Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb vs Imperva Web Application Firewall comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Fortinet FortiWeb
Ranking in Web Application Firewall (WAF)
4th
Average Rating
7.8
Number of Reviews
92
Ranking in other categories
No ranking in other categories
Imperva Web Application Fir...
Ranking in Web Application Firewall (WAF)
6th
Average Rating
8.6
Number of Reviews
51
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2024, in the Web Application Firewall (WAF) category, the mindshare of Fortinet FortiWeb is 8.4%, up from 7.4% compared to the previous year. The mindshare of Imperva Web Application Firewall is 6.4%, down from 7.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF)
 

Featured Reviews

Kacem CHAMMALI - PeerSpot reviewer
Apr 1, 2024
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.
Abdullah Jin - PeerSpot reviewer
Sep 9, 2024
Offers bot protection and DDoS Protection and protects public-facing portals
Support is one thing I wish Imperva could improve. They follow the phone model and keep rotating you from one customer service person to another. The layer one support isn't very clear about the workings of the product. My feedback is primarily about Imperva Cloud, not on-premise. On-premise is a whole new story. Support is the issue for Imperva Cloud. It's also a bit pricey. It's a premium service and very expensive. The licensing model is not very straightforward. Every feature is priced separately, and to enjoy maximum protection, you'll have to spend a lot of money. The licensing model is a bit complex, and each feature is very pricey. For example, API security and web application protection are two separate license packages.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Built-in security templates, AV integrated, strong threat intelligence."
"This product is very user-friendly."
"The solution is easy to configure and deploy."
"If I need something from tech support, I can get it answered within the hour."
"The most valuable feature is ease of use."
"It is a good product. We have just blocked everything coming from some geographical locations or certain countries, and it has been working very efficiently when I look at logs, events, and incidents generated from the system. It is generating very good analytic reports about it. This is the most valuable thing about this solution. It has load balancing and almost everything that a web application firewall needs. It is very flexible and easy to learn and configure. It can be easily learned and configured by using the information available on different channels such as YouTube."
"The WAF profiles has been effective at mitigating web-based threats."
"The reason I recommend this product is because it guarantees that your network will be safe if it is set up properly and you fully utilize most of the functions."
"There are some features that are configured by default, so even without doing much, it can still provide a level of protection."
"The configurability of the tools and the ease of operation to be the most valuable feature of Imperva."
"If you are using the appliance as opposed to the virtual deployment, it can stand as the network layer-two and provide real transparency."
"We can prevent attacks or issues even before they happen."
"The valuable features of Imperva WAF include its effective security breach prevention through automatically updating rules."
"I am impressed with the product's scalability, availability, easy management, and security. We were able to integrate the product with Azure and Sentinel."
"The solution is scalable."
"The most valuable features of the Imperva Web Application Firewall are performance and flexibility. We can extend or customize the box itself."
 

Cons

"The GUI could be better. It's limited."
"Fortinet FortiWeb could improve in reference architecture for different deployment scenarios."
"We have had problems with deployments where we've had to contact technical support to resolve them."
"The reporting could be optimized."
"The upgrade process could be a bit smoother."
"FortiGate could be improved on the security end because we've had some incidents with the customer. Otherwise, there is no problem."
"In terms of performance, it needs to be more robust."
"The initial setup in our data center was somewhat complex."
"I don't really use it and therefore can't speak to areas of improvement."
"The process to upgrade from one version to another can be a lot simpler than it is currently."
"Imperva Web Application Firewall can improve by adding more features to the dashboard. increasing the visibility of the real-time events, besides configuring the administration itself."
"Imperva Web Application Firewall is very expensive."
"In the past, I have bugs on the WAF. I've contacted Imperva about them. Future releases should be less buggy."
"Imperva Web Application Firewall could improve the API integration. It was complex for us. Additionally, The onboarding could be better."
"There could be some limitations that from the converged infrastructure perspective: when you want to converge with everything and you want Imperva to get there easily because it's not a cloud component. For example, when you want to build servers and you're using OneView to manage your software-defined networks, implementing Imperva right away is not that simple. But if you're doing just a simple cloud infrastructure with servers in there, you're good to go. Also, we are not able, with Imperva, to block by signatures. Imperva by itself needs to be complemented with another service to do URL filtering."
"It is complicated to integrate the solution's on-cloud version with other platforms."
 

Pricing and Cost Advice

"The price of Fortinet FortiWeb is expensive in our Ethiopian currency."
"It is fine now. We had to earlier negotiate the price."
"If one is cheap and ten is expensive, I rate the tool an eight."
"The cost isn't expensive."
"So far, I have been pretty pleased with the way it's priced and licensed. The way it's done makes it easy, especially for an organization like us, so I've been pleased with the way it's priced and licensed right now."
"FortiWeb offers these services at a price that SME customers can afford, but it's also suitable for large enterprises. Still, they need to put in more work to gain a greater share of enterprise business because they face stiff competition in this segment from F5, Cloudflare, and some others."
"The pricing is in the middle. I would rate the pricing a five out of ten. It feels like a justified cost for the features."
"The pricing is pretty good. We do pass a lot of traffic through our API servers. Something like 100 gigs of web traffic is a fair amount for reduced JSON API calls, but the cost is $50. For that peace of mind, we have thousands and thousands of customers that are protected by that $50, so it's a no-brainer."
"Imperva’s pricing is a bit higher in the market since it offers a full-blown WAF."
"Imperva Web Application Firewall is expensive."
"The cost of this solution depends on the platform."
"Imperva Web Application Firewall's pricing is expensive."
"There is a license for this solution and we purchase the license annually with no additional fees."
"There are a couple of different licensing models."
"There are some licenses that you have to buy to use some features. Its price could be better. Price is always important because, at the end of the day, customers have a budget. If you can meet the budget, you can sell, and if you don't, you cannot sell."
"The pricing is somewhat expensive. It is actually a huge investment when compared to other countries."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
815,854 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
42%
Computer Software Company
10%
Financial Services Firm
7%
Government
4%
Financial Services Firm
17%
Computer Software Company
14%
Manufacturing Company
7%
Insurance Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
It's better. Yeah, it's really good. It's one of the main points why we offer it. Since we are partners with them, sometimes we offer our customers a lower price.
What needs improvement with Fortinet FortiWeb?
Fortinet's technical support is pretty slow, especially when you have quick questions. The support kind of delays itself and sometimes takes more time. That's the only thing that I can think of at ...
Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?
For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you have to look for other ADC's like F5, Imperva, Radware, Fortinet, etc.
DDoS solutions: Any other solutions to consider aside from Radware DefensePro and F5 Silverline DDoS Protection?
You can have a look to Imperva Cloud WAF, the anti-DDoS mitigation is under 1s and works very well. I observed a lot of DDoS attacks that were well managed (even not seen by the customer) by Imperv...
 

Learn More

 

Overview

 

Sample Customers

Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
BlueCross BlueShield, eHarmony, EMF Broadcasting, GE Healthcare, Metro Bank, The Motley Fool, Siemens
Find out what your peers are saying about Fortinet FortiWeb vs. Imperva Web Application Firewall and other solutions. Updated: October 2024.
815,854 professionals have used our research since 2012.