Last updated: · Prepared by DataKobi Engineering Team
Firewall as a Service
FWaaS (Firewall as a Service) delivers next-generation firewall capabilities as a managed service, with no hardware to buy. Rule management, log analysis and incident response are handled by the DataKobi SOC team.
Buying a firewall appliance is not enough: the rule set has to be kept current, the logs have to be read, and someone has to respond when an attack is under way. Gartner's frequently cited finding is clear: the vast majority of firewall breaches stem from misconfiguration, not from product vulnerabilities. With DataKobi FWaaS, a Fortinet-based NGFW infrastructure is managed around the clock by our certified security engineers.
Application-aware filtering, IPS signatures, GeoIP blocking and site-to-site and client VPN are standard. A monthly report gives you transparent visibility into blocked threats, rule changes and traffic.
Key features
Next-generation protection
Application control, IPS, antivirus and web filtering in a single layer.
24/7 SOC monitoring
Suspicious traffic is analyzed in real time; for a critical event, we call you by phone.
Change management
Rule requests are received by ticket, tested, and applied in a way that can be rolled back.
Redundant architecture
Active-passive cluster; takeover within seconds if a device fails.
How does a rule set decay over time, and how do we manage it?
The same story plays out on every firewall: temporary rules added over the years become permanent, access for departed staff lingers, and "any-any" exceptions pile up. Industry audits repeatedly find that 30-50% of the rules on an average enterprise firewall are unused or shadowed. At DataKobi, every rule is recorded with an owner, a justification and a review date; a rule hygiene audit is carried out every six months, and unused rules are reported and closed. As a result, the attack surface does not grow over time, and the answer to "why does this rule exist?" is always at hand during audits.
For hotels, malls and hospitals that offer internet access to guests, firewall logs are also a legal obligation: access records must be kept for two years. See our Law No. 5651 logging compliance guide for details.
Do you need a firewall, a WAF and an IPS together?
The three protect different layers and do not replace one another. The firewall (L3/L4) controls who can enter and leave the network; the IPS inspects the content of traffic and cuts off known attack patterns (exploits, C2 communication); the WAF blocks attacks specific to web applications (SQL injection, XSS) at the HTTP layer. The practical recommendation: a firewall is the foundation for every internet-facing network; add a WAF if you have an internet-facing web application or API; bring in an IPS layer if regulation applies or you run legacy systems that cannot be patched. When we combine all three under a single contract, log correlation also happens on a single SOC screen.
Technical Specifications
- Platform: FortiGate NGFW clusters
- VPN: IPsec site-to-site, SSL-VPN client access
- IPS: Daily signature updates, virtual patching
- Logs: 90 days hot, 1 year archive retention
- Reporting: Monthly threat and rule change report
Frequently Asked Questions
We already have our own firewall appliance; can we still get FWaaS?
How quickly are rule changes applied?
Does FWaaS replace a WAF?
A 30-minute discovery call with your architect
We will listen to your needs and outline the right architecture and a clear pricing framework in the same call. The first consultation is free.