntax-based SQLi and XSS detection
  • HTTP Header Security
  • Custom error message and error code handling
  • Operating system intrusion signatures
  • Known threat and zero-day attack protection
  • L4 Stateful Network Firewall
  • DoS prevention
  • Advanced correlation protection using multiple security elements
  • Data leak prevention
  • Web Defacement Protection
• Application Delivery:
  • Layer 7 server load balancing
  • URL Rewriting
  • Content Routing
  • HTTPS/SSL Offloading
  • HTTP Compression
  • Caching
• Authentication:
  • Active and passive authentication
  • Site Publishing and SSO
  • RSA Access for 2-factor authentication
  • LDAP, RADIUS, and SAML support
  • SSL client certificate support
  • CAPTCHA and Real Browser Enforcement (RBE)
• API Protection:
  • Machine Learning based API
  • Discovery and Protection
  • XML and JSON protocol conformance
  • CI/CD integration
  • Schema verification
  • API Gateway
  • Web services signatures
• Bot Mitigation:
  • Machine Learning based Bot
  • Mitigation
  • Biometrics Based Detection
  • Threshold Based Detection
  • Bot Deception
  • Know Bots
• Management and Reporting:
  • Web user interface
  • Command line interface
  • FortiView graphical analysis and reporting tools
  • Central management for multiple
  • FortiWeb devices
  • Active/Active HA Clustering
  • REST API
  • Centralized logging and reporting
  • User/device tracking
  • Real-time dashboards
  • Bot dashboard
  • OWASP Top 10 attack categorization
  • Geo IP Analytics
  • SNMP, Syslog and Email Logging/Monitoring
  • Administrative Domains with full RBAC
• Other:
  • IPv6 Ready
  • HTTP/2 to HTTP 1.1 translation
  • HSM Integration
  • Seamless PKI integration
  • Attachment scanning for
  • ActiveSync/MAPI applications, OWA, and FTP
  • High Availability with Config-sync for syncing across multiple active appliances
  • Auto setup and default configuration settings for simplified deployment
  • Setup Wizards for common applications and databases
  • Preconfigured for common Microsoft applications; Exchange, SharePoint, OWA
  • OpenStack support for FortiWeb VMs
  • Predefined security policies for Drupal and Wordpress applications
  • WebSockets support

FortiWeb is a web application firewall (WAF) that protects web applications and APIs from attacks that target known and unknown exploits and helps maintain compliance with regulations. Using machine learning to model each application, FortiWeb defends applications from known vulnerabilities and from zero-day threats. High performance physical, virtual appliances and containers deploy on-site or in the public cloud to serve any size of the organization - from small businesses to service providers, carriers, and large enterprises. Multi layer protection against the OWASP Top 10 application attacks including machine learning to defend against known and unknown attacks. Protect your APIs from malicious actors by automatically enforcing positive and negative security policies. Seamlessly integrate API security into your CI/CD pipeline. Protect websites, mobile applications, and APIs from automated attacks with advanced bot mitigation that accurately differentiates between good bot traffic and malicious bots. FortiWeb Bot Mitigation provides the visibility and control you need without slowing down your users with unnecessary captchas or challenges.