Try our new research platform with insights from 80,000+ expert users

FortiWeb Web Application Firewall (WAF) vs Fortinet FortiWeb Cloud WAF-as-a-Service comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
74
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Fortinet FortiWeb Cloud WAF...
Average Rating
9.0
Reviews Sentiment
8.7
Number of Reviews
3
Ranking in other categories
Web Application Firewall (WAF) (28th)
FortiWeb Web Application Fi...
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
23
Ranking in other categories
Web Application Firewall (WAF) (16th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Lilian Blaitt - PeerSpot reviewer
Efficiently identifies and addresses vulnerabilities while providing robust protection
It is a secure tool. It is user-friendly and easy to work with. It is possible to easily find vulnerabilities with the WAF. I understand that the return is good since I haven't had any significant attacks. The vulnerabilities I found were easy to close. I think the return is good. It is a good tool.
IgnitiusMolepo - PeerSpot reviewer
Protects internal applications and prevents target attacks
The tool secures our critical applications, especially the mobile money application, which is often targeted by attacks. The solution provides rapid protection and has proven reliable against various threats. It blocks malicious traffic, including dormant and DDoS attacks, and offers integrated Web Application Firewall features to safeguard against compromises. You can set it up for customer-facing web applications because customers don't necessarily know all the IP addresses. It uses a source-based approach where any source accessing the application is defined by its IP. When accessing the application, it checks if they are using HTTP or HTTPS and blocks them if necessary. The tool's performance and security reporting capabilities contribute positively to IT security management. Consolidating management within the solution makes it easier for IT to handle the solutions. All functionalities managed on a single box reduce the number of boxes needed for management.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"The most valuable feature of Cloudflare DNS is security."
"Smaller businesses have seen great ROI due to the low investment and strong performance."
"The solution offers the flexibility to control configuration rules."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"The most valuable feature of Cloudflare DNS is its global reach and it is always evolving."
"Cloudflare has many features."
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"The technical support is really good."
"Fortinet FortiWeb offers a variety of protections, including machine learning that helps protect web applications."
"It is a secure tool."
"The company provides technical support, and they are mostly available 24/7."
"It is user-friendly and easy to work with."
"I rate the overall solution ten out of ten."
"The tool's HTTP traffic, website fixing, and blocking are fantastic. It is user-friendly with easy configuration."
"It is good for web tracking applications."
"The machine learning feature reduces the false positives."
"The fact that I can log into the platform and see everybody, see logs, authentication failure, and see everything on one platform, is the most valuable feature."
"The solution is transparent and smooth."
"The tool secures our critical applications, especially the mobile money application, which is often targeted by attacks. The solution provides rapid protection and has proven reliable against various threats."
"The platform's stability is good."
"The most valuable feature is the tool's integration with load-balancing applications, similar to FortiADC. Its importance depends on customer requirements, such as whether they prioritize application load balancing or layer seven protection."
 

Cons

"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"It should be easier to collect the logs with companies like Sumo. However, based on my discussions with the salespeople, I understand that's how they make their money. With the enterprise product, they want people doing those kinds of enterprise features to do the logging. They want them to pay a lot of money, and that's where I have an issue with them. That should be a default. You should be able to get the log no matter what. The logging should be universal."
"The solution could be more user-friendly."
"Latencies are always a problem."
"The product support needs to be accessible from more places, a wider area of coverage."
"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
"We are a product integrator and reseller, and we would like to have a better partner relationship, similar to a channel sales relationship. Sometimes we are on our own or get diverted by Cloudflare because they have direct sales, which competes with us and makes it difficult to build a relationship with this company since we want to be an MSP or a managed service provider for the solution."
"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"The usability of the interface could be improved as it is not user-friendly."
"I do not have any notes on improvement."
"The only thing I encountered was related to integration, mostly concerning translation."
"The usability of the interface could be improved as it is not user-friendly."
"FortiWeb Web Application Firewall's signature database updates could be improved."
"We have encountered issues with webhooks and management of FortiWeb Web Application Firewall's on-premise version."
"The price is a little higher than the competitors."
"FortiWeb could have an inbound load balancing pack."
"It would be good if the solution integrated with other solutions, like SAP."
"The technical support team is bad."
"The tool's price and performance are areas of concern where improvements are required."
"For users not familiar with Fortinet, it could be beneficial to provide more user-friendly analytics and reporting."
 

Pricing and Cost Advice

"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"The product's pricing is cheap."
"We don't have any issues with the price."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"We are using the free version."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
Information not available
"FortiWeb Web Application Firewall is not expensive."
"It is a cheap solution."
"FortiWeb Web Application Firewall's pricing is suited for small or medium organizations."
"This product offers two pricing options: a standard package and an advanced package."
"The tool is really expensive."
"The licensing cost of the product is pretty high compared to other OEMs in the market."
"I rate the product price a four on a scale of one to ten, where one is a high price, and ten is a low price."
"I would rate the pricing a four out of ten."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
846,617 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
20%
Computer Software Company
13%
Comms Service Provider
9%
Financial Services Firm
8%
No data available
Computer Software Company
15%
Financial Services Firm
12%
Manufacturing Company
12%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about FortiWeb Web Application Firewall (WAF)?
The most valuable features of the solution are SD-WAN, filtration, web filter, application filter, and IPS.
What is your experience regarding pricing and costs for FortiWeb Web Application Firewall (WAF)?
FortiWeb uses a subscription-based license, but there is also an option for a perpetual license. It's not the cheapes...
What needs improvement with FortiWeb Web Application Firewall (WAF)?
There are some issues pertaining to the migration. If some of my customers want to migrate from F5 to Fortinet Firewa...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Information Not Available
Information Not Available
Find out what your peers are saying about FortiWeb Web Application Firewall (WAF) vs. Fortinet FortiWeb Cloud WAF-as-a-Service and other solutions. Updated: February 2025.
846,617 professionals have used our research since 2012.