A shield for websites and web applications. It blocks attacks aimed at the application itself.
It sits in front of a web application and inspects requests and responses. It uses signatures and machine learning to block attacks like SQL injection, cross-site scripting and API abuse.
Public portals for visits, deposits and inmate messaging connect outsiders to inmate records. Administrators need visibility of who’s using them and control over abuse, such as scraping of inmate data.
- Protects public inmate lookup, visit and deposit sites.
- Limits automated scraping of inmate data.
- Logs requests for investigations.
- Virtual patching blocks exploitation until the app is fixed.
- Machine learning models normal behavior.
- API schema enforcement rejects unexpected requests.
- Bot mitigation reduces scraping of inmate data.
| Control | Priority | How this helps |
|---|---|---|
| SC-7Boundary Protection | P1 | Adds a protected layer in front of web apps. |
| SI-4System Monitoring | P1 | Monitors app traffic. |
| SI-3Malicious Code Protection | P1 | Can scan uploads for malware. |
Fortinet’s FIPS page shows an older 140-2 FortiWeb entry. Check current status if it handles CJI.
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table