Try our new research platform with insights from 80,000+ expert users

Fortinet FortiOS vs Fortinet FortiWeb comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
317
Ranking in other categories
Firewalls (2nd), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Fortinet FortiOS
Average Rating
8.4
Reviews Sentiment
8.4
Number of Reviews
76
Ranking in other categories
Firewalls (28th)
Fortinet FortiWeb
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
94
Ranking in other categories
Web Application Firewall (WAF) (4th)
 

Mindshare comparison

Firewalls
Web Application Firewall (WAF)
 

Featured Reviews

DineshKumar28 - PeerSpot reviewer
Effective threat prevention with responsive customer support
We are using Fortinet FortiGate as a firewall Fortinet FortiGate has been invaluable. It has helped save costs due to its various features, reliable performance, very good UI, low latency, and stability. The Threat Intel engine in Fortinet FortiGate is highly rated for its effectiveness in…
Saleem Ullah Khan - PeerSpot reviewer
Easy to set up, reliable, and good for traffic management
We are not scaling it right now. We bought it sometime back and we didn't need to scale it. We bought a higher end for our use case, which is still sufficient for another few years. We have 200 or so users of different levels and positions on it. We do not have plans to increase usage. This firewall is quite a capable firewall - even up to 1000 users. Due to that, we didn't find any requirement to expand it or replace it somehow. It has helped us build our software-defined WAN, LAN, et cetera. It is sufficient for us. It gives us Gbps throughput, which is good enough. The firewall itself is 32Gbps capable, which is more than what we need.
Kacem CHAMMALI - PeerSpot reviewer
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Using this product makes the VPN seamless and almost invisible to me in the sense that I don't have to think about it."
"The most valuable features of Fortinet FortiGate are the APIs. They are the most widely known."
"The dashboard I have found the most valuable in Fortinet FortiGate."
"The virtual firewall feature is the most valuable. We have around 1,500 firewalls. We did not buy individual hardware, and the virtual firewalls made sense because we don't have to keep on buying the hardware. FortiGate is easier to use as compared to Checkpoint devices. It is user friendly and has a good UI. You don't need much expertise to work on this firewall. You don't need to worry much about DCLA, commands, and things like that."
"The user interface is relatively easy. The devices are easy to deploy and figure out when you have experience with other security appliances."
"The most valuable feature of the solution revolves around SSL VPN."
"The inspection and web security features are most valuable."
"The web filtering feature and the intrusion protection system are the most valuable. It is a resilient appliance. I never had an issue with it in terms of any security breaches."
"All of the features in this solution are effective and efficient."
"The customer service and support team are excellent."
"FortiGate as a product is very easy to configure."
"We have expanded the wireless access point and switches using Fortinet FortiOS."
"It efficiently manages large-scale firewall deployments."
"Has a very simple OS and a good price point."
"The stability of Fortinet FortiOS is great."
"The solution is very easy to configure and has a good interface, plus it offers more configuration options than other vendors."
"High-performance and detection engines, provide a high rate of exposure of web attacks."
"Some of the threat detection analytics and the filtering capabilities they give us for filtering a certain type of information that we don't want coming into the site are its valuable features. The analytics are pretty good in terms of being able to see what threats have been detected and mitigated, where they're coming from, and things like that."
"Banks have to be compliant with PCI and other things, and FortiWeb is absolutely amazing in terms of providing these reports. Otherwise, they will have to spend a lot of time on them."
"I have recently been looking at the SSL certificate features and the learning mode of the appliance. This appliance learns from the pattern of SSL attacks."
"Other than the additional security with exploit protection, we have simpler certificate handling, as we can keep internal servers using internal certificates continuously distributed and updated by Active Directory Group Policy, while the public certificates become updated only in a single place, FortiWeb itself."
"The solution is stable."
"Built-in security templates, AV integrated, strong threat intelligence."
"The most valuable feature of Fortinet FortiWeb is the ease of integration and configuration."
 

Cons

"The web-cache feature which was previously on the FortiGate device, but was deleted with the recent upgrade should be returned. It was a very valuable feature for us."
"It should provide better visibility over the network and more information in the form of reports for the end users. Its installation should also be easier."
"The inability to scale the FortiAnalyzer to match our growth necessitates the purchase of new hardware."
"Scalability is one of the disadvantages. When it comes to scalability, you have to actually change the box. If you want to upgrade it, you need to actually change the existing box and probably you take the system off to other sites."
"The license renewal process, annual renewal price, and the web application firewall features should be improved."
"Monitoring and reporting could be better."
"I would like to see improvements with the antivirus and IPS as they are not working properly all the time."
"Improvement is needed in the Web Filter quotas to restrict users with allocated quotas."
"The solution is good, but they have poor marketing in Nigeria. They need to market their product better."
"Fortinet FortiOS's integration could be improved."
"I would like to see the features of FortiAnalyzer included in Fortinet FortiOS. Right now, you're required to have an additional license and a different device for features such as processing the log, reporting, and analyzing traffic."
"The threat time interval lags a little, especially if there's a heavy load on the firewall."
"Lacks flexibility for different scenario configurations."
"We had assistance from one person from our local vendor for the implementation."
"The implementation could be simplified."
"There is no flexibility."
"For advanced users, it would be really useful to have access and the ability to manipulate packets. If we can access and manipulate the contents of packets, even encrypted packets... that would be powerful. Since we're looking at packets arriving at our network, we would have the private key to access those packets and their information."
"The solution could improve by providing more integration with solutions other than the Fortinet family."
"Lacks functionalities that are available in other solutions."
"Another area for improvement is logging. When troubleshooting, the logs sometimes take a while to update. We've had people report that some things aren't logged if they're successful. It's a bit hit-and-miss. For example, sometimes people access one of our services, and it's successful, but we don't see that in the logs."
"I had some small problems when I was upgrading firmware. After the upgrade, some of my certificates were deleted.​"
"It costs too much."
"HA Architecture needs improvement. I would improve it by working on AP HA."
"It would also be helpful if they could introduce easier reporting. It's good to have those reports that go to C-level management, and Fortinet does provide some graphs, but if they went into some more detail, that would be great."
 

Pricing and Cost Advice

"Fortinet FortiGate as a less expensive solution than Palo Alto."
"The licensing costs are very low."
"The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."
"Fortinet FortiGate is expensive."
"The license of Fortinet FortiGate should be reduced."
"Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."
"The product pricing is reasonable."
"There is a subscription-based model to use Fortinet FortiGate. We pay annually for the solution along with the support. If you want to have all the updates, and security patches you will need to renew your support."
"A medium 100 or 200 Series box costs around $3000, and the software cost is around 55% of the hardware cost."
"The price of Fortinet FortiOS is less than $10,000 annually. The price of the support is reasonable compared to competitors."
"The price of Fortinet FortiOS has been reasonable."
"We pay $100,000. That covers the cost of the hardware that we run the VN's on. That also includes any SGNA costs for the internal support tech."
"The program is expensive."
"The price of Fortinet FortiOS is reasonable and it is paid annually. You are able to select the features that you want."
"A yearly subscription might be around $20,000 to $30,000."
"The pricing could always be lower."
"Its subscription prices are cheaper, and it is not very expensive. From a price perspective, Fortinet is a very well-known security vendor. Subscriptions are very simple. They have a couple of licenses on an appliance, and that's it. The cost is not that big. One license is 40K, which they give with all the products. Another one includes the subscriptions for threat prevention, IPS, sandboxing, etc, which is more than enough."
"The license to use Fortinet FortiWeb is approximately $14,000."
"There's only one payment for the duration of the license. On a scale from one to five, I would rate pricing at four. I have not encountered any additional costs on my projects involving Fortinet FortiWeb."
"Previously, for each project, the cost was $800 to $1,000 per application. Now, it's $100 to $120. For some of the applications, there is a 90% reduction, and for some of the applications, there is a 50% reduction. We're paying only $500 to $600."
"The solution is a bit expensive when compared to other products."
"The product is expensive. I rate the pricing a ten out of ten."
"When I use any other firewall, I have to take a license. It could be a perpetual license or subscription-based. In both cases, we have to pay some amount in advance, whereas in the case of FortiWeb, when using it as a service, I am paying half a dollar only for the domain name, and then I am paying based on the traffic or the number of requests."
"The cost isn't expensive."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
829,541 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
14%
Comms Service Provider
6%
Manufacturing Company
6%
Computer Software Company
18%
Manufacturing Company
9%
Financial Services Firm
9%
Government
8%
Educational Organization
43%
Computer Software Company
9%
Financial Services Firm
8%
Government
4%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
What do you like most about Fortinet FortiOS?
The SSL VPN is fee for use is most attractive.
What is your experience regarding pricing and costs for Fortinet FortiOS?
Regarding the cost, the initial purchase is relatively cheap because it comes bundled. However, the subscription rene...
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
The pricing of Fortinet FortiWeb is affordable and competitive.
What needs improvement with Fortinet FortiWeb?
I see no room for improvement at the moment.
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
No data available
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls. Updated: December 2024.
829,541 professionals have used our research since 2012.