The Fortinet FortiWeb 100D is a Web Application Firewall (WAF) that inspects HTTP/HTTPS traffic to protect web applications and APIs from OWASP Top 10 attacks, bot abuse, and zero-day exploits. It is typically deployed by small businesses or branch offices protecting a single website or application.

The FortiWeb 100D is rated for up to 25 Mbps of protected WAF throughput. Actual throughput depends on which inspection features (SSL offload, deep content inspection, bot mitigation) are enabled.

The 100D reached End of Sale on 2021-01-14 and is no longer available for new purchase; Fortinet support runs through 2026-01-14. We recommend the current-generation FortiWeb 100F or a FortiWeb-VM for new deployments.

Yes. FortiWeb supports Active-Passive and Active-Active HA clustering so you can eliminate single points of failure in front of production web applications.

FortiWeb models scale by throughput, port density, and storage rather than feature set — the full WAF, bot mitigation, and API protection feature set is available across the line. Choose the FortiWeb 100D based on your traffic volume and required interface types; see the comparison table below for the full lineup.