FortiWeb Web Application Firewall (WAF) Reviews

Name: FortiWeb Web Application Firewall (WAF)
Brand: Fortinet
Rating: 4.1 (23 reviews)

4.1 out of 5

23 reviews
91% willing to recommend

What is FortiWeb Web Application Firewall (WAF)?

FortiWeb Web Application Firewall uses machine learning to reduce false positives, detects zero-day threats, and blocks DDoS attacks. It integrates with existing security infrastructure and provides SD-WAN capabilities, offering protection for websites and mobile applications.

Get the FortiWeb Web Application Firewall (WAF) Buyer's Guide and find out what your peers are saying about FortiWeb Web Application Firewall (WAF), Prisma Cloud by Palo Alto Networks, Azure Front Door and more!

FortiWeb Web Application Firewall (WAF) is the #16 ranked solution in top Web Application Firewalls. PeerSpot users give FortiWeb Web Application Firewall (WAF) an average rating of 8.2 out of 10. FortiWeb Web Application Firewall (WAF) is most commonly compared to Prisma Cloud by Palo Alto Networks: FortiWeb Web Application Firewall (WAF) vs Prisma Cloud by Palo Alto Networks. FortiWeb Web Application Firewall (WAF) is popular among the large enterprise segment, accounting for 43% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 14% of all views.

Buyer's Guide

FortiWeb Web Application Firewall (WAF)

February 2025

Get the report

Helped 832,138 peers since 2012

Featured reviews

IgnitiusMolepo

Senior IP Network Defense at MTN

The tool secures our critical applications, especially the mobile money application, which is often targeted by attacks. The solution provides rapid protection and has proven reliable against various threats. It blocks malicious traffic, including dormant and DDoS attacks, and offers integrated Web Application Firewall features to safeguard against compromises. You can set it up for customer-facing web applications because customers don't necessarily know all the IP addresses. It uses a source-based approach where any source accessing the application is defined by its IP. When accessing the application, it checks if they are using HTTP or HTTPS and blocks them if necessary. The tool's performance and security reporting capabilities contribute positively to IT security management. Consolidating management within the solution makes it easier for IT to handle the solutions. All functionalities managed on a single box reduce the number of boxes needed for management.

Read full review

Nitith Unarat

Pre-Sales at PPLUS VISION

The price could be close to Imperva; Imperva is the number one firewall. FortiWeb cannot do some kind of ADC solution, like load balancing. I hope they improve that. I'm looking for the ADC solution, the load balancing solution. Because application firewalls with multiple line solutions do come with it. So, I think it should be integrated within FortiWeb WAF.

Read full review

Martin Ellmann

Chief Executive Officer at EE Solutions GmbH

The solution helps protect our company's web applications against common threats up to 99 percent. We feel very safe with the tool. Speaking about how the tool has effectively mitigated web security threats for an application, I would say that it is an application behind the web portal, so there are about a hundred or thousand people who can access a website. If it is a sensitive application, and we have to watch every access to it to make it really safe, that is the reason why we need WAF on the application. My company doesn't use AI with the tool. I recommend the product to others. I would say that others need to have it if they have a shopping website or something similar. I know it is hard to sell because we find it quite hard whenever my company tries to do so. The solution offers 100 percent integration with other Fortinet security products. The ease of policy configuration in the tool is okay. I rate the tool a nine to ten out of ten.

Read full review

FortiWeb Web Application Firewall (WAF) mindshare

As of February 2025, the mindshare of FortiWeb Web Application Firewall (WAF) in the Web Application Firewall (WAF) category stands at 0.7%, up from 0.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Web Application Firewall (WAF)

PeerAnalyst reports

Type	Title	Date
Category	Web Application Firewall (WAF)	Feb 1, 2025	Download
Product	Reviews, tips, and advice from real users	Feb 1, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs AWS WAF	Feb 1, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs F5 Advanced WAF	Feb 1, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs Microsoft Azure Application Gateway	Feb 1, 2025	Download

Title	Rating	Mindshare	Recommending
Prisma Cloud by Palo Alto Networks	4.2	2.2%	98%	108 interviews Add to research
Azure Front Door	4.4	4.3%	100%	13 interviews Add to research

Valuable Features

FortiWeb Web Application Firewall (WAF) offers valuable features like attack blocking, machine learning for new signatures, user-friendly interface, and false positive reduction. It integrates well, provides rapid protection against threats, and supports web tracking applications. Users appreciate in-built antivirus, SD-WAN capabilities, comprehensive URL and DNS protection, and control over web access. Known for cost-effectiveness and transparency, FortiWeb's extensive attack signature library and low false positive rates contribute to widespread adoption.

"Their support is truly exceptional when I compare it with similar large-sized companies."
"The good thing about Fortinet is that their enablement is very good in terms of training me and enabling resources on their technology."
"FortiWeb has a very extensive library of known attack signatures, which makes the product fit for any environment, regardless if the customer uses Windows-specific or non-Windows-specific applications."

Room for Improvement

FortiWeb Web Application Firewall (WAF) needs enhanced signature database updates, more enterprise-level features, and better integrations with other firewall brands. Improved user interface, performance, and advanced configuration accessibility are necessary. Pricing and support response times require attention. Enhanced DDoS protection and inclusion of antivirus features are needed. FortiWeb WAF should optimize its scalability and load balancing capabilities. Documentation improvements and easier migration from other systems would benefit users significantly.

"If some of my customers want to migrate from F5 to Fortinet Firewall, or the Fortinet WAF solution, there are some migration issues since I cannot migrate all the elements quickly using Fortinet Firewall."
"For users not familiar with Fortinet, it could be beneficial to provide more user-friendly analytics and reporting."
"Regarding areas for improvement, the documentation needs work. We had issues with a customer because the documentation didn't clearly show which devices can connect with FortiWeb WAF, leading to misconfiguration and difficult meetings. We also need deeper technical support - finding who's responsible for technical aspects is challenging. Hungary has a good Fortinet office with strong sales and pre-sales employees."

ROI

FortiWeb Web Application Firewall results in a 70% ROI and reduces operational costs by 20% through efficient threat handling. It enhances security, minimizes application downtime, and saves 20% to 30% of organizational resources. The cost-effectiveness is noted, being cheaper than alternatives with low false positives. It lowers infrastructure and bandwidth expenses while utilizing cross-site scripting to protect applications, making financially cautious users consider it for better investment outcomes.

Pricing

FortiWeb Web Application Firewall pricing is competitive for small to medium enterprises, offering value for money. Users note it is less costly than some alternatives like CheckPoint. There are two packages: standard and advanced, with subscription and perpetual licensing options. While some find it expensive, others appreciate its cost-effectiveness and efficient license deployment. Additional modules incur extra costs. FortiWeb's pricing is often rated between four and eight out of ten by users.

"The product provides very good prices to customers. The price is set well and offers great value for money."
"The tool is really expensive."
"I rate the tool's pricing an eight out of ten."

Popular Use Cases

FortiWeb Web Application Firewall is used primarily to protect websites and web applications from threats like injection attacks and malware. Organizations employ it for API protection, bot mitigation, and security compliance, particularly in sectors like finance. It supports load balancing, web filtering, and VPN connections across cloud environments. FortiWeb enhances security for Internet-facing servers, mobile money applications, and multi-cloud infrastructures, providing effective protection against cross-site scripting and unauthorized access.

Service and Support

FortiWeb Web Application Firewall (WAF) has varied experiences with customer service and support. Users mention responsive and helpful technical support, rating it eight out of ten, while others face delays and inconsistency, especially in complex issues. Some report fantastic and exceptional support, noting improved services. However, challenges persist with response times and hardware assistance, especially in specific regions. While some find support costs high, partnerships help resolve issues effectively. Friendly support interactions and improvements in service are acknowledged.

Deployment

FortiWeb Web Application Firewall's initial setup is considered easy by many, with deployment times varying from a few hours to several months depending on customer requirements. Some find additional remote support helpful, while others appreciate the setup wizard and Fortinet's online training. Deployment complexity is influenced by customer needs and technical resources available, taking between one day to a few weeks. Fortinet's support and training are valuable for those inexperienced with the setup process.

Scalability

FortiWeb Web Application Firewall (WAF) is frequently seen as scalable with ratings often from eight to nine out of ten. Users ranging from small to large enterprises report scalability benefits, particularly with features like the SaaS model and high availability. Flex licensing can address certain scalability issues, although others note hardware upgrades may be necessary. It's widely adopted among numerous businesses with diverse user counts, illustrating a capacity to accommodate different organizational needs.

Stability

FortiWeb Web Application Firewall (WAF) is recognized for its stability, frequently receiving ratings between eight to ten out of ten. Users report it as highly stable with good assessment and low-level design. Regular updates are crucial to address vulnerabilities. Fortinet's updates can be scheduled appropriately. Some mention issues without FortiAnalyzer, yet many users agree that FortiWeb WAF maintains excellent consistency without network latency, reflecting confidence in its performance.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our FortiWeb Web Application Firewall (WAF) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

14%

Manufacturing Company

12%

Comms Service Provider

10%

Computer Software Company

10%

Educational Organization

Retailer

Outsourcing Company

Non Profit

Government

Non Tech Company

Healthcare Company

Hospitality Company

Legal Firm

Logistics Company

University

Consumer Goods Company

Performing Arts

Real Estate/Law Firm

Recreational Facilities/Services Company

Insurance Company

Energy/Utilities Company

Transportation Company

Media Company

Compare FortiWeb Web Application Firewall (WAF) with alternative products

Learn more about FortiWeb Web Application Firewall (WAF)

FortiWeb WAF secures web applications with features like machine learning-based threat detection, DDoS attack mitigation, and robust integration capabilities. Additionally, it manages HTTP traffic and offers SD-WAN functionalities. Built for GDPR compliance, it supports API protection and bot mitigation while enabling secure mobile and cloud application access. Users implement it across multi-cloud environments and in data centers offering advanced security and compliance, including PCI DSS. Despite feature-rich abilities, users seek enhanced database updates, better enterprise integration, and more accessible analytics. Improvements in support response, documentation, and scalability are desired to strengthen its robust security offering.

What are the key features of FortiWeb WAF?

Machine Learning: Reduces false positives and detects zero-day attacks.
DDoS Protection: Blocks distributed denial of service attacks.
Integration: Seamlessly fits with existing infrastructure.
GDPR Compliance: Ensures data privacy and protection standards.
SD-WAN Capabilities: Manages network distribution effectively.
Mobile and API Security: Protects applications and APIs efficiently.

What benefits and ROI can users expect?

Cost-Effectiveness: Offers a balance between features and pricing.
User-Friendly: Easy to navigate and manage deployments.
Global Deployment: Supports multi-cloud and cross-data center usage.
Security Compliance: Meets standards like PCI DSS for secure operations.
Enhanced Application Security: Provides comprehensive protection for apps.

FortiWeb WAF is widely implemented in data centers and financial industries, ensuring robust protection for web applications and sites. It supports multi-cloud environments on platforms like AWS and Azure, providing secure access while meeting compliance standards. Users benefit from enhanced application security and load balancing capabilities, making it a preferred choice in financial sectors that require VPN and SD-WAN consistency.