Fortinet introduces three members to FortiWeb web app

US-based security software provider Fortinet has introduced FortiWeb-4000C, FortiWeb-3000C FSX and FortiWeb-400C, three members to its FortiWeb web application firewall product family. The product line is designed to address the needs of enterprises, service providers and mid-sized organisations that must protect web applications from security breaches and data leakage. Fortinet is also introducing enhancements to the FortiWeb 4.0 MR3 OS that provide logging and reporting, security and configuration capacities. The FortiWeb-4000C, targeting data centres that must protect web applications such as those containing data subject to PCI-DSS guidelines, is a web application firewall appliance that supports 70,000 transactions-per-second and 2 Gbps throughput. The FortiWeb-4000C is hardware-based acceleration for enforcing data loss prevention (DLP) policies that are designed for the prevention of credit card and personal identification information theft. The FortiWeb-3000C FSX retains all of the features and gains of the FortiWeb-3000C appliance with the addition of a fibre bypass card to support data centres requiring fibre support. The appliance features an additional fibre bypass interface supporting fibre SX interfaces. The FortiWeb-3000C, FSX offers deployment options with intelligent layer-seven load balancing and hardware- and software-based acceleration. The FortiWeb-400C is a web application firewall appliance with faster CPUs and higher memory. All FortiWeb models are designed to secure web applications and protect sensitive database content by blocking threats such as cross-site scripting, SQL injection, buffer overflows, file inclusion, denial-of-service and cookie poisoning. They also feature a web vulnerability scanner and aid in PCI DSS 6.6 compliance by protecting against the Open Web Application Security Project's (OWASP). 

The FortiWeb 4.0 MR3 OS deployed across the FortiWeb product family features enhancements in three areas including logging and reporting, security and configuration and ease-of-use. For improved logging and reporting, FortiWeb 4.0 MR3 provides integration with Fortinet's FortiAnalyzer, offering an enhanced means of centrally managing all logs and reports from multiple FortiWeb physical or virtual appliances and other Fortinet product lines. Real-time data analysis is enhanced through a FortiWeb analytics interface that enables organisations to analyse web server usage from a Hit, Flow and Attack point of view. FortiWeb 4.0 MR3 features a protection layer that provides network and application DoS policies. Using new algorithms contained in these DoS policies, the FortiWeb product family can analyse requests originating from users to determine their legitimacy or if they are being triggered by automated attacks associated with Advanced Persistent Threats (APT) or news strains of malware. The operating software also provides period blocking, which enhances protection by enabling administrators to block individual users for specified periods of time instead of a specific connection. A FortiWeb user interface is also featured in the FortiWeb 4.0 MR3 upgrade, enabling configuration and interface that follows the enhancement of the company's FortiGate product line. The FortiWeb-4000C, FortiWeb-3000C FSX and FortiWeb-400C are now available.