Try our new research platform with insights from 80,000+ expert users

F5 Advanced WAF vs Fortinet FortiWeb Cloud WAF-as-a-Service comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
74
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
F5 Advanced WAF
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
68
Ranking in other categories
Web Application Firewall (WAF) (2nd)
Fortinet FortiWeb Cloud WAF...
Average Rating
9.0
Reviews Sentiment
8.7
Number of Reviews
3
Ranking in other categories
Web Application Firewall (WAF) (28th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Richard Polyak - PeerSpot reviewer
Easy event identification, highly stable, and customizable
Generally, F5 Advanced WAF initial setup is straightforward. However, our environment was more complex and it took us a little more time to customize the solution to where we needed it to be. Additionally, the customization didn't rectify everything. We had to do customization to a certain event to prevent attacks that it wasn't catching, but that might not necessarily be the solutions' fault. It could be more of our setup than the solution's fault and not being able to run the latest version or the newer version could be more of a limitation on our ability to put it in the right place. The whole implementation to have the solution run at the level we wanted it to take approximately five months. Our company's environment is one that we can't put a canned solution in front of. Our environment, cannot have a canned solution that might fit everybody else because of how customized this environment is. It does need a lot of tuning to meet our environment's requirements. I rate the initial setup of F5 Advanced WAF a three out of five.
Lilian Blaitt - PeerSpot reviewer
Efficiently identifies and addresses vulnerabilities while providing robust protection
It is a secure tool. It is user-friendly and easy to work with. It is possible to easily find vulnerabilities with the WAF. I understand that the return is good since I haven't had any significant attacks. The vulnerabilities I found were easy to close. I think the return is good. It is a good tool.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool."
"The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"It's very user-friendly."
"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"The solution offers the flexibility to control configuration rules."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"The web application firewall itself is most valuable. It provides positive security and negative security. In negative security, it blocks a task such as cross-site scripting, code injection, etc. In positive security, it lets you specify and enforce things, such as the parameters allowed in username and password fields and the number of characters allowed in a field."
"It is also quite intuitive and user-friendly. They have several webinars that are actually like labs. You can use these webinars to learn about how to use all features of the product."
"My favorite feature of F5 is the ability to play around with the ciphers. I also like the ability to have an immediate display of the support IDs when a real blockage occurs. The protection offered is great."
"The solution is stable."
"F5 Advanced WAF secures our connectivity and combines both the main functions of WAF (balancing and web application security)."
"I definitely recommend this solution because of the time you save on analysis."
"F5's user-friendly interface and seamless integration stand out as the most valuable features for us."
"The most valuable feature is that it is secure."
"The technical support is really good."
"It is user-friendly and easy to work with."
"I rate the overall solution ten out of ten."
"It is a secure tool."
"Fortinet FortiWeb offers a variety of protections, including machine learning that helps protect web applications."
"The company provides technical support, and they are mostly available 24/7."
 

Cons

"Technical support is lacking."
"Cloudflare should add more documentation and pricing to the cloud version."
"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed. This is what I'd like to improve in Cloudflare."
"They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem."
"It should be easier to collect the logs with companies like Sumo. However, based on my discussions with the salespeople, I understand that's how they make their money. With the enterprise product, they want people doing those kinds of enterprise features to do the logging. They want them to pay a lot of money, and that's where I have an issue with them. That should be a default. You should be able to get the log no matter what. The logging should be universal."
"We have noticed multiple instances where Cloudflare falsely indicates that our servers are down, even when there is no actual load on them. This makes it challenging for us to identify the exact issue."
"They should work on the virtualization of NGINX."
"We get false positives sometimes."
"I would like for there to be a cloud-based solution, this would also help to improve scalability."
"I would like to see additional controls."
"F5 needs to improve API protection with a single F5 solution, without requiring additional modules."
"For me, an area for improvement in F5 Advanced WAF is the reporting as it isn't so clear. The vendor needs to work on the reporting capability of the solution. What I'd like to see in the next release of F5 Advanced WAF is threat intelligence to protect your web application, particularly having that capability out-of-the-box, and not needing to pay extra for it, similar to what's offered in FortiWeb, for example, any request that originates from a malicious IP will be blocked automatically by FortiWeb. F5 Advanced WAF should have the intelligence for blocking malicious IPs, or automatically blocking threats included in the license, instead of making it an add-on feature that users have to pay for apart from the standard licensing fees."
"The contextual-based component needs a lot of help to catch up with the next-gen products."
"The BNS module needs improvement."
"The only thing I encountered was related to integration, mostly concerning translation."
"The usability of the interface could be improved as it is not user-friendly."
"The usability of the interface could be improved as it is not user-friendly."
"I do not have any notes on improvement."
 

Pricing and Cost Advice

"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"There are no additional costs beyond the standard licensing fees."
"The price of the solution is expensive."
"That is one of the great features. I was able to access the majority of the features and services for free."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"The price is reasonable."
"The product's pricing is cheap."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"I think the price is very high."
"The price of the solution is reasonable when compared with other products, such as FortiWeb. I am very satisfied with the price."
"I don't have any issue with the pricing of this solution."
"It's more expensive than other solutions and depending on the modules, there can be additional fees."
"F5 bundles up services and the bundle is what you pay for rather than individual components."
"F5 Advanced WAF is not a cost-effective solution. Although they are attempting to reduce prices with their VE and cloud options, they are more expensive than other solutions. The solution is more expensive on average."
"I would rate the pricing as seven out of ten"
"The pricing of F5 Advanced WAF is more expensive than other solutions like Radware and CD18, it is quite high."
Information not available
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
846,617 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
20%
Computer Software Company
13%
Comms Service Provider
9%
Financial Services Firm
8%
Financial Services Firm
15%
Computer Software Company
13%
Government
8%
Manufacturing Company
6%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about F5 Advanced WAF?
It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the r...
What is your experience regarding pricing and costs for F5 Advanced WAF?
Subscription models have competitive pricing, while perpetual licenses involve an upfront higher cost, leading to amb...
What needs improvement with F5 Advanced WAF?
F5 Advanced WAF sells perpetual licenses as perpetual assets during sales without informing me that support ends afte...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
Information Not Available
Find out what your peers are saying about F5 Advanced WAF vs. Fortinet FortiWeb Cloud WAF-as-a-Service and other solutions. Updated: February 2025.
846,617 professionals have used our research since 2012.