Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
All Products
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Web Application Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • Web Application / API Protection
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions
    • All Products

    Administration Guide

    Home FortiWeb 8.0.2 Administration Guide
    8.0.2
    8.0.3
    8.0.2
    8.0.1
    8.0.0
    7.6.7
    7.6.6
    7.6.5
    7.6.4
    7.6.3
    7.6.2
    7.6.1
    7.6.0
    7.4.12
    7.4.11
    7.4.10
    7.4.9
    7.4.8
    7.4.7
    7.4.6
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.12
    7.2.11
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.3
    6.3.23
    6.2.8
    6.1.4
    5.7.0
    5.6.1
    5.6.0
    5.6.0

    Supported features in each operation mode

    Supported features in each operation mode

    Supported features vary by the operation mode. For the broadest feature support, choose Reverse Proxy mode.

    The table below lists features that are not universally supported across all operation modes. In other words, any feature not listed here is supported by all operation modes by default.
    Feature Operation mode
    Reverse Proxy True Transparent Proxy Transparent Inspection Offline Protection WCCP
    HA (Active-passive) Yes Yes Yes Yes Yes

    HA (Active-active-Standard)

    		 Yes Yes No No No

    HA (Active-active-High Volume)

    		 Yes No No No No
    Bridges/V-zones No Yes Yes No No
    Network Firewall Yes Yes Yes No No
    Fail-to-wire No Yes Yes No Yes
    Config. Sync (Non-HA) Yes^ Yes Yes Yes Yes

    AJAX Block

    		 Yes Yes No No Yes
    Error Page Customization Yes Yes No No Yes

    FortiGate Quarantined IPs

    		 Yes Yes No No Yes

    ADFS Policy

    		 Yes No No No No

    HSTS Header

    		 Yes Yes No No Yes

    HPKP Header

    		 Yes Yes No No Yes
    OCSP Stapling Yes Yes No No Yes
    TLS 1.0/1.1/1.2 Support Yes Yes Yes~ Yes~ Yes
    TLS 1.3 Support Yes~ Yes~ No No Yes~

    Client Certificate Forwarding

    		 Yes Yes No No Yes
    Client Certificate Verification Yes Yes No No Yes
    User Authentication Yes Yes No No Yes
    HTTP/2 Support Yes Yes No No No
    SSL/TLS Offloading Yes No No No No

    Client Management

    		 Yes Yes Yes* Yes* Yes*
    HTTP Content Routing Yes No No No No

    Proxy Protocol

    		 Yes Yes Yes Yes

    No

    Traffic Mirror Yes Yes No No No
    URL Rewriting/Redirection Yes Yes No No Yes

    HTTP Authentication

    		 Yes Yes No No Yes
    Site Publish Yes Yes No No Yes
    File Compression Yes Yes No No Yes

    Waiting Room

    Yes

    Yes

    No

    No

    Yes

    Acceleration

    Yes

    Yes

    No

    No

    Yes

    Caching Yes Yes No No Yes
    CSRF Protection Yes Yes No No Yes
    HTTP Header Security Yes Yes No No Yes

    Man in the Browser Protection Policy

    		 Yes Yes No No Yes

    URL Encryption

    Yes

    Yes

    No

    No

    Yes

    Cookie Security Yes Yes No No Yes

    WebSocket Security

    		 Yes Yes No No Yes
    CORS Protection Yes Yes No No Yes

    Bot Mitigation

    		 Yes Yes No No Yes

    Biometrics Based Detection

    		 Yes Yes No No Yes

    Threshold Based Detection

    		 Yes Yes No No Yes

    Bot Deception

    		 Yes Yes No No Yes

    Known Bots

    		 Yes Yes No No Yes

    WS-Security Rule

    		 Yes Yes No No Yes

    HTTP Access Limit

    		 Yes Yes No No Yes

    Malicious IPs

    		 Yes Yes No No Yes

    HTTP Flood Prevention

    		 Yes Yes No No Yes

    TCP Flood Prevention

    		 Yes Yes No No Yes
    DoS Protection Yes Yes No No Yes

    ML based API Protection

    Yes

    Yes

    No

    No

    No

    ZTNA

    Yes

    No

    No

    No

    No

    ^ Full configuration sync is not supported in Reverse Proxy mode.

    § Only the Alert action is supported.

    * Requires that your web application have session IDs. For details, see Session Key.

    ~ DSA-encrypted server certificates are not supported.

    ¶ Diffie-Hellman key exchanges are not supported.

    For the specific cipher suites that FortiWeb supports in each operating mode and protocol, see Supported cipher suites & protocol versions.
    Previous
    Next

    Supported features in each operation mode

    Supported features in each operation mode

    Supported features vary by the operation mode. For the broadest feature support, choose Reverse Proxy mode.

    The table below lists features that are not universally supported across all operation modes. In other words, any feature not listed here is supported by all operation modes by default.
    Feature Operation mode
    Reverse Proxy True Transparent Proxy Transparent Inspection Offline Protection WCCP
    HA (Active-passive) Yes Yes Yes Yes Yes

    HA (Active-active-Standard)

    		 Yes Yes No No No

    HA (Active-active-High Volume)

    		 Yes No No No No
    Bridges/V-zones No Yes Yes No No
    Network Firewall Yes Yes Yes No No
    Fail-to-wire No Yes Yes No Yes
    Config. Sync (Non-HA) Yes^ Yes Yes Yes Yes

    AJAX Block

    		 Yes Yes No No Yes
    Error Page Customization Yes Yes No No Yes

    FortiGate Quarantined IPs

    		 Yes Yes No No Yes

    ADFS Policy

    		 Yes No No No No

    HSTS Header

    		 Yes Yes No No Yes

    HPKP Header

    		 Yes Yes No No Yes
    OCSP Stapling Yes Yes No No Yes
    TLS 1.0/1.1/1.2 Support Yes Yes Yes~ Yes~ Yes
    TLS 1.3 Support Yes~ Yes~ No No Yes~

    Client Certificate Forwarding

    		 Yes Yes No No Yes
    Client Certificate Verification Yes Yes No No Yes
    User Authentication Yes Yes No No Yes
    HTTP/2 Support Yes Yes No No No
    SSL/TLS Offloading Yes No No No No

    Client Management

    		 Yes Yes Yes* Yes* Yes*
    HTTP Content Routing Yes No No No No

    Proxy Protocol

    		 Yes Yes Yes Yes

    No

    Traffic Mirror Yes Yes No No No
    URL Rewriting/Redirection Yes Yes No No Yes

    HTTP Authentication

    		 Yes Yes No No Yes
    Site Publish Yes Yes No No Yes
    File Compression Yes Yes No No Yes

    Waiting Room

    Yes

    Yes

    No

    No

    Yes

    Acceleration

    Yes

    Yes

    No

    No

    Yes

    Caching Yes Yes No No Yes
    CSRF Protection Yes Yes No No Yes
    HTTP Header Security Yes Yes No No Yes

    Man in the Browser Protection Policy

    		 Yes Yes No No Yes

    URL Encryption

    Yes

    Yes

    No

    No

    Yes

    Cookie Security Yes Yes No No Yes

    WebSocket Security

    		 Yes Yes No No Yes
    CORS Protection Yes Yes No No Yes

    Bot Mitigation

    		 Yes Yes No No Yes

    Biometrics Based Detection

    		 Yes Yes No No Yes

    Threshold Based Detection

    		 Yes Yes No No Yes

    Bot Deception

    		 Yes Yes No No Yes

    Known Bots

    		 Yes Yes No No Yes

    WS-Security Rule

    		 Yes Yes No No Yes

    HTTP Access Limit

    		 Yes Yes No No Yes

    Malicious IPs

    		 Yes Yes No No Yes

    HTTP Flood Prevention

    		 Yes Yes No No Yes

    TCP Flood Prevention

    		 Yes Yes No No Yes
    DoS Protection Yes Yes No No Yes

    ML based API Protection

    Yes

    Yes

    No

    No

    No

    ZTNA

    Yes

    No

    No

    No

    No

    ^ Full configuration sync is not supported in Reverse Proxy mode.

    § Only the Alert action is supported.

    * Requires that your web application have session IDs. For details, see Session Key.

    ~ DSA-encrypted server certificates are not supported.

    ¶ Diffie-Hellman key exchanges are not supported.

    For the specific cipher suites that FortiWeb supports in each operating mode and protocol, see Supported cipher suites & protocol versions.
    Previous
    Next