Fortinet 13 FortiWeb 5.0 Patch 6 Administration Guide
Introduction
Welcome, and thank you for selecting Fortinet products for your network.
FortiWeb hardware and FortiWeb-VM virtual appliance models are available that are suitable for
medium and large enterprises, as well as service providers.

Benefits

FortiWeb is designed specifically to protect web servers.
FortiWeb web application firewalls (WAF) provide specialized application layer threat detection
and protection for HTTP or HTTPS services such as:
Apache Tomcat
•ngi
nx
•Microsoft IIS
JBoss
•IBM Lotus Domino
Microsoft SharePoint
Microsoft Outlook Web App (OWA)
RPC and ActiveSync for Microsoft Exchange Server
• Joomla
•WordPress
and many others
FortiWeb’s integrated web-specific vulnerability scanner can drastically reduces challenges
associated with protecting regulated and confidential data by detecting your exposure to the
latest threats, especially the OWASP Top 10.
In addition, FortiWeb’s HTTP firewall and denial-of-service (DoS) attack-prevention protect your
Internet-facing web-based applications from attack and data theft. Using advanced techniques
to provide bidirectional protection against sophisticated threats like SQL injection and
cross-site scripting (XSS), FortiWeb helps you prevent identity theft, financial fraud, and
corporate espionage. FortiWeb delivers the technology you need to monitor and enforce
government regulations, industry best practices, and internal security policies, including
firewalling and patching requirements from PCI DSS.
FortiWeb’s application-aware firewalling and load balancing engine can:
Secure HTTP applications that are often gateways into valuable databases
Prevent and reverse defacement
Improve application stability
Monitor servers for downtime & connection load
Reduces response times
Accelerate SSL/TLS *
Accelerate compression/decompression
Rewrite content on the fly