Fortinet FortiAppSec Cloud Advanced Bot Protection Service
Safeguard Your Digital Ecosystem from Automated Threats

Use Cases:

Capabilities

Biometric-based Detection

Advanced Bot Protection Service leverages state-of-the-art biometric-based detection algorithms to accurately differentiate between human users and automated bots. By analyzing unique biometric attributes, such as keystroke dynamics, mouse movements, and touch interactions, our solution effectively identifies and blocks malicious bot activity while allowing genuine users seamless access.

Monitor Client Events

Closely monitors client-side events, including mouse movements (scrolls, clicks) and keyboard clicks, to detect suspicious behavior patterns associated with bot activity. By analyzing these events in real-time, Advanced Bot Protection Service effectively mitigates various automated threats, such as click fraud and content scraping, ensuring the integrity of your web applications.

Device Fingerprinting

Advanced Bot Protection Service creates a comprehensive profile of each user’s device using advanced device fingerprinting techniques, including multiple hardware and software attributes. This enables accurate identification of malicious bots attempting to impersonate legitimate users, allowing you to block them proactively and safeguard your web assets.

Detecting Crawler-Specific Attributes

Advanced Bot Protection Service utilizes advanced algorithms to detect crawler-specific attributes, such as user agent strings and HTTP header information. Our solution identifies and distinguishes between legitimate search engine crawlers and malicious bots by analyzing these characteristics, providing granular control over bot access.

Checking Browser and OS Inconsistencies

Examines browser and operating system (OS) inconsistencies exhibited by users, identifying potential bot activity. Advanced Bot Protection Service effectively blocks bots attempting to exploit vulnerabilities in outdated browsers or fraudulent OS versions by comparing user-agent strings, screen resolutions, and other attributes.

Bot Rules Analysis

Advanced Bot Protection Service offers a robust bot rules analysis engine, allowing you to define custom rules to identify and mitigate specific bot behaviors. With extensive rule customization options, our solution enables fine-tuning bot detection policies, ensuring optimal protection against known and emerging threats.

Historical Analytics

Advanced Bot Protection Service provided comprehensive historical analytics on HTTP attempts, including success and failed counts over time. By visualizing bot activity trends, you gain valuable insights into attack patterns, allowing you to enhance your security posture and proactively adapt your mitigation strategies.

Action

Advanced Bot Protection Service empowers you with various flexible measures to respond to bot threats effectively. Whether allowing legitimate users seamless access, blocking malicious bots, or employing CAPTCHA challenges for suspicious activity, our solution offers granular control over bot mitigation actions to suit your specific security requirements.

Security Fabric

Advanced Bot Protection Service delivers broad protection and visibility to FortiAppSec, FortiADC, and FortiWeb, whether virtual, in the cloud, or on-premises. It can automatically synchronize security actions to enforce policies and coordinate automated responses to threats detected anywhere in your web application.

Deployment

Seamless Integration with FortiAppSec Cloud, FortiADC, and FortiWeb

Advanced Bot Protection Service seamlessly integrates with FortiAppSec Cloud, FortiADC, and FortiWeb, strengthening your overall security infrastructure and providing enhanced bot mitigation capabilities. Here’s how the integration works:

Traffic Flow and JS insertion

Traffic flows from the client to the web application through the FortiAppSec Cloud, FortiADC, and FortiWeb, which acts as a reverse proxy. This flow allows FortiAppSec Cloud, FortiADC, and FortiWeb to intercept and inspect incoming requests, providing an additional layer of security before they reach your web applications.

Telemetric Information

The client and the FortiAppSec Cloud, FortiADC, and FortiWeb (using the fabric connector) sends telemetric information to the FortiGuard Advanced Bot Protection, which helps gather relevant data about client interactions, device fingerprinting, and other comprehensive analyses to detect bot activity

Data Analysis

Advanced Bot Protection Service analyzes incoming requests to determine whether the client is a human or a bot. By leveraging sophisticated algorithms and data telemetry information, Advanced Bot Protection Service accurately evaluates the nature of the request and identifies potential bot activity

Action

Based on the analysis results, Advanced Bot Protection Service sends instructions back to FortiAppSec Cloud, FortiADC, and FortiWeb. These instructions guide handling the request, including whether to block, display a Captcha challenge, or allow the request to proceed.

Documentation:

Download the Fortinet FortiCloud Data Sheet (PDF).