Home > Fortinet > Fortinet Application Security > FortiWeb - Web Application Firewall

The FortiWeb Web Application Firewall provides specialized, layered application threat protection for medium and large enterprises, application service providers, and SaaS providers. FortiWeb Web Application Firewall protects your web-based applications and internet-facing data from attack and data loss. Using advanced techniques to provide bidirectional protection against malicious sources, application layer DoS Attacks and Sophisticated Threats like SQL injection and Cross-site scripting.

FortiWeb platforms help you prevent identity theft, financial fraud and denial of service. It delivers the technology you need to monitor and enforce government regulations, industry best practices, and internal policies.

OPENSSL/HEARTBLEED INFORMATION: FortiWeb is fully protected against the OpenSSL Information Disclosure Vulnerability (Heartbleed). It also can completely protect any application that is behind the web application firewall from the Heartbleed exploit if the FortiWeb is configured inline in either Reverse or Transparent proxy modes. For more information on these modes and how FortiWeb can protect your infrastructure from Heartbleed, please contact us or your Fortinet reseller partner.

FortiWeb Options

FortiWeb Appliance
The line of FortiWeb hardware-based Web Application Firewall appliances include the latest technologies like 10 GE SFP+ bypass ports and provide options for up to 2x 2TB drives for onboard storage. Models range in throughputs from 100 Mbps for smaller enterprise environments to 4 Gbps for high-end datacenter and MSP application protection.
FortiWeb Virtual Appliance
FortiWeb virtual Web Application Firewall appliances provide all the features of a hardware-based WAF with the flexibility of being a virtual appliance. All our FortiWeb virtual appliances support VMware ESX / ESXi 3.5 / 4.0 / 4.1 / 5.0 / 5.1, Microsoft Hyper-V, Citrix XenServer 6.2, Open Source Xen 4.2, Amazon Web Services (AWS). With 3 versions available, you can choose the option that best fits the needs of your organization with WAF throughput of 100 Mbps on the 2x CPU version to 1.0 Gbps on the 8x CPU version.


  • WAF throughput from 100 Mbps to 4 Gbps.
  • The only WAF product that provides a Vulnerability Scanner module within the web application firewall that completes a comprehensive solution for PCI DSS requirement 6.6.
  • Guarantees security of web applications and secures sensitive database content by blocking threats such as cross-site scripting, SQL injection, buffer overflows, file inclusion, denial of service, cookie poisoning, schema poisoning, and countless other attacks.
  • Aides in PCI DSS 6.6 compliance by protecting against OWASP Top 10 web application vulnerabilities.
  • Centralized Management and Administrative Domains (ADOMs) provide the abilities to manage multiple FortiWeb gateways from a single console and provide administration rights to designated domain owners to manage their own applications separately from others on the same FortiWeb device.
  • IP Reputation Service helps protect against automated web attacks by identifying access from botnets and malicious sources.
  • Bot dashboard analyzes traffic from malicious robots, crawlers, scanners and search engines.
  • Automatically and dynamically profiles user activity to create a baseline of allowed activity.
  • Network and application layer DoS/DDoS protection.
  • SSL encryption co-processing accelerates transaction times, offloads encryption functions, reduces web server processing requirements.
  • Layer 7 load balancing and content-based routing increases application speeds, improves server resource utilization and stabilizes applications.

Data Sheets:

Product Matrix

For more information or pricing, call CPU Distributing at 800-880-4200!