Fortinet FortiWeb 400E.
Mid-range WAF for growing web application estates.
The FortiWeb 400E steps up to a 1U rack-mount design for small-to-mid-size businesses protecting several
web applications or APIs from a single location. It carries the same full WAF feature set as the rest of the
E-series line — machine-learning anomaly detection, bot mitigation, and API protection — with more headroom
for multi-app environments.
The Fortinet FortiWeb 400E is a Web Application Firewall (WAF) that inspects
HTTP/HTTPS traffic to protect web applications and APIs from OWASP Top 10 attacks, bot abuse, and
zero-day exploits. It is typically deployed by small-to-mid-size businesses protecting several web
applications from one location.
The FortiWeb 400E is rated for up to 250 Mbps of protected WAF throughput. Actual
throughput depends on which inspection features (SSL offload, deep content inspection, bot mitigation)
are enabled.
The 400E reached End of Sale in late 2024 (~2024-12-29) and is no longer available
for new purchase; Fortinet support runs through roughly 2029-12-29. We recommend the
current-generation FortiWeb 400F for new deployments.
Yes. FortiWeb supports Active-Passive and Active-Active HA clustering so you can
eliminate single points of failure in front of production web applications.
FortiWeb models scale by throughput, port density, and storage rather than feature
set — the full WAF, bot mitigation, and API protection feature set is available across the line.
Choose the FortiWeb 400E based on your traffic volume and required interface types; see the comparison
table below for the full lineup.
Ready to deploy the FortiWeb 400E?
Our certified Fortinet engineers can help you size, configure, and deploy the right FortiWeb appliance
for your applications.
Login and Registration Form
Existing User