Fortinet WAF

Using AI-enhanced multi-layer and correlated detection methods, Fortinet Web Application Firewall - FortiWeb - defends applications from known vulnerabilities and from zero-day threats. Whether to simply meet compliance standards or to protect mission-critical hosted applications, FortiWeb's web application firewalls provide advanced features that defend web applications from known and zero-day threats.

Using an advanced multi-layered and correlated approach, Fortinet FortiWeb provides complete security for external and internal web-based applications from the OWASP Top 10 and many other threats. At the heart of FortiWeb are its dual-layer AI-based detection engines that intelligently detect threats with nearly no false positive detections.

The FortiWeb Web Application Firewall achieved an overall block rate of 99.85% in the 2014 NSS Labs web application firewall test due to the intelligence delivered through the web application security, antivirus, and anti-botnet security services from FortiGuard Labs. FortiWeb’s machine learning accurately detects anomalies and more importantly identifies which are threats.

Unlike prevailing auto-learning detection models used by other WAF vendors that treat every anomaly as a threat, FortiWeb’s precision nearly eliminates false positive detections and catches attack types that others can’t. FortiWeb’s integration with FortiGate and FortiSandbox extend basic WAF protections through synchronization and sharing of threat information to both deeply scan suspicious files and share infected internal sources.

FortiWeb provides maximum flexibility in supporting virtual and hybrid environments. The virtual versions of FortiWeb support all the same features as hardware-based devices and can be deployed in VMware, Microsoft Hyper-V, Citrix XenServer, Open Source Xen, VirtualBox, KVM, and Docker platforms. Fortinet’s FortiWeb is also available for Amazon Web Services, Microsoft Azure, and Google Cloud.