Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb vs Symantec Web Application Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
74
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Fortinet FortiWeb
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
95
Ranking in other categories
Web Application Firewall (WAF) (5th)
Symantec Web Application Fi...
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
3
Ranking in other categories
Web Application Firewall (WAF) (44th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Kacem CHAMMALI - PeerSpot reviewer
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.
reviewer1231533 - PeerSpot reviewer
An excellent up-to-date data repository handling external threats successfully
We have multiple applications that we wanted to ensure were protected and we chose Symantec for that. I'm the head of IT infrastructure and we are partners with Symantec.  Symantec has specifically helped connect external users to our internal network. It has also enabled us to ensure that those…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"The technical support is good."
"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service."
"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"The DDoS protection is the most valuable aspect of the solution."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"The UI is good."
"The most valuable feature is the attack signature and machine learning."
"Fortinet FortiWeb is priced well."
"The most valuable feature of Fortinet FortiWeb is the ease of integration and configuration."
"It is a stable product."
"When we had Cisco we had around thirty thousand entries on our firewalls. Now we are down to three thousand. Fortinet has a mechanism to detect all of your entries which are not used, and it can clean it up."
"FortiGate is a stable product."
"We find that it is quite stable and reliable."
"The GUI makes it easy to scale in terms of learning and utilization."
"The setup was straightforward."
"The solution has an up-to-date data repository to deal with external threats."
"The interface is user-friendly."
 

Cons

"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"An integrated SSO feature would be useful for Cloudflare DNS."
"In the last two years, there has been a certain amount of downtime when using the VDM."
"There should be a specific price list for enterprise-level customers."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"Cloudflare should add more documentation and pricing to the cloud version."
"They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem."
"In my experience, Fortinet FortiWeb could improve the intelligent features to acknowledge whether any threat or incident that's running happened. Then give us the ability to escalate it to layer 2 or layer 3 in the network operations."
"FortiWeb needs to have support for the newest technology being used in web applications."
"The solution could improve by providing more integration with solutions other than the Fortinet family."
"No solution is 100% secure and the security could always be worked on."
"We have had problems with deployments where we've had to contact technical support to resolve them."
"I see no room for improvement at the moment."
"The dashboard evaluating the performance of each application connected to the web app's firewall is quite helpful, but the tool is only available in application performance management. So I think if Fortinet could better integrate that particular feature, it would add a lot of value to the product."
"Integration and learning about attacks. I would improve these areas by making FortiWeb integrate with other network technologies and feedback from multiple platforms."
"I'm not convinced that it's necessary the best solution going forward in the future."
"Sometimes scanning slows down the endpoints."
"It would be an improvement if the management dashboards were not reliant upon Java."
 

Pricing and Cost Advice

"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"That is one of the great features. I was able to access the majority of the features and services for free."
"The cost primarily depends on the size of the organization."
"The price is reasonable."
"The tool is a premium product, so it is very expensive."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"We are using the free tier of the solution."
"We don't have any issues with the price."
"The price of Fortinet FortiWeb depends from customer to customer because some customers are considering using other solutions, such as Imperva. The price of Fortinet FortiWeb sits well for the middle-sized customers that we deal with."
"Previously, for each project, the cost was $800 to $1,000 per application. Now, it's $100 to $120. For some of the applications, there is a 90% reduction, and for some of the applications, there is a 50% reduction. We're paying only $500 to $600."
"It keeps changing, but it's based on the size of the VM you buy and also the traffic throughput you want from it, whereas what we have on Azure is just the traffic throughput. You can also pay on a monthly basis from Azure. During each part of the project, it's okay to get Azure-based licensing or AWS-based licensing for FortiWeb, but over time, you would want to go with the perpetual license. You should go to Fortinet and buy the license from them. So, there is a two-step process there."
"​The pricing is reasonable."
"The price of Fortinet FortiWeb is reasonable. This is one of the key factors of why we use this solution."
"Cheaper than others."
"The price is competitive."
"It is not a cheap product. It is not like a Linux or a Genex that you can deploy. It is a hardware appliance, and it is built for a specific reason and reliability. It is an enterprise-class solution. You wouldn't find an SMB investing in something like this."
Information not available
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
846,617 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
20%
Computer Software Company
13%
Comms Service Provider
9%
Financial Services Firm
8%
Educational Organization
41%
Computer Software Company
9%
Financial Services Firm
7%
Government
5%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
I would rate the licensing cost as seven out of ten, considering it good value for money. The price is affordable and...
What needs improvement with Fortinet FortiWeb?
There is room for improvement in the portability on multi-cloud environments. Enhanced DDoS integration to make Forti...
Ask a question
Earn 20 points
 

Also Known As

Cloudflare DNS
No data available
Symantec WAF, Blue Coat Protecting Web Applications
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Information Not Available
Find out what your peers are saying about Fortinet FortiWeb vs. Symantec Web Application Firewall and other solutions. Updated: March 2025.
846,617 professionals have used our research since 2012.