Try our new research platform with insights from 80,000+ expert users

Fortinet FortiDDoS vs Fortinet FortiWeb comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Fortinet FortiDDoS
Average Rating
8.4
Number of Reviews
13
Ranking in other categories
Distributed Denial of Service (DDOS) Protection (17th)
Fortinet FortiWeb
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
92
Ranking in other categories
Web Application Firewall (WAF) (4th)
 

Mindshare comparison

While both are Security Services solutions, they serve different purposes. Fortinet FortiDDoS is designed for Distributed Denial of Service (DDOS) Protection and holds a mindshare of 3.2%, up 3.0% compared to last year.
Fortinet FortiWeb, on the other hand, focuses on Web Application Firewall (WAF), holds 8.4% mindshare, up 7.4% since last year.
Distributed Denial of Service (DDOS) Protection
Web Application Firewall (WAF)
 

Featured Reviews

Yazan Omar - PeerSpot reviewer
An easy-to-use tool with great GUI
The product's initial setup phase was really easy. There is a lot of time involved in the testing phase and other processes related to the area of deployment, so it may take up to two weeks to deploy the solution. The solution is deployed on an on-premises model. One person is enough to take care of the deployment phase of the product. The person involved in the deployment phase needs to better understand topologies when dealing with Fortinet.
Kacem CHAMMALI - PeerSpot reviewer
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Among its key features: Detects and mitigates DDoS attacks at L3 to L7; negligible to zero false-positives; Generates and sends reports without the need for an expensive third-party solution."
"The most valuable feature is the cloud DDoS scrubbing capability."
"The solution already has security profiles and it can protect from DDoS attacks and other kinds of attacks."
"The solution is very user-friendly and very easy to use."
"The product's initial setup phase was really easy."
"This solution can protect Layer 3, Layer 4 and Layer 7 attacks of applications for us."
"I find the interface easy to use."
"It allows me to see all the traffic on my network."
"The solution has a good sandbox feature."
"The most valuable feature of this solution is Fail-Open."
"Security Fabric integration. This is really a value-added feature as FortiWeb can interact with the rest of the client’s Fortinet pack to provide an intelligent security layer like (FortiSIEM for central log management and correlation, FortiGate, FortiSandbox for malware analysis, etc.)."
"The WAF profiles has been effective at mitigating web-based threats."
"FortiWeb has antivirus, web filtering, and application control features."
"Provides good vulnerability scanning, IPS, and geolocalization."
"It is a stable product."
"The ability to configure multiple policies for different requirements is a strong feature of Fortinet FortiWeb."
 

Cons

"Alerts and reporting features must be improved."
"The only thing they need to do is to automate it. Today, you must create tools that do not require the use of an expert or anyone with special skills."
"The solution can be a little more user-friendly and it can be more affordable."
"I would like to see analytics, big data."
"All the thresholds that need to be configured should be included in the default so that user will not forget or misconfigure."
"The tool needs to focus more on the area of application traffic management, where it currently has some shortcomings."
"The challenge lies within the customer environment, particularly in Brazil, where companies have stringent security requirements for implementing solutions."
"The product’s pricing needs improvement."
"Their documentation is fairly complete, but it's sometimes a little bit difficult to search for exactly what you're looking for to resolve an issue. There have been times when we've gone to try to search for areas that we needed to get information on, and it has not always been extremely clear exactly how a particular thing needs to be set up."
"Lacks functionalities that are available in other solutions."
"The solution is not very scalable, to scale up would require another deployment with a new appliance and a change to the network."
"I would like to see more improvements with respect to threat intelligence."
"Lacks a VM demo to enable testing prior to purchase."
"A better load balancer is needed when multiple servers are used for the same website."
"The interface could have the interdependent elements arranged sequentially and wizards that go through most common deployment actions."
"Another area for improvement is logging. When troubleshooting, the logs sometimes take a while to update. We've had people report that some things aren't logged if they're successful. It's a bit hit-and-miss. For example, sometimes people access one of our services, and it's successful, but we don't see that in the logs."
 

Pricing and Cost Advice

"The solution is reasonably priced."
"The product’s pricing needs improvement."
"It's quite pricey."
"FortiWeb is more expensive than some competing products."
"The pricing is average; the product is neither particularly expensive nor affordable."
"FortiWeb can be purchased in VM mode for a lower price and the same features."
"The maintenance fee for this product could be improved."
"The price of Fortinet FortiWeb depends from customer to customer because some customers are considering using other solutions, such as Imperva. The price of Fortinet FortiWeb sits well for the middle-sized customers that we deal with."
"It is fine now. We had to earlier negotiate the price."
"The product is expensive. I rate the pricing a ten out of ten."
"The license cost depends on the size of the box or the size of the solution. It can go from €200 Euros to a few hundred thousand Euros a year depending on your size."
report
Use our free recommendation engine to learn which Distributed Denial of Service (DDOS) Protection solutions are best for your needs.
816,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
11%
Manufacturing Company
9%
Comms Service Provider
6%
Educational Organization
42%
Computer Software Company
10%
Financial Services Firm
7%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would prefer Arbor.
What do you like most about Fortinet FortiDDoS?
The product's initial setup phase was really easy.
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
It's better. Yeah, it's really good. It's one of the main points why we offer it. Since we are partners with them, sometimes we offer our customers a lower price.
What needs improvement with Fortinet FortiWeb?
Fortinet's technical support is pretty slow, especially when you have quick questions. The support kind of delays itself and sometimes takes more time. That's the only thing that I can think of at ...
 

Also Known As

Fortinet DDoS, FortiDDos
No data available
 

Learn More

 

Overview

 

Sample Customers

Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Cloudflare, NETSCOUT, Radware and others in Distributed Denial of Service (DDOS) Protection. Updated: November 2024.
816,406 professionals have used our research since 2012.