Fortinet FortiWeb 600F FortiGuard Data Loss Prevention, 1-Year (FC-10-FV60F-589-02-12)

Blocking inbound attacks is a core WAF function, but outbound HTTP and HTTPS responses can expose sensitive data if an application is misconfigured or compromised. This one-year FortiGuard Data Loss Prevention subscription adds outbound data inspection to the FortiWeb 600F using cloud-maintained DLP signatures — the only FortiWeb 600F service subscription focused exclusively on preventing sensitive data from leaving through the WAF layer.

Overview

FortiGuard DLP provides a regularly updated library of data patterns covering regulated and sensitive data categories: PCI-DSS-relevant payment card numbers, US Social Security Numbers, Canadian Social Insurance Numbers, HIPAA-scope healthcare record identifiers, and other personally identifiable data formats. The FortiWeb 600F inspects outbound response bodies against these patterns, blocking or alerting when a response would expose sensitive data to an unauthorized requester.

Because pattern definitions are maintained by FortiGuard Labs and pushed as subscription updates, coverage for new regulatory data types or regional identifier formats is added without manual rule authoring on the appliance. SSL/TLS inspection must be enabled on the FortiWeb 600F for the service to inspect encrypted HTTPS response bodies; cleartext HTTP responses are inspected without additional configuration.

Who it suits

Organizations under PCI-DSS, HIPAA, or privacy regulations that require demonstrable outbound data controls will find this subscription addresses a specific compliance requirement at the WAF layer. E-commerce sites, healthcare portals, and financial services applications that process or display sensitive data through web front ends are the primary use case.

Security architects building defense-in-depth for environments where application-level DLP is inconsistent across services can use the FortiWeb 600F as a uniform enforcement point. The WAF sits in the request path for all covered web applications, making it a natural location for a single outbound data inspection policy.

Buying from DataCenter360.ca

DataCenter360.ca supplies this subscription as an electronic license with a one-year term, available to customers worldwide. For compliance-driven purchases, we can provide an invoice that identifies the service by full name for audit documentation. If you are assembling a FortiWeb 600F subscription bundle covering security signatures, sandbox, and DLP together, contact us for a combined quote.

Frequently asked questions