FWB CM BASE Fortinet Central Manager VM for 10 FortiWeb Devices

 

overview

 

FortiWeb virtual management appliance. Manages up to 10 FortiWeb appliances. Designed for VMware vSphere platforms.

Web Applications are an Easy Target

Although Payment Card Industry Data Security Standards (PCI DSS) compliance is the main reason most organizations deploy Web Application Firewalls (WAFs), many now realize that unprotected web applications are the easiest point of entry for even unsophisticated hackers. Externally-facing web applications are vulnerable to attacks such as cross site scripting, SQL injection, and Layer 7 Denial of Service (DoS). Internal web applications are even easier to compromise if an attacker is able to gain access to an internal network where many organizations think they’re protected by their perimeter network defenses. Custom code is usually the weakest link as development teams have the impossible task of staying on top of every new attack type. However, even commercial code is vulnerable as many organizations don’t have the resources to apply patches and security fixes as soon as they’re made available. Even if you apply every patch and have an army of developers to protect your systems, zero-day attacks can leave you defenseless and only able to respond after the attack has occurred.

Comprehensive Web Application Security with FortiWeb

Using an advanced multi-layered and correlated approach, FortiWeb provides complete security for your external and internal web-based applications from the OWASP Top 10 and many other threats. Using IP Reputation services, botnets and other malicious sources are automatically screened out before they can do any damage. DoS detection and prevention keeps your applications safe from being overloaded by Layer 7 DoS attacks. FortiWeb checks that the request hasn’t been manipulated using HTTP RFC validation. Requests are checked against FortiWeb’s signatures to compare them against known attack types to make sure they’re clean. Any files, attachments or code are scrubbed with FortiWeb’s built-in antivirus and antimalware services. FortiWeb’s auto-learning behavioral detection engine reviews all requests that have passed the tests for known attacks. If the request is outside of user or automatic parameters, the request is blocked. Lastly, FortiWeb provides a correlation engine where multiple events from different security layers are correlated to make a more accurate decision and help protect against the most sophisticated attacks. This combination provides near-100% protection from any web application attack, including zero-day threats that signature file-based systems can’t detect.

 

Industry-Leading Web Application Firewall Performance

• High-performance with up to 20 Gbps of throughput
• Included vulnerability scanner
• Included Layer 7 server load balancing
• Behavioral attack detection
• FortiGuard IP Reputation, Attack Signatures, and Antivirus
• Correlated, multi-layer threat scanning
• User Scoring and Session Tracking
• Simplified deployment with FortiGate Integration
• Polling of FortiGate Quarantined IP addresses
• Integration with FortiSandbox for APT detection
• Transparent user validation for botnet protection
• Out-of-the-box protection against automated attacks
• Network and application layer DoS protection
• Authentication, site publishing and SSO

Specifications

 

 

 

Deployment

 

FortiWeb Deployment Options

• Reverse Proxy – Provides additional capabilities such as URL rewrite and advanced routing capabilities.
• Inline Transparent – Layer two bridge that does not require network level redesign.
• True Transparent Proxy – Layer two deployment with no need for network level redesign. The traffic is internally terminated to provide more functionality than pure inspection.
• Offline Sniffing – Monitors environments with zero network footprint and latency.

  

 

Services & Support

 

FortiGuard® Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

 

FortiCare™ Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with return and replace hardware support or 24x7 Comprehensive Support with advanced hardware replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and a 90-day limited software warranty.

 

FortiCare Support Services:

 

Available:

 

• 24/7/365 FortiCare Web-based support
• 24x7 telephone-based technical support
• 1-year limited hardware warranty
• Technical account management service
• Professional services
• 90-day limited software warranty