Fortinet FortiWeb VM16 FortiGuard Data Loss Prevention, 1-Year (FC-10-VVM16-589-02-12)

Data exfiltration through web application responses is a risk that inbound WAF signature engines alone do not address. The FortiGuard Data Loss Prevention subscription for FortiWeb VM16 adds an outbound inspection layer that scans HTTP and HTTPS responses for recognizable sensitive data patterns. When a match is detected, FortiWeb VM16 can block the response, redact the sensitive content, or generate an alert for SOC review.

Overview

The FortiGuard DLP Service activates on FortiWeb VM16, Fortinet’s 16-vCPU virtual WAF tier running on VMware, KVM, Hyper-V, or public cloud, to inspect the body and headers of HTTP and HTTPS responses generated by protected applications. The service applies pattern libraries covering PCI DSS card numbers, PII fields such as government-issued ID numbers, and HIPAA-relevant data types. When the inspection engine identifies a match, the configured policy action takes effect: blocking the response, redacting the matched data, or writing an event to the WAF log. This service is focused specifically on what leaves the application, rather than what attempts to attack it, complementing the inbound threat detection provided by the FortiWeb Security Service.

Who it suits

Organizations subject to PCI DSS, HIPAA, or data protection regulations that require demonstrated controls over sensitive data leaving web-facing systems are well served by this subscription. Development environments that expose APIs with database backends, where misconfigured queries may inadvertently surface PII in API responses, are a common deployment scenario. The service also supports incident response by providing a logged record of any detected sensitive data exposures across the subscription period, which can be used as audit evidence.

Buying from DataCenter360.ca

This 1-year FortiGuard Data Loss Prevention subscription is delivered electronically through DataCenter360.ca, an authorized Fortinet partner with no geographic restriction on fulfillment. Procurement teams requiring a formal quote before purchase can request one from DataCenter360.ca directly. Volume pricing is available for organizations deploying DLP across multiple FortiWeb instances.

Frequently asked questions