After completing this course, you will be able to:
- Understand application-layer threats
- Fight defacement & DoS
- Prevent zero-day attacks without disrupting live traffic
- Give apps ex post facto compliance with OWASP Top 10 for 2013 & PCI DSS 3.0
- Discover vulnerabilities in your servers & hosted web apps for tailored, efficient protection
- Configure FortiGate together with FortiWeb for stronger HTTP and XML application security
- Prevent accidental scan circumvention, yet allow FTP, and SSH
- Configure blocking & reporting for an external FortiADC/FortiGate & FortiAnalyze
- Choose the right operating mode
- Balance load among a server pool
- Enforce SSL/TLS, authentication, & sophisticated access control for “naked” apps
- Train FortiWeb to defend your specific apps.
- Blacklist suspected hackers, DDoS participants, and content scrapers
- Troubleshoot traffic flow, including for FTP/SSH.
- Diagnose false positives & customize signatures
- Optimize performance
/