Try our new research platform with insights from 80,000+ expert users

A10 Networks Thunder SSLi vs Fortinet FortiWeb comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

A10 Networks Thunder SSLi
Average Rating
9.0
Number of Reviews
3
Ranking in other categories
SSL/TLS Decryption (3rd)
Fortinet FortiWeb
Average Rating
7.8
Number of Reviews
90
Ranking in other categories
Web Application Firewall (WAF) (4th)
 

Mindshare comparison

A10 Networks Thunder SSLi and Fortinet FortiWeb aren’t in the same category and serve different purposes. A10 Networks Thunder SSLi is designed for SSL/TLS Decryption and holds a mindshare of 30.0%, down 32.4% compared to last year.
Fortinet FortiWeb, on the other hand, focuses on Web Application Firewall (WAF), holds 8.4% mindshare, up 7.4% since last year.
SSL/TLS Decryption
Web Application Firewall (WAF)
 

Featured Reviews

KM
Jan 16, 2020
Enables our content filter to do its job without any noticeable delay
Its most valuable feature is its ability to do its job accurately, effectively, and very quickly. The amount of traffic that we have going through our system is astounding. We have 6,900 students and about 1,100 staff members. Most of our teachers and staff are connecting through our system. You add to that all the cell phones, the iPads, and all the computers, and then each individual website's connection, that's a lot of traffic in a period of one second. The delay with the SSL decryption turned on is almost unnoticeable. That is great because most SSL decryption solutions — a couple of competitors we did try — their devices crashed as soon as we turned decryption on.
Kacem CHAMMALI - PeerSpot reviewer
Apr 1, 2024
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"With the Thunder SSLi, we're better protected. We can stop use of VPN and proxies. We are better protected against dirty traffic coming back to our schools. Having a secure decrypt zone with the equipment lowers the chances that our security infrastructure could possibly miss an attack."
"Its most valuable feature is its ability to do its job accurately, effectively, and very quickly. The amount of traffic that we have going through our system is astounding... The delay with the SSL decryption turned on is almost unnoticeable."
"We have several proxies in our environment, so we localized internet traffic between these proxies. Instead of getting a really huge proxy box, according to our size, we can use three boxes and share the traffic with A10's load-balancer feature."
"High-performance and detection engines, provide a high rate of exposure of web attacks."
"It's stable and works efficiently against OWASP Top 10 attacks."
"The most valuable feature is the attack signature and machine learning."
"The support is quite good."
"Fortinet FortiWeb is priced well."
"FortiWeb provides the level of security we need at an excellent price point. It's easy to deploy and operationally efficient."
"All the features that FortiGate contains are very suitable for our business. We work with other products in Fortinet, FortiWeb, FortiSandbox, FortiMail, and FortiCache. We use all UTM features like self-encryption, encryption, all UTM features."
"It allows specific IP whitelisting or even regional whitelisting, ensuring only whitelisted traffic from certain geographical regions can access the environment."
 

Cons

"There is one thing I would like to see changed. In their features for setting things up, there is a templating system that would normally assist clients. However, we had a better time setting up the device either through the command line or through the interface and not using the templates that were pre-installed. So there is room for improvement to the templates for initial installation."
"It would be great if it supported SSL operations according to Active Directory users. For example, if we want to bypass one of the servers or a client's internet access for SSL interception, we have to do it according to the IP address. It would be better if we could do it according to the Active Directory username. A10 says they kind of support that but we haven't tested it."
"I would like them to have a better UI (better universal design)."
"Their documentation is fairly complete, but it's sometimes a little bit difficult to search for exactly what you're looking for to resolve an issue. There have been times when we've gone to try to search for areas that we needed to get information on, and it has not always been extremely clear exactly how a particular thing needs to be set up."
"Lacks functionalities that are available in other solutions."
"I would like to have an antivirus option."
"We would like to know more about the integration with the hardware or security products, such as Gemalto, because we need to move to that point."
"Sometimes, even if you follow the documentation, it doesn't work as expected."
"The memory use in each of the appliances is problematic."
"The F5 solution has more features than Fortinet FortiWeb, such as multiple load balancing."
"Fortinet WAF came out recently, and there is not much feedback about customer experience. For each project, customers ask about the scenarios and references of the customers who have implemented this solution, which we don't have. They need to simplify the customer experience and provide more information so that we can propose Fortinet Fortiweb as a WAF solution to customers and convince them. They need to improve their service and training. We need good training to implement and use it properly and know more about it. We still don't know much about Fortinet WAF. We didn't get any proper training sessions. Other vendors like Cisco, Palo Alto, Check Point, and Barracuda provide such sessions. Whenever we receive a request from a customer for this solution, we just give the price. We don't propose this solution because we don't know much about it. We propose whatever we are familiar with and what is supported."
 

Pricing and Cost Advice

"We always pay for support. Any organization of our size who doesn't is asking for problems."
"When you purchase the equipment, you purchase the licensing and warranty. It's all fairly standard. We haven't been caught with anything surprising."
"Our licensing costs, yearly, are just under $15,000. Your initial cost of acquisition is obviously going to be more than $15,000..."
"The price of Fortinet FortiWeb depends from customer to customer because some customers are considering using other solutions, such as Imperva. The price of Fortinet FortiWeb sits well for the middle-sized customers that we deal with."
"It keeps changing, but it's based on the size of the VM you buy and also the traffic throughput you want from it, whereas what we have on Azure is just the traffic throughput. You can also pay on a monthly basis from Azure. During each part of the project, it's okay to get Azure-based licensing or AWS-based licensing for FortiWeb, but over time, you would want to go with the perpetual license. You should go to Fortinet and buy the license from them. So, there is a two-step process there."
"The pricing is in the middle. I would rate the pricing a five out of ten. It feels like a justified cost for the features."
"It should be somewhere about 36,000 Euros. That's the cost for three years. It's moderately priced."
"The license to use Fortinet FortiWeb is approximately $14,000."
"It is not a cheap product. It is not like a Linux or a Genex that you can deploy. It is a hardware appliance, and it is built for a specific reason and reliability. It is an enterprise-class solution. You wouldn't find an SMB investing in something like this."
"FortiWeb can be purchased in VM mode for a lower price and the same features."
"When I use any other firewall, I have to take a license. It could be a perpetual license or subscription-based. In both cases, we have to pay some amount in advance, whereas in the case of FortiWeb, when using it as a service, I am paying half a dollar only for the domain name, and then I am paying based on the traffic or the number of requests."
report
Use our free recommendation engine to learn which SSL/TLS Decryption solutions are best for your needs.
814,649 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Government
12%
Manufacturing Company
11%
Computer Software Company
9%
Educational Organization
42%
Computer Software Company
10%
Financial Services Firm
7%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
FortiWeb is cheaper by over ten percent compared to other solutions like Barracuda and F5.
What needs improvement with Fortinet FortiWeb?
One area that needs improvement is the handling of SaaS downtime. When there is downtime at their data center, it becomes a transit point issue for us, causing downtime in our environment as well. ...
 

Also Known As

Thunder SSLi
No data available
 

Overview

 

Sample Customers

Klein Independent School District
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Broadcom, Fidelis Security, A10 Networks and others in SSL/TLS Decryption. Updated: October 2024.
814,649 professionals have used our research since 2012.