My main use case is for security and routing.
Fortinet FortiWeb Web Application Firewall WAF (PAYG)
Fortinet Inc.External reviews
External reviews are not included in the AWS star rating for the product.
Easy to setup, stable and scalable solution
What is our primary use case?
What is most valuable?
It is good for web tracking applications.
What needs improvement?
There is room for improvement in pricing, and actually, the price is a bit higher because on the same terms I purchased, the support subscription is so high.
For how long have I used the solution?
I've been using it for a long time. It has been more than three years now.
What do I think about the stability of the solution?
Stability is guaranteed stability. I'm okay with stability. I would rate the stability an eight out of ten.
What do I think about the scalability of the solution?
I would rate the scalability an eight out of ten.
How are customer service and support?
I am okay with the support. The support's subscription is high.
Which solution did I use previously and why did I switch?
pfSense is open-source and free, while FortiWeb is subscription-based. Both are manageable, but FortiWeb's features scale up connections per second, depending on the payment plan.
How was the initial setup?
I would rate my experience with the initial setup a nine out of ten, where one is difficult, and ten is easy.
It took us two days to set up.
What about the implementation team?
I deployed it myself. I just got a reference from the old system, and I configured it.
What's my experience with pricing, setup cost, and licensing?
I would rate the pricing a seven out of ten, where one is cheap and ten is expensive.
What other advice do I have?
Overall, I would rate it a solid eight out of ten.
User-friendly, stable and efficiently secure VMs and applications
What is our primary use case?
I initially deployed it for my company, but now I administrate it for a client.
What is most valuable?
We use it to secure VMs and applications in Azure. It protects against DDoS attacks.
It's very user-friendly.
What needs improvement?
There is room for improvement in the support. The response time could be faster. Plus, they ask for a lot of information. It is not easy to get support.
In future releases, I would like to see added antivirus features that provide user-based activity indicators. For example, if a user downloads a large number of files or connects frequently, the WAF could flag this activity for investigation.
For how long have I used the solution?
I have been using it for three months now.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
It is a scalable product.
How are customer service and support?
For some initial issues. It's good, but not during the first year. FortiWeb could improve response time and first-level support clarity.
What about the implementation team?
The first implementation with an expert took two hours. My solo attempt took three weeks.
What other advice do I have?
Take time to test it thoroughly. Consider buying an existing solution if needed.
Overall, I would rate the solution an eight out of ten.
An easy-to-deploy solution with machine learning features that reduce false positives
What is most valuable?
The product has some unique features. The machine learning feature reduces the false positives. The tool detects zero-day attacks. It has an in-built antivirus, which most WAF tools do not have.
What needs improvement?
Advanced configurations require high skill. FortiWeb team should work on making it easier. The documentation is poor. The tool must provide advanced and robust DDoS protection.
For how long have I used the solution?
I have been using the solution for almost six years.
How are customer service and support?
The technical support is fine. The support team gives delayed responses if there is a complex issue.
Which solution did I use previously and why did I switch?
I have worked with F5 Advanced WAF. It is a robust product and is suitable for complex environments. It is flexible. However, it depends on other solutions for inbuilt security and packet inspection.
How was the initial setup?
The initial setup is easy. It requires less intervention.
What's my experience with pricing, setup cost, and licensing?
I recommend the product to others. Overall, I rate the solution an eight out of ten.
An useer-friendly solution with easy configuration
What is most valuable?
The tool's HTTP traffic, website fixing, and blocking are fantastic. It is user-friendly with easy configuration.
What needs improvement?
FortiWeb Web Application Firewall needs to improve its performance.
What do I think about the scalability of the solution?
FortiWeb Web Application Firewall is scalable.
How are customer service and support?
The tool's tech support is good.
How was the initial setup?
The tool's installation is straightforward.
What's my experience with pricing, setup cost, and licensing?
FortiWeb Web Application Firewall is not expensive.
What other advice do I have?
I rate the solution an eight out of ten.
Helps us to view all of our logs on one platform
What is our primary use case?
What is most valuable?
The fact that I can log into the platform and see everybody, see logs, authentication failure, and see everything on one platform, is the most valuable feature.
Emails can be configured, and text messages can be sent via the mobile app.
It is a cheap solution.
What needs improvement?
The user interface can be improved. Also, there are authentication failures that need improvement in the next release.
For how long have I used the solution?
How are customer service and support?
The technical support team is bad.
What other advice do I have?
I would rate the overall solution a eight out of ten due to the support and user interface issues.
Provides efficient integration features and has good scalability
What is our primary use case?
We use FortiWeb Web Application Firewall for security features while working in the financial area.
What is most valuable?
The product has good integration features.
What needs improvement?
The product's integration with Cisco needs improvement.
For how long have I used the solution?
I have been using FortiWeb Web Application Firewall for 30 years.
What do I think about the stability of the solution?
The platform's stability is good, with good assessment and low-level design.
What do I think about the scalability of the solution?
FortiWeb Web Application Firewall's scalability is good.
Which solution did I use previously and why did I switch?
I have used Palo Alto and Check Point before.
How was the initial setup?
The product is complicated to set up. The deployment time depends on the customer. Some customers have a deployment time of six to seven months, while others have a deployment time of two months. The process involves an assessment for a month, then a low-level design for another month.
What's my experience with pricing, setup cost, and licensing?
FortiWeb has a good presence because of its price.
What other advice do I have?
We are integrators with all the product certifications. We have a good team. We prefer assessment and low-level design before starting with the project.
I rate FortiWeb Web Application Firewall an eight out of ten.
A cost-effective firewall that remains stable while providing security to its users
What is our primary use case?
In my company, we use FortiWeb Web Application Firewall (WAF) for security.
What is most valuable?
FortiWeb is a small tool that can be used by those of our customers who use Fortinet FortiGate as their firewall. I will use Barracuda Email Protection for any customer who uses a firewall from a solution provider other than Fortinet FortiGate.
What needs improvement?
The product lacks features offered by enterprise-level firewall tools. The solution needs to offer more enterprise features like other brands.
It would be great if FortiWeb Web Application Firewall (WAF) had something like a wizard to allow for more integrations with other popular firewall products like Fortinet, Palo Alto, and so on.
For how long have I used the solution?
I have been using FortiWeb Web Application Firewall (WAF) for three years. I use the solution's latest version.
What do I think about the stability of the solution?
Stability-wise, I rate the solution a nine out of ten.
What do I think about the scalability of the solution?
Scalability-wise, I rate the solution an eight out of ten.
There are 2,000 users of the solution in my company.
How are customer service and support?
The solution's technical support was helpful and responsive. I rate the technical support an eight out of ten.
Which solution did I use previously and why did I switch?
I have previously used SonicWall.
How was the initial setup?
The initial setup was easy since it was possible to get remote support for the product.
The solution is deployed on-premises.
What's my experience with pricing, setup cost, and licensing?
It is a cost-effective product. If you need an extra module in the product, there will be an extra cost in addition to the licensing fee.
What other advice do I have?
There are five engineers needed for the maintenance of the solution.
If there is a requirement and one is already using a firewall from Fortinet, then it is easier to deploy FortiWeb Web Application Firewall (WAF). Overall, I rate the solution an eight out of ten.
The solution blocks attacks from application layers and protects websites from injection attacks
What is our primary use case?
We use FortiWeb Web Application Firewall to protect websites from injection attacks.
What is most valuable?
FortiWeb Web Application Firewall blocks attacks from application layers and provides protection.
What needs improvement?
FortiWeb Web Application Firewall's signature database updates could be improved.
For how long have I used the solution?
I have been using FortiWeb Web Application Firewall for one year.
What do I think about the stability of the solution?
I rate FortiWeb Web Application Firewall an eight out of ten for stability.
What do I think about the scalability of the solution?
I rate FortiWeb Web Application Firewall a nine out of ten for scalability. Around 10 to 12 users use the solution in our organization.
How are customer service and support?
The solution’s customer support is not good.
How was the initial setup?
The solution’s initial setup is easier than other products.
What about the implementation team?
It takes one week to deploy FortiWeb Web Application Firewall. As part of the deployment process, we create a FortiGate interface, connect FortiWeb to our website server, create virtual web servers in FortiWeb, and write some access control rules for protection purposes.
What's my experience with pricing, setup cost, and licensing?
FortiWeb Web Application Firewall's pricing is suited for small or medium organizations.
What other advice do I have?
FortiWeb Web Application Firewall is deployed on-cloud in our organization.
I recommend FortiWeb Web Application Firewall to other users because it helps block many attacks that come from the web and application layers. Using the solution to protect organizations from attacks is an easy process.
Overall, I rate FortiWeb Web Application Firewall a nine out of ten.
Deep Dive Log detail for Web Application
It offers the level of security we need at a good price point
What is our primary use case?
We use FortiWeb as our web application firewall.
How has it helped my organization?
FortiWeb provides the level of security we need at an excellent price point. It's easy to deploy and operationally efficient. FortiWeb enables us to streamline tasks. It's a robust solution that's effortless to configure. The AI and machine learning features help us block unknown threats.
We can bring our web applications online faster because FortiWeb shortens the time needed to bring any application into production. Compared to other application firewalls, FortiWeb has a smoother process for bringing applications online.
FortiWeb has few false positives. It's more accurate than other solutions, so we also see fewer alerts. FortiWeb has helped free up IT staff for other projects. You don't need to spend much time getting applications ready for the web, so IT staff can use this time to manage other things.
What is most valuable?
The AI engine and machine learning features distinguish FortiWeb from other solutions. It has a robust UI. FortiWeb is solidly accurate and provides excellent protection against zero-day attacks using machine learning. It appears to be effective because we've never experienced a breach from a zero-day attack.
We use almost all of the features, including analytics, malware detection, bot mitigation, and API discovery.
What needs improvement?
I think customers have the impression that FortiWeb is primarily for SMEs, but FortiWeb should work to expand its market share and adjust its branding. F5 and some other firewalls are easier to customize. FortiWeb could be more flexible and customizable. The documentation could also be improved because many of the advanced features aren't fully documented.
For how long have I used the solution?
We have used FortiWeb for around a year.
What do I think about the stability of the solution?
FortiWeb is highly stable. We haven't seen any bugs. The solution is reliable once configured properly.
What do I think about the scalability of the solution?
FortiWeb isn't difficult to scale.
How are customer service and support?
I rate Fortinet support six out of 10. The documentation and support need improvement.
Which solution did I use previously and why did I switch?
We have used Citrix WAF and the F5. FortiWeb offers most of the same features at a better price.
How was the initial setup?
I have done on-prem, hybrid, and cloud deployments of FortiWeb. The deployment was straightforward for most features, but a few features require some customization and configuration in the console. That's where we ran into problems because the documentation isn't thorough in some areas.
It takes around three or four days to deploy FortiWeb for a simple website. It takes longer for a complex website, but it depends on the level of complexity. We deployed FortiWeb in-house with two people and some help from Fortinet support. It's deployed across multiple data centers and locations.
What was our ROI?
The price-performance ratio is good. The time to value is quick because it's easy to deploy and the ML engine doesn't take long to adjust and apply the correct rules.
What's my experience with pricing, setup cost, and licensing?
FortiWeb offers these services at a price that SME customers can afford, but it's also suitable for large enterprises. Still, they need to put in more work to gain a greater share of enterprise business because they face stiff competition in this segment from F5, Cloudflare, and some others.
What other advice do I have?
I rate Fortinet FortiWeb eight out of 10. FortiWeb is a suitable product for SMEs. I recommend a proof of concept before going forward with any project.