Fortinet FortiWeb 400E - Security appliance - with 5 years 24x7 FortiCare and FortiWeb Advanced bundle - 1GbE - 1U - rack-mountable

• Vulnerability scanning
  FortiWeb's vulnerability scanning dives deep into all application elements and provides in-depth results of potential weaknesses in your applications. Vulnerability scanning is always up-to-date with regular updates from FortiGuard labs.
• FortiWeb user tracking
  FortiWeb monitors users authenticating to web applications and tracks all their subsequent activity. All traffic and attack logs are attached with the username allowing rule enforcement and forensics at the user level.
• Virtual patching
  FortiWeb provides integration with third-party vulnerability scanners to provide dynamic virtual patches to security issues in application environments. Vulnerabilities, found by the scanner, are quickly and automatically turned into security rules by FortiWeb to protect the application until, developers can address them in the application code.
• Blazing fast SSL offloading
  FortiWeb is able to process multiple web transactions by providing hardware accelerated SSL offloading. With near real-time decryption and encryption using ASIC-based chipsets, FortiWeb can easily detect threats, that target secure applications.

Using an advanced multi-layered and correlated approach, FortiWeb provides complete security for your external and internal web-based applications from the OWASP Top 10 and many other threats. Using IP Reputation services, botnets and other malicious sources are automatically screened out, before they can do any damage. Dos detection and prevention keeps your applications safe from being overloaded by Layer 7 Dos attacks. FortiWeb checks, that the request hasn't been manipulated, using HTTP RFC validation. Requests are checked against FortiWeb's signatures to compare them against known attack types to make sure they're clean. Any files, attachments or code are scrubbed with FortiWeb's built-in antivirus and antimalware services. FortiWeb's auto-learning behavioral detection engine reviews all requests, that have passed the tests for known attacks. If the request is outside of user or automatic parameters, the request is blocked. Lastly, FortiWeb provides a correlation engine, where multiple events from different security layers are correlated to make a more accurate decision and help protect against the sophisticated attacks. This combination provides excellent protection from any web application attack, including zero-day threats.

• High performance with high throughput
• Behavioral attack detection
• FortiGuard IP Reputation, Attack Signatures, FortiSandbox Cloud, and antivirus
• Correlated, multi-layer threat scanning
• User scoring and session tracking
• Simplified deployment with FortiGate integration
• Polling of FortiGate quarantined IP addresses
• Integration with FortiSandbox for APT detection
• Transparent user validation for botnet protection
• Out-of-the-box protection against automated attacks
• Network and application layer Dos protection
• Authentication, site publishing and SSO