Fortinet enhances its FortiWeb Web Application Firewall

Fortinet has announced the latest version of its FortiWeb Web Application Firewall (WAF) software release 6.0, making it the only major WAF security vendor to use machine learning for behavioural-based threat detection in web applications. Unprotected web applications have become attractive targets for cybercriminals looking for easy entry points into enterprise networks. Web application vulnerabilities can lead to data breaches or shut down mission-critical systems, which is why many organizations are choosing to leverage web application firewalls (WAFs) to protect their network.

The newly-introduced capabilities in the FortiWeb Web Application Firewall address these issues by introducing machine learning capabilities for better threat detection, faster response times and easier management. FortiWeb now uses a two-layer approach of AI-based machine learning and statistical probabilities to detect anomalies and threats separately. The first layer builds the mathematical model for each learned parameter and then triggers anomalies for abnormal requests. The second will then verify if the anomaly is an actual threat or if it is a benign variance.

Key features of the new software

· The new innovations to FortiWeb provide a dramatic increase in detecting web application threats with nearly 100-per cent accuracy.

· Increased threat detection accuracy enables faster response times for “set and forget” automated blocking, eliminating the need for staff reviews of alerts before taking action.

· Seamless integration with the Fortinet Security Fabric delivers advanced threat protection with file scanning of application attachments, simplified deployment and shared threat intelligence, as well as integration with third party services for extensive vulnerability protection.

FortiWeb is available in four convenient form factors including hardware appliances, virtual machines for all the major hypervisor platforms, public cloud options for AWS and Azure, and a hosted cloud-based solution.

Rajesh Maurya, Regional Vice-President, India & SAARC, Fortinet, says, “With a staggering 48 per cent of data breaches being caused by hacking web application vulnerabilities, it’s clear that cybercriminals are increasingly targeting public and internal web applications. Current technologies such as intrusion prevention systems and existing web application security solutions only provide basic protection against these threats. Fortinet has combined our advanced AI-based machine learning capabilities with our FortiWeb WAF to protect web-based applications from attacks targeting known and unknown exploits with near 100-per cent threat detection accuracy. It also benefits from automated management and seamless integration with the Fortinet Security Fabric.”