Case Study: Instituto de Salud Carlos III achieves robust web-application security and data-loss prevention with Fortinet FortiWeb

Spanish public research organization chooses FortiWeb

Instituto de Salud Carlos III, Spain’s national public research organization for biomedical and health science, needed to optimize a fully virtualized IT environment by eliminating server duplication and strengthening information security. With a large and varied number of access points, the institute required web application protection for webmail and other services against brute-force logins, SQL injection and other OWASP top-10 threats, plus controls to prevent sensitive data leakage.

ISCIII deployed Fortinet’s FortiWeb appliances (two FortiWeb-400B) alongside its FortiGate infrastructure, configured as the single entry point for web apps with SSL offload and policies for brute-force, SQL injection and information-disclosure protection. Integrated by Fujitsu España, the solution simplified management, reduced complexity and freed server resources while delivering effective protection via FortiWeb’s attack-signature database—meeting the institute’s security objectives and preventing further web-based compromises.

Instituto de Salud Carlos III

Antonio José Arenas

Systems Coordination and Information Technologies Unit