Firewalls usually protect the lower levels of a network infrastructure, leaving Layer 7 applications needing personal or credit card information relatively open, leaving room for specialty Web application firewalls from a number of unified threat management equipment makers. As noted in this IT World report, Fortinet's latest Web firewall, the ForitWeb 3000C, takes the company to a bigger market than the traditional small and mid-sized companies it usually appeals to.
“Enterprises might appreciate FortiWeb’s ability to automatically adapt to user patterns, she said. “Web application firewalls take a significant amount of expertise to develop policies,” she said, so an auto-learn function could help reduce the workload of security administrators.
“According to Soen, the biggest driver of the Web application firewall market comes from the credit card industry, which several years ago set the tough PCI standard for organizations wanting to use their services. Either organizations have to perform vulnerability code reviews or install a Web application firewall, the industry has said, to avoid facing sanctions.”