Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb vs R&S Web Application Firewall (DenyAll) comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
75
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Fortinet FortiWeb
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
95
Ranking in other categories
Web Application Firewall (WAF) (5th)
R&S Web Application Firewal...
Average Rating
9.0
Reviews Sentiment
8.5
Number of Reviews
1
Ranking in other categories
Web Application Firewall (WAF) (39th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Kacem CHAMMALI - PeerSpot reviewer
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.
SS
Geo-localization and IP reputation help to keep our clients secure and more available
The area that should be improved is licensing. When using an active/passive cluster, we have to pay 70% of the master appliance and license for the passive server that does not work. Since we know that only one server works at a time, we should pay only one license for the appliances and for the support as well. In my opinion, this has to be improved. If possible, the client software should be a web application instead of downloading software for the management. This can avoid login problems when they update or patch.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is its usability."
"The DDoS protection is the most valuable aspect of the solution."
"I like Cloudflare's application gateway and DDoS protection."
"Cloudflare has many features."
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"The most valuable feature of Cloudflare DNS is security."
"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"It is a fast and secure DNS."
"The solution has a very simple deployment."
"Other than the additional security with exploit protection, we have simpler certificate handling, as we can keep internal servers using internal certificates continuously distributed and updated by Active Directory Group Policy, while the public certificates become updated only in a single place, FortiWeb itself."
"The product has a very user-friendly dashboard."
"The most valuable feature of Fortinet FortiWeb is the reports and the AI-based features."
"It is a good product. We have just blocked everything coming from some geographical locations or certain countries, and it has been working very efficiently when I look at logs, events, and incidents generated from the system. It is generating very good analytic reports about it. This is the most valuable thing about this solution. It has load balancing and almost everything that a web application firewall needs. It is very flexible and easy to learn and configure. It can be easily learned and configured by using the information available on different channels such as YouTube."
"FortiWeb offers machine learning in the latest product. This fixed many problems. There are no false negatives."
"The most important feature of this solution is protection from attack."
"The customers are very happy with this solution because of two things. First, the IPS integration with a web application is very tightly done on Fortinet. Second, the ease of use is there. The management interface or the GUI interface is very easy to use, configure, and manage. These are the two main valuable features. It supports integration with other Fortinet products. It also integrates very well with the firewall and sandboxing technology. They already have enough integration with different technologies. They have got a complete tech intelligence view of the whole product."
"The three most valuable features that I noticed are the geo-localization of the user, the IP reputation, and the compartmental analysis."
 

Cons

"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"Integration involving API with other products could be more user-friendly."
"An integrated SSO feature would be useful for Cloudflare DNS."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"There could be more courses with engineers. I like e-learning, however, having a specialist in a classroom is more comfortable for me."
"Cloudflare could be improved by introducing a mid-tier pricing option."
"It can be better with web application firewalls."
"It may be better if it were easier to create roles."
"It would also be helpful if they could introduce easier reporting. It's good to have those reports that go to C-level management, and Fortinet does provide some graphs, but if they went into some more detail, that would be great."
"FortiGate could be improved on the security end because we've had some incidents with the customer. Otherwise, there is no problem."
"HA Architecture needs improvement. I would improve it by working on AP HA."
"We have had problems with deployments where we've had to contact technical support to resolve them."
"No solution is 100% secure and the security could always be worked on."
"I see no room for improvement at the moment."
"The area that should be improved is licensing."
 

Pricing and Cost Advice

"The tool is a premium product, so it is very expensive."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The product's pricing is minimal compared to other products."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"We are using the free tier of the solution."
"The license to use Fortinet FortiWeb is approximately $14,000."
"FortiWeb can be purchased in VM mode for a lower price and the same features."
"If one is very cheap and ten is very expensive, I rate the product price as three or four."
"There's only one payment for the duration of the license. On a scale from one to five, I would rate pricing at four. I have not encountered any additional costs on my projects involving Fortinet FortiWeb."
"The price of Fortinet FortiWeb is reasonable. This is one of the key factors of why we use this solution."
"FortiWeb is more expensive than some competing products."
"The solution is very inexpensive when compared to F5 Advanced WAF and Avi Networks but offers the same benefits."
"Cheaper than others."
Information not available
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
848,716 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
18%
Computer Software Company
13%
Comms Service Provider
9%
Financial Services Firm
8%
Educational Organization
41%
Computer Software Company
8%
Financial Services Firm
7%
Government
5%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
Fortinet FortiWeb is cost-effective compared to solutions like F5. It offers strong performance for the price, provid...
What needs improvement with Fortinet FortiWeb?
The cloud-based security service of Fortinet FortiWeb could be enhanced to match the level of providers like Cloudfla...
Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?
Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...
 

Also Known As

Cloudflare DNS
No data available
Rohde & Schwarz Web Application Firewall, R&S WAF, DenyAll Web Application Security
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Information Not Available
Find out what your peers are saying about Amazon Web Services (AWS), F5, Microsoft and others in Web Application Firewall (WAF). Updated: March 2025.
848,716 professionals have used our research since 2012.