Call a Specialist Today! 800-886-5787 Free Shipping! Free Shipping!

Fortinet FortiWeb 4000F
Web Application and API Protection

Fortinet FortiWeb 4000F


Fortinet Products
FortiWeb 4000F Base Appliance
Fortinet FortiWeb 4000F Appliance
2 x 40GE bypass ports, 10 x 10GE SFP+ ports (2 bypass), 8 x GE RJ45 bypass ports, 2 x GE management ports, dual AC power supplies, 2x960GB SSD storage
#FWB-4000F
List Price: $240,000.00
Our Price: $216,000.00
Call For Lowest Price!
FortiWeb 4000F Hardware plus FortiCare Premium and FortiWeb Standard Bundle
FortiWeb-4000F Hardware plus 1 Year FortiCare Premium and FortiWeb Standard Bundle
#FWB-4000F-BDL-934-12
List Price: $360,000.00
Our Price: $324,000.00
Call For Lowest Price!
FortiWeb-4000F Hardware plus 3 Year FortiCare Premium and FortiWeb Standard Bundle
#FWB-4000F-BDL-934-36
List Price: $600,000.00
Our Price: $540,000.00
Call For Lowest Price!
FortiWeb-4000F Hardware plus 5 Year FortiCare Premium and FortiWeb Standard Bundle
#FWB-4000F-BDL-934-60
List Price: $840,000.00
Our Price: $756,000.00
Call For Lowest Price!

Click here to jump to more pricing!

Overview:

FortiWeb is a web application firewall (WAF) that protects web applications and APIs from attacks that target known and unknown exploits and helps maintain compliance with regulations.

Using machine learning to model each application, FortiWeb defends applications from known vulnerabilities and from zero-day threats. High performance physical, virtual appliances and containers deploy on-site or in the public cloud to serve any size of the organization — from small businesses to service providers, carriers, and large enterprises.

Web Application Protection

Multi layer protection against the OWASP Top 10 application attacks including machine learning to defend against known and unknown attacks.

API Protection

Protect your APIs from malicious actors by automatically enforcing positive and negative security policies. Seamlessly integrate API security into your CI/CD pipeline.

Bot Mitigation

Protect websites, mobile applications, and APIs from automated attacks with advanced bot mitigation that accurately differentiates between good bot traffic and malicious bots. FortiWeb Bot Mitigation provides the visibility and control you need without slowing down your users with unnecessary captchas or challenges.

Overview with FortiWeb

Key Benefits:

  • Machine learning that detects and blocks threats while minimizing false positives
  • Advanced Bot Mitigation effectively protect web assets without imposing friction on legitimate users
  • Protection for APIs, including those used to support mobile applications
  • Enhanced protection with Fortinet Security Fabric integration
  • Visual analytics tools for advanced threat insights
  • Third-party integration and virtual patching

Highlights:

Machine Learning Improves Detection and Drives Operational Efficiency

FortiWeb’s multi-layer approach provides two key benefits: superior threat detection and improved operational efficiency

FortiWeb’s ability to detect anomalous behavior relative to the specific application being protected enables the solution to block unknown, never-before-seen exploits, providing your best protection against zero-day attacks targeting your application.

machine learning  with FortiWeb

Comprehensive Web Application Security

Using an advanced multi-layered and correlated approach, FortiWeb provides complete security for your web-based applications from the OWASP Top 10 and many other threats

API Protection

FortiWeb integrates out of the box policies together with an automatically generated positive security model policy that is based on your organization’s schema specification (OpenAPI, XML and generic JSON are supported schemas) to protect against API exploits

Bot Mitigation

FortiWeb protects against automated bots, webs scrapers, crawlers, data harvesting, credential stuffing and other automated attacks to protect your web assets, mobile APIs, applications, users and sensitive data. Combining machine learning with policies such as threshold based detection, Bot deception and Biometrics based detection with superior good bot identification FortiWeb is able to block malicious bot attacks while reducing friction on legitimate users.

Deep Integration into the Fortinet Security Fabric and Third-Party Scanners

FortiWeb’s integration with FortiGate and FortiSandbox extend basic WAF protections through synchronization and sharing of threat information to both deeply scan suspicious files and share infected internal sources. FortiWeb also provides integration with leading third-party vulnerability scanners including Acunetix, HP WebInspect, IBM AppScan, Qualys, ImmuniWeb and WhiteHat to provide dynamic virtual patches to security issues in application environments

Integration with FortiWeb

Solving the Challenge of False Threat Detections

FortiWeb’s AI-based machine learning addresses false positive and negative threat detections without the need to tediously manage whitelists and fine-tune threat detection policies. With near 100% accuracy, the dual layer machine learning engines detect anomalies and then determine if they are threats unlike other methods that block all anomalies regardless of their intent

Advanced Graphical Analysis and Reporting

FortiWeb includes a suite of graphical analysis tools called FortiView. Similar to other Fortinet products such as FortiGate, FortiWeb gives administrators the ability to visualize and drill-down into key elements of FortiWeb such as server/IP configurations, attack and traffic logs, attack maps, OWASP Top 10 attack categorization, and user activity.

Secured by FortiGuard

Fortinet’s Award-winning FortiGuard Labs is the backbone for many of FortiWeb’s layers in its approach to application security. Offered as five separate options, you can choose the FortiGuard services you need to protect your web applications. FortiWeb IP address reputation service protects you from known attack sources like botnets, spammers, anonymous proxies, and sources known to be infected with malicious software.

VM and Public Cloud Options

FortiWeb provides maximum flexibility in supporting your virtual and hybrid environments. The virtual versions of FortiWeb support all the same features as our hardwarebased devices and can be deployed in VMware, Microsoft Hyper-V, Citrix XenServer, Open Source Xen, VirtualBox, KVM, and Docker platforms. FortiWeb is also available for AWS, Azure, Google Cloud, and Oracle Cloud as a VM, and as WAF as a Service on AWS, Azure, and Google Cloud

Features:


Deployment options

  • Reverse Proxy
  • Inline Transparent
  • True Transparent Proxy
  • Offline Sniffing
  • WCCP

Web Security

  • AI-based Machine Learning
  • Automatic profiling (white list)
  • Web server and application signatures (black list)
  • IP Reputation
  • IP Geolocation
  • HTTP RFC compliance
  • Native support for HTTP/2
  • OpenAPI 3.0 verification
  • WebSocket protection and signature enforcement
  • Man in the Browser (MiTB) protection

Application Attack Protection

  • OWASP Top 10
  • Cross Site Scripting
  • SQL Injection
  • Cross Site Request Forgery
  • Built-in Vulnerability Scanner
  • Third-party scanner integration (virtual patching)
  • File upload scanning with AV and sandbox

Security Services

  • Web services signatures
  • XML and JSON protocol conformance
  • Malware detection
  • Virtual patching
  • Protocol validation
  • Brute force protection
  • Cookie poisoning protection
  • Threat scoring and weighting
  • Syntax-based SQLi detection
  • HTTP Header Security
  • L4 Stateful Network Firewall
  • Custom error message and error code handling
  • Operating system intrusion signatures
  • Known threat and zero-day attack protection
  • DoS prevention
  • Advanced correlation protection using multiple security elements
  • Data leak prevention
  • Web Defacement Protection

Application Delivery

  • Layer 7 server load balancing
  • URL Rewriting
  • Content Routing
  • HTTPS/SSL Offloading
  • HTTP Compression
  • Caching

Authentication

  • Active and passive authentication
  • Site Publishing and SSO
  • RSA Access for 2-factor authentication
  • LDAP and RADIUS support
  • SSL client certificate support
  • CAPTCHA and Real Browser Enforcement (RBE)

Management and Reporting

  • Web user interface
  • Command line interface
  • FortiView graphical analysis and reporting tools
  • Active/Active HA Clustering
  • Central management for multiple devices
  • REST API
  • Centralized logging and reporting
  • User/device tracking
  • Real-time dashboards
  • Bot dashboard
  • OWASP Top 10 attack categorization
  • Geo IP Analytics
  • SNMP, Syslog and email Logging/Monitoring
  • Administrative Domains with full RBAC

Other

  • IPv6 Ready
  • HTTP/2 to HTTP 1.1 translation
  • HSM Integration
  • Seamless PKI integration
  • Attachment scanning for ActiveSync/MAPI applications, OWA, and FTP
  • High Availability with Config-sync for syncing across multiple active appliances
  • Auto setup and default configuration settings for simplified deployment
  • Setup Wizards for common applications and databases
  • OpenStack support for FortiWeb VMs
  • Preconfigured for common Microsoft applications; Exchange, SharePoint, OWA
  • Predefined security policies for Drupal and Wordpress applications
  • WebSockets support

Specifications:


  FortiWeb 1000E FortiWeb 2000F FortiWeb 3000F FortiWeb 4000F
Hardware

10/100/1000 Interfaces (RJ45 ports)

6 (4 bypass), 4x SFP GE (non-bypass)

4GE (4 bypass), 4 SFP GE

8GE (8 bypass)

8GE (8 bypass)

10G BASE-SR SFP+ Ports

2

4

10 (2 bypass)

10 (2 bypass)

40G QSFP

-

-

-

2 bypass

SSL/TLS Processing

Hardware

Hardware

Hardware

Hardware

USB Interfaces

2

2

2

2

Storage

2x 1 TB

2 x 480 GB SSD

2 x 960 GB SSD

2 x 960 GB SSD

Form Factor

2U

2U

2U

2U

Power Supply

Dual Hot Swappable

Dual Hot Swappable

Dual Hot Swappable

Dual Hot Swappable

System Performance

Throughput

1.3 Gbps

5 Gbps

10 Gbps

70 Gbps

Latency

<5ms

<5ms

<5ms

<5ms

High Availability

Active/Passive, Active/Active Clustering

Active/Passive, Active/Active Clustering

Active/Passive, Active/Active Clustering

Active/Passive, Active/Active Clustering

Application Licenses

Unlimited

Unlimited

Unlimited

Unlimited

Administrative Domains

64

96

96

192

Dimensions

Height x Width x Length (inches)

3.46 x 16.93 x 19.73

3.5 x 17.2 x 20.8

3.5 x 17.5 x 22.6

3.5 x 17.5 x 22.6

Height x Width x Length (mm)

88 x 430 x 501.20

88 x 438 x 530

88 x 444 x 574

88 x 444 x 574

Weight

28 lbs (12.8 kg)

33 lbs (15 kg)

56.2 lbs (22.5 kg)

56.2 lbs (22.5 kg)

Rack Mountable

Yes, with flanges

Yes

Yes

Yes

Environment

Power Required

100–240V AC, 50–60 Hz

100–240V AC, 60–50 Hz

100–240V AC, 60–50 Hz

100–240V AC, 60–50 Hz

Maximum Current

100V/5A, 240V/3A

120V/6A, 240V/3A

120V/2.6A, 240V/1.3A

120V/3A, 240V/1.5A

Power Consumption (Average)

140 W

200 W

200 W

248.5 W

Heat Dissipation

471 BTU/h

1433 BTU/h

1045.5 BTU/h

1219.8 BTU/h

Operating Temperature

32–104°F (0–40°C)

32–104°F (0–40°C)

32–104°F (0–40°C)

32–104°F (0–40°C)

Storage Temperature

-4–158°F (-20–70°C)

-4–158°F (-20–70°C)

-4–158°F (-20–70°C)

-4–158°F (-20–70°C)

Humidity

5–90% non-condensing

5–90% non-condensing

5–90% non-condensing

5–90% non-condensing

Compliance

Safety Certifications

FCC Class A Part 15, RCM, VCCI, CE, UL/CB/cUL

FCC Class A Part 15, RCM, VCCI, CE, UL/CB/cUL

FCC Class A Part 15, RCM, VCCI, CE, UL/CB/cUL

FCC Class A Part 15, RCM, VCCI, CE, UL/CB/cUL

Actual performance values may vary depending on the network traffic and system configuration. Performance metrics were observed using a Dell PowerEdge R710 server (2x Intel Xeon E5504 2.0 GHz 4 MB Cache) running VMware ESXi 5.5 with 4 GB of vRAM assigned to the 4 vCPU and 8 vCPU FortiWeb Virtual Appliance and 4 GB of vRAM assigned to the 2 vCPU FortiWeb Virtual Appliance.

All performance values are “up to” and vary depending on the system configuration.

Documentation:

Download the Fortinet FortiWeb Series Datasheet (PDF).

Pricing Notes:

Fortinet Products
FortiWeb 4000F Base Appliance
Fortinet FortiWeb 4000F Appliance
2 x 40GE bypass ports, 10 x 10GE SFP+ ports (2 bypass), 8 x GE RJ45 bypass ports, 2 x GE management ports, dual AC power supplies, 2x960GB SSD storage
#FWB-4000F
List Price: $240,000.00
Our Price: $216,000.00
Call For Lowest Price!
FortiWeb 4000F Hardware plus FortiCare Premium and FortiWeb Standard Bundle
FortiWeb-4000F Hardware plus 1 Year FortiCare Premium and FortiWeb Standard Bundle
#FWB-4000F-BDL-934-12
List Price: $360,000.00
Our Price: $324,000.00
Call For Lowest Price!
FortiWeb-4000F Hardware plus 3 Year FortiCare Premium and FortiWeb Standard Bundle
#FWB-4000F-BDL-934-36
List Price: $600,000.00
Our Price: $540,000.00
Call For Lowest Price!
FortiWeb-4000F Hardware plus 5 Year FortiCare Premium and FortiWeb Standard Bundle
#FWB-4000F-BDL-934-60
List Price: $840,000.00
Our Price: $756,000.00
Call For Lowest Price!
FortiWeb 4000F Standard Bundle Subscription
FortiWeb-4000F 1 Year Standard Bundle (FortiCare Premium plus AV, FortiWeb Security Service, and IP Reputation)
#FC-10-FW4KF-934-02-12
List Price: $120,000.00
Our Price: $103,896.00
Call For Lowest Price!
FortiWeb-4000F 3 Year Standard Bundle (FortiCare Premium plus AV, FortiWeb Security Service, and IP Reputation)
#FC-10-FW4KF-934-02-36
List Price: $360,000.00
Our Price: $311,688.00
Call For Lowest Price!
FortiWeb-4000F 5 Year Standard Bundle (FortiCare Premium plus AV, FortiWeb Security Service, and IP Reputation)
#FC-10-FW4KF-934-02-60
List Price: $600,000.00
Our Price: $519,480.00
Call For Lowest Price!
FortiWeb 4000F FortiCare Premium Support
FortiWeb-4000F 1 Year FortiCare Premium Support
#FC-10-FW4KF-247-02-12
List Price: $48,000.00
Our Price: $41,558.40
Call For Lowest Price!
FortiWeb-4000F 3 Year FortiCare Premium Support
#FC-10-FW4KF-247-02-36
List Price: $144,000.00
Our Price: $124,675.20
Call For Lowest Price!
FortiWeb-4000F 5 Year FortiCare Premium Support
#FC-10-FW4KF-247-02-60
List Price: $240,000.00
Our Price: $207,792.00
Call For Lowest Price!
FortiWeb 4000F Subscription Services
FortiWeb-4000F 1 Year IP Reputation Service
#FC-10-FW4KF-140-02-12
List Price: $48,000.00
Our Price: $41,558.40
Call For Lowest Price!
FortiWeb-4000F 1 Year FortiGuard AV Services
#FC-10-FW4KF-100-02-12
List Price: $48,000.00
Our Price: $41,558.40
Call For Lowest Price!
FortiWeb-4000F 1 Year FortiWeb Application Security Service
#FC-10-FW4KF-137-02-12
List Price: $48,000.00
Our Price: $41,558.40
Call For Lowest Price!
FortiWeb-4000F 1 Year FortiWeb Cloud Sandbox
#FC-10-FW4KF-123-02-12
Our Price: $48,000.00
Call For Lowest Price!
FortiWeb-4000F 1 Year FortiGuard Credential Stuffing Defense
#FC-10-FW4KF-143-02-12
List Price: $48,000.00
Our Price: $41,558.40
Call For Lowest Price!
FortiWeb-4000F Hardware plus FortiCare Premium and FortiWeb Advanced Bundle
FortiWeb-4000F Hardware plus 1 Year FortiCare Premium and FortiWeb Advanced Bundle
#FWB-4000F-BDL-580-12
List Price: $432,000.00
Our Price: $388,800.00
Call For Lowest Price!
FortiWeb-4000F Hardware plus 3 Year FortiCare Premium and FortiWeb Advanced Bundle
#FWB-4000F-BDL-580-36
List Price: $816,000.00
Our Price: $734,400.00
Call For Lowest Price!
FortiWeb-4000F Hardware plus 5 Year FortiCare Premium and FortiWeb Advanced Bundle
#FWB-4000F-BDL-580-60
List Price: $1,200,000.00
Our Price: $1,080,000.00
Call For Lowest Price!
FortiWeb-4000F Advanced Bundle
FortiWeb-4000F 1 Year Advanced Bundle (FortiCare Premium plus AV, FortiWeb Security Service, IP Reputation, FortiSandbox Cloud Service, Credential Stuffing Defense Service and Threat Analytics)
#FC-10-FW4KF-580-02-12
List Price: $192,000.00
Our Price: $166,233.60
Call For Lowest Price!
FortiWeb-4000F 3 Year Advanced Bundle (FortiCare Premium plus AV, FortiWeb Security Service, IP Reputation, FortiSandbox Cloud Service, Credential Stuffing Defense Service and Threat Analytics)
#FC-10-FW4KF-580-02-36
List Price: $576,000.00
Our Price: $498,700.80
Call For Lowest Price!
FortiWeb-4000F 5 Year Advanced Bundle (FortiCare Premium plus AV, FortiWeb Security Service, IP Reputation, FortiSandbox Cloud Service, Credential Stuffing Defense Service and Threat Analytics)
#FC-10-FW4KF-580-02-60
List Price: $960,000.00
Our Price: $831,168.00
Call For Lowest Price!
FortiWeb-4000F Threat Analytics Service
FortiWeb-4000F 1 Year Threat Analytics Service
#FC-10-FW4KF-579-02-12
List Price: $48,000.00
Our Price: $41,558.40
Call For Lowest Price!
email subscribe

Enjoy Exclusive Weekly Deals from Virtual Graffiti