FortiWeb Web Application Firewall (WAF) Reviews

Name: FortiWeb Web Application Firewall (WAF)
Brand: Fortinet
Rating: 4.1 (22 reviews)

4.1 out of 5

22 reviews
90% willing to recommend

What is FortiWeb Web Application Firewall (WAF)?

FortiWeb Web Application Firewall uses machine learning to reduce false positives, detects zero-day threats, and blocks DDoS attacks. It integrates with existing security infrastructure and provides SD-WAN capabilities, offering protection for websites and mobile applications.

Get the FortiWeb Web Application Firewall (WAF) Buyer's Guide and find out what your peers are saying about FortiWeb Web Application Firewall (WAF), Prisma Cloud by Palo Alto Networks, Azure Front Door and more!

FortiWeb Web Application Firewall (WAF) is the #16 ranked solution in top Web Application Firewalls. PeerSpot users give FortiWeb Web Application Firewall (WAF) an average rating of 8.2 out of 10. FortiWeb Web Application Firewall (WAF) is most commonly compared to Prisma Cloud by Palo Alto Networks: FortiWeb Web Application Firewall (WAF) vs Prisma Cloud by Palo Alto Networks. FortiWeb Web Application Firewall (WAF) is popular among the large enterprise segment, accounting for 44% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 15% of all views.

Buyer's Guide

FortiWeb Web Application Firewall (WAF)

January 2025

Get the report

Helped 831,020 peers since 2012

Featured reviews

IgnitiusMolepo

Senior IP Network Defense at MTN

The tool secures our critical applications, especially the mobile money application, which is often targeted by attacks. The solution provides rapid protection and has proven reliable against various threats. It blocks malicious traffic, including dormant and DDoS attacks, and offers integrated Web Application Firewall features to safeguard against compromises. You can set it up for customer-facing web applications because customers don't necessarily know all the IP addresses. It uses a source-based approach where any source accessing the application is defined by its IP. When accessing the application, it checks if they are using HTTP or HTTPS and blocks them if necessary. The tool's performance and security reporting capabilities contribute positively to IT security management. Consolidating management within the solution makes it easier for IT to handle the solutions. All functionalities managed on a single box reduce the number of boxes needed for management.

Read full review

Nitith Unarat

Pre-Sales at PPLUS VISION

The price could be close to Imperva; Imperva is the number one firewall. FortiWeb cannot do some kind of ADC solution, like load balancing. I hope they improve that. I'm looking for the ADC solution, the load balancing solution. Because application firewalls with multiple line solutions do come with it. So, I think it should be integrated within FortiWeb WAF.

Read full review

Martin Ellmann

Chief Executive Officer at EE Solutions GmbH

The solution helps protect our company's web applications against common threats up to 99 percent. We feel very safe with the tool. Speaking about how the tool has effectively mitigated web security threats for an application, I would say that it is an application behind the web portal, so there are about a hundred or thousand people who can access a website. If it is a sensitive application, and we have to watch every access to it to make it really safe, that is the reason why we need WAF on the application. My company doesn't use AI with the tool. I recommend the product to others. I would say that others need to have it if they have a shopping website or something similar. I know it is hard to sell because we find it quite hard whenever my company tries to do so. The solution offers 100 percent integration with other Fortinet security products. The ease of policy configuration in the tool is okay. I rate the tool a nine to ten out of ten.

Read full review

FortiWeb Web Application Firewall (WAF) mindshare

As of January 2025, the mindshare of FortiWeb Web Application Firewall (WAF) in the Web Application Firewall (WAF) category stands at 0.8%, up from 0.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Web Application Firewall (WAF)

PeerAnalyst reports

Type	Title	Date
Category	Web Application Firewall (WAF)	Jan 17, 2025	Download
Product	Reviews, tips, and advice from real users	Jan 17, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs AWS WAF	Jan 17, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs F5 Advanced WAF	Jan 17, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs Microsoft Azure Application Gateway	Jan 17, 2025	Download

Title	Rating	Mindshare	Recommending
Prisma Cloud by Palo Alto Networks	4.2	2.4%	98%	108 interviews Add to research
Azure Front Door	4.4	4.5%	100%	13 interviews Add to research

Valuable Features

FortiWeb Web Application Firewall offers machine learning, extensive attack signature libraries, and seamless integration with Fortinet FortiGate. It provides DDoS protection, zero-day threat detection, antivirus, URL filtering, DNS protection, and SD-WAN capabilities. Users appreciate its user-friendly interface, single-platform management, rapid protection against threats, cost-effectiveness, and compliance with standards. Features like web access control, blocking inappropriate content, and maintaining application security are highlighted as beneficial.

"FortiWeb has a very extensive library of known attack signatures, which makes the product fit for any environment, regardless if the customer uses Windows-specific or non-Windows-specific applications."
"The most valuable feature is the tool's integration with load-balancing applications, similar to FortiADC. Its importance depends on customer requirements, such as whether they prioritize application load balancing or layer seven protection."
"The product's initial setup phase was easy."

Room for Improvement

FortiWeb Web Application Firewall (WAF) requires enhancements in database updates, integration capabilities, and user interface design. Performance and pricing need significant improvement along with comprehensive documentation. Users suggest enhancing advanced features to match enterprise standards, improving technical support, and accelerating response times. There's a need for seamless integration with popular systems and better protection against zero-day attacks. Simplifying advanced configurations and enhancing security features, including robust DDoS protection, are also highlighted for improvement.

"For users not familiar with Fortinet, it could be beneficial to provide more user-friendly analytics and reporting."
"Regarding areas for improvement, the documentation needs work. We had issues with a customer because the documentation didn't clearly show which devices can connect with FortiWeb WAF, leading to misconfiguration and difficult meetings. We also need deeper technical support - finding who's responsible for technical aspects is challenging. Hungary has a good Fortinet office with strong sales and pre-sales employees."
"The tool's price and performance are areas of concern where improvements are required."

ROI

Organizations experienced a 70% ROI with FortiWeb Web Application Firewall. They noted decreased operational costs by 20% due to savings on bandwidth and infrastructure. Increased security minimized application downtime and enhanced efficiency in threat management. Users found it cost-effective compared to other options, enjoying low false positive rates. The total cost of ownership reflected its protection level, allowing up to 30% resource savings. This tool employs cross-site scripting for enhanced application security.

Pricing

FortiWeb Web Application Firewall offers flexible pricing options suitable for small to medium enterprises. The solution provides both standard and advanced packages, with additional modules incurring extra costs. Users appreciate its easy deployment and competitive pricing compared to other vendors. Despite occasional perceptions of being expensive, FortiWeb is commonly viewed as offering good value for money. The pricing model includes both subscription and perpetual licensing options, appealing to varied organizational needs.

"The product provides very good prices to customers. The price is set well and offers great value for money."
"The tool is really expensive."
"I rate the tool's pricing an eight out of ten."

Popular Use Cases

FortiWeb Web Application Firewall (WAF) is primarily utilized for enhancing security by protecting websites and web applications from threats like injection attacks, malware, and adware. Organizations implement it for security features in financial applications, ensuring compliance with PCI DSS. It is also employed for web filtering, API protection, bot mitigation, and blocking specific applications. Companies with multi-cloud environments utilize FortiWeb to secure Internet-facing servers and ensure secure access to internal mobile applications.

Service and Support

Providers find FortiWeb Web Application Firewall customer service to be mixed. Many appreciate the responsive and helpful technical assistance, rating it highly, while others report delays and unavailability, especially in urgent situations. Fortinet has attempted improvements, offering elite support and good response times. However, issues like complex support processes and regional discrepancies persist. Some praise the friendliness and helpfulness, though delays and high subscription costs sometimes frustrate. Support is generally recognized as good but inconsistent.

Deployment

FortiWeb Web Application Firewall's initial setup is generally rated as easy, with support from remote teams and a straightforward process involving a setup wizard. Deployment duration varies according to customer needs, ranging from days to months. Some users require extensive time for complex environments, while others complete it in hours or a few days. Fortinet's online training and team support often ease the process, although lack of experience can pose challenges.

Scalability

FortiWeb Web Application Firewall (WAF) is considered scalable by many, with users rating it between eight to nine out of ten for scalability. It supports varying user bases, from hundreds to thousands. While some find scalability issues with medium-sized hardware, others appreciate its flexibility, especially with a SaaS model and flex licensing. It's suitable for enterprise environments and can adapt to different organizational traffic and architecture needs.

Stability

FortiWeb Web Application Firewall (WAF) is praised by users for its strong stability, often rated between eight to ten out of ten. Users appreciate its capability to release updates anytime; however, they note potential issues with zero-day exploits and the need for FortiAnalyzer. Despite scheduling considerations for upgrades due to potential impact on production, users find FortiWeb WAF reliable without adding latency to networks. Some users express slight concerns but generally acknowledge its stable performance.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our FortiWeb Web Application Firewall (WAF) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

15%

Comms Service Provider

10%

Manufacturing Company

10%

Computer Software Company

10%

Educational Organization

Retailer

Outsourcing Company

Non Profit

Government

Non Tech Company

Healthcare Company

Hospitality Company

Legal Firm

Logistics Company

University

Transportation Company

Performing Arts

Real Estate/Law Firm

Recreational Facilities/Services Company

Insurance Company

Consumer Goods Company

Energy/Utilities Company

Media Company

Compare FortiWeb Web Application Firewall (WAF) with alternative products

Learn more about FortiWeb Web Application Firewall (WAF)

FortiWeb WAF secures web applications with features like machine learning-based threat detection, DDoS attack mitigation, and robust integration capabilities. Additionally, it manages HTTP traffic and offers SD-WAN functionalities. Built for GDPR compliance, it supports API protection and bot mitigation while enabling secure mobile and cloud application access. Users implement it across multi-cloud environments and in data centers offering advanced security and compliance, including PCI DSS. Despite feature-rich abilities, users seek enhanced database updates, better enterprise integration, and more accessible analytics. Improvements in support response, documentation, and scalability are desired to strengthen its robust security offering.

What are the key features of FortiWeb WAF?

Machine Learning: Reduces false positives and detects zero-day attacks.
DDoS Protection: Blocks distributed denial of service attacks.
Integration: Seamlessly fits with existing infrastructure.
GDPR Compliance: Ensures data privacy and protection standards.
SD-WAN Capabilities: Manages network distribution effectively.
Mobile and API Security: Protects applications and APIs efficiently.

What benefits and ROI can users expect?

Cost-Effectiveness: Offers a balance between features and pricing.
User-Friendly: Easy to navigate and manage deployments.
Global Deployment: Supports multi-cloud and cross-data center usage.
Security Compliance: Meets standards like PCI DSS for secure operations.
Enhanced Application Security: Provides comprehensive protection for apps.

FortiWeb WAF is widely implemented in data centers and financial industries, ensuring robust protection for web applications and sites. It supports multi-cloud environments on platforms like AWS and Azure, providing secure access while meeting compliance standards. Users benefit from enhanced application security and load balancing capabilities, making it a preferred choice in financial sectors that require VPN and SD-WAN consistency.