Fortinet FortiWeb VM01 Threat Analytics Service, 1-Year (FC-10-VVM01-579-02-12)

Individual WAF alerts describe single events; threat scoring connects them into attacker profiles. FC-10-VVM01-579-02-12 adds the Threat Analytics Service to FortiWeb VM01, a subscription that cross-correlates web application security events across requests and sessions, identifies coordinated attack patterns, and assigns threat scores to source entities. Teams operating a VM01 deployment gain a way to prioritize response: act on the highest-scored attackers rather than triaging every individual alert from the WAF event log.

Overview

FC-10-VVM01-579-02-12 activates the Threat Analytics Service on a FortiWeb VM01 instance for one year. The service processes security events generated by the VM01 and applies correlation logic to identify attackers who spread activity across multiple requests, source IPs, or sessions to evade per-request detection. Each identified threat actor receives a score that reflects the volume, severity, and pattern of their observed activity. Security teams can use these scores to configure automated blocking thresholds or to guide manual investigation. Because correlation operates at the service level rather than on individual request evaluations, Threat Analytics surfaces threat patterns that would otherwise require a SIEM or manual log review to detect. The subscription is designed to work alongside the FortiWeb Security Service and does not replace per-request signature enforcement.

Who it suits

Small and mid-size application teams running FortiWeb VM01 who lack a dedicated SIEM or SOC analyst benefit most from Threat Analytics, since the service automates the correlation work that would otherwise require manual log review. API-heavy environments where attackers probe endpoints at low request rates are particularly well matched: credential-stuffing campaigns, scraping operations, and slow-rate vulnerability scans may not trigger per-request blocks, but their aggregated behaviour will accumulate a threat score that crosses a response threshold. Security engineers who report on threat posture to management can use threat-score output as a structured risk indicator, replacing raw alert counts with a ranked view of active attacker interest against the protected application.

Buying from DataCenter360.ca

DataCenter360.ca is an authorized Fortinet Select Partner. FC-10-VVM01-579-02-12 is available by worldwide electronic delivery with no physical shipment or geographic restriction. The subscription activates through Fortinet’s support portal and runs for one year from the activation date. Organizations adding Threat Analytics to an existing FortiWeb VM01 platform licence can contact DataCenter360.ca to align this subscription’s term expiry with their other FortiWeb add-ons, reducing the number of separate annual renewals to manage.

Frequently asked questions