Introduction
The Leaseweb hardware WAF (Web Application Firewall) consists of a FortiWeb hardware appliance from Fortinet that is for the exclusive use of a customer.
FortiWeb is a web application firewall (WAF) that protects hosted web applications and API endpoints from attacks that target known and unknown exploits.
Using multi-layered and correlated detection methods, FortiWeb defends applications from known vulnerabilities and zero-day threats.
The Web Application Security Service from FortiGuard Labs uses information based on the latest application vulnerabilities, bots, suspicious URL and data patterns, and specialized heuristic detection engines to keep your applications safe.
FortiWeb also provides a machine-learning function that enables it to automatically detect malicious web traffic.
In addition to detecting known attacks, the feature can detect potential unknown zero-day attacks to provide real-time protection for web servers.
FortiWeb allows you to configure these features:
- Vulnerability scanning and patching
- IP reputation, web application attack signatures, credential stuffing defense, anti-virus, and FortiWeb Cloud Sandbox powered by FortiGuard
- Real-time attack insights and reporting with advanced visual analytics tools
- Behavioral attack detection
- Advanced false positive and negative detection avoidance
Feature bundles
Leaseweb provides the following Bundles on the FortiWeb device
| Feature / Service | Standard Bundle | Advanced Bundle | Enterprise Bundle |
| FortiCare Premium Support | ✅ Included | ✅ Included | ✅ Included |
| FortiWeb Security Service | ✅ Included | ✅ Included | ✅ Included |
| FortiGuard Antivirus (AV) | ✅ Included | ✅ Included | ✅ Included |
| IP Reputation Service | ✅ Included | ✅ Included | ✅ Included |
| Credential Stuffing Defense | ❌ Not Included | ✅ Included | ✅ Included |
| Threat Analytics | ❌ Not Included | ✅ Included | ✅ Included |
| Advanced Bot Protection | ❌ Not Included | ❌ Not Included | ✅ Included |
| Data Loss Prevention (DLP) | ❌ Not Included | ❌ Not Included | ✅ Included |
| Monthly Bot Protection Requests | ❌ Not Applicable | ❌ Not Applicable | ✅ 850K–1.25M requests/month |
| Zero-Day Threat Prevention | ✅ Included | ✅ Included | ✅ Included |
| API Security & Schema Validation | ✅ Included | ✅ Included | ✅ Included |
| Application Layer DDoS Protection | ✅ Included | ✅ Included | ✅ Included |
| Advanced Logging & Reporting | ✅ Included | ✅ Included | ✅ Included |
Architecture
The commonly positioned place for the FortiWeb appliance is inline with your existing firewall to intercept all incoming client connections and redistribute them to your servers.
FortiWeb has TCP- and HTTP-specific firewalling capabilities. Because it’s not designed to provide security to non-HTTP/HTTPS web applications, it should be deployed behind a firewall such as FortiGate that focuses on security for other protocols, including FTP and SSH.
How to set up and configure your WAF
After your order, Leaseweb will start the delivery of the device.
The delivery will include assigning the public and internal IPs, setting up the operation mode (Reverse Proxy as standard) and creating a user in the FortiCare Support Portal for any issues and problems.
Once deployed, you will receive the login details in the Customer Portal and will be able to login to the device.
In the FortiWeb Management console page or via a terminal emulator, you can can configure the device to match your requirements and business rules.
Follow the steps as described in the Fortinet Adminstration Guide to get started, see https://docs.fortinet.com/product/fortiweb/8.0
WAF support
Supporting a Web Application Firewall requires deep, specialized knowledge of your specific application and website environment, something best handled directly by the security vendor. For this reason, our customers are directed straight to Fortinet for setup, policy, and configuration queries. During delivery you receive an account on the Fortinet Support Portal.
In the Fortinet Support Portal, you will have direct access to experts and will be able to ask questions on configuration or any issue you may encounter.
Any hardware issues you may face are handled by Leaseweb support.
