Fortinet FortiWeb Reviews

I use Fortinet products for security projects. When it comes to middle-sized enterprises, SD-WAN firewalls are the appropriate solution, FortiGate products being more geared towards larger, enterprise organizations. This is not for a data center, for which Check Point and Palo Alto are better suited. Fortinet FortiWeb is best suited for medium and enterprise data center environments. 

My experience with the solution has been very positive. Fortinet is a great SD-WAN player when it comes to security capabilities. Also, it offers many models for a host of environments. I like the solution's SD-WAN features.

The memory use in each of the appliances is problematic. 

I believe that I have been working with FortiGate products for five years. 

As I am a Fortinet partner, I make use of many of its products. 

I like the FortiWeb products. 

I rate Fortinet FortiWeb as a nine out of ten. 

I am more on the design side. The use case depends on what a customer requires in terms of web protection. We mostly use it for reverse proxy and load balancing.

The ability to configure multiple policies for different requirements is a strong feature of Fortinet FortiWeb.

They can introduce a scaled-down version for the SMB market. It would be very competitive in the environment.

I have been using Fortinet FortiWeb for two or three years.

It is stable. You obviously need to assign and write configurations correctly.

It is scalable.

Every response from Fortinet is quite good and according to their SLAs.

I don't get involved in implementation and installation.

It is not a cheap product. It is not like a Linux or a Genex that you can deploy. It is a hardware appliance, and it is built for a specific reason and reliability.

It is an enterprise-class solution. You wouldn't find an SMB investing in something like this.

I would recommend this solution to others if they can afford it. We plan to continue using this solution. It is a good solution, and the customers are quite happy using it. 

I would rate Fortinet FortiWeb a nine out of ten.

I primarily use this solution for the protection of our applications. We chose Fortinet because you can check an application and deploy it in real time. We use the WAF solution from Fortinet to protect against new exploits discovered. Within Fortinet, there is a way to secure such bugs and exploits in the application we're running.

The most valuable feature in this solution is the ability to disseminate between the user entering some wrong value to the field, and a suspicious actor trying to exploit some known vulnerability. This part of the intelligence and behavioral analysis makes it very easy to tell if the user just used a few wrong characters in the field or not. It also checks to see if different characters are being entered very quickly, and can tell whether the user is actually typing something.

Another feature is the possibility to balance the traffic and there's lots of integration with your sandbox.

We would like to know more about the integration with the hardware or security products, such as Gemalto, because we need to move to that point. But, from what I understand, we haven't looked at the market to see how this can be done yet.

In terms of stability, we haven't had a crash or malfunction.

We've used the solution for two years and it's been okay.

We are operating at approximately sixty percent capacity. The solution is used all the time, but you can measure this because there are different boxes that you can buy for different levels. In our case, we keep some at thirty to forty percent available. In order to be able to watch an application and protect a larger amount of traffic, we keep it at this level. So we're good on this scalability or performance side.

We haven't had any technical issues, because it was designed as specified in the documentation. I know we have local support, so if there is an issue we can call and escalate the call to get the support if there is a problem. We are within the warranty service period, so from this side, we are comfortable with this solution.

We did use another solution, but, compared with the competition, we got the best ratio of performance to price when we chose Fortinet. We could use F5, for example, but the price is not as good.

The setup for one application is sort of complex but based on the automatic profiling, they're learning. You are provided with a set of policies that meet best practices and security recommendations, so you are good to go in a very short time.

We did the implementation ourselves. It was not required to have some higher level of expertise order to implement. There were no functions that were not documented, so we didn't need any outside party involved with this process.

The solution gives us the best price to performance ratio.

The interface has been a pain in the past but now with the later version, 2.2, the user behavior analysis has improved. Before when you want to deploy an application, for example, you needed to have a login page and make sure to search for the user behavior and all the interactions. That way, you could generate flexible usage for that application. Now that's automated, so apart from that, there's no huge report or feature that we would like to improve.

I would rate this product a ten out of ten.

Mitigation of attacks and thefts in an online banking platform.

High-performance and detection engines, because of their high rate of exposure of web attacks.

Integration and learning about attacks. I would improve these areas by making FortiWeb integrate with other network technologies and feedback from multiple platforms.

No issues with stability.

The equipment is dimensioned as a function of servers traffic. To scale on the platform it is necessary to acquire superior models.

Excellent.

It was simple and functional.

FortiWeb can be purchased in VM mode for a lower price and the same features.

The WAF module of F5 was evaluated.

FortiWeb is easy to operate with a reasonably high level of protection. FortiWeb provides multiple deployment options with a physical or virtual (FortiWeb-VM) appliance, and acts either as a reverse/transparent proxy or out-of-band. It is also available on AWS and Azure.

I would advise requesting a PoC test with a learning policy.

I use Fortinet FortiWeb to protect my web application. It works to protect my applications from attack signatures. It allows me to create a URL profile and HTTP content routing when I have many web servers working on the same virtual server.

Fortinet FortiWeb has helped our organization by protecting the web application from any attack, known and unknown. The unknown protection is done by effective machine learning that is working on many unknown attacks. It operates on the probability of attacks.

The most valuable feature is the attack signature and machine learning.

The machine learning feature of the solution could be improved.

No solution is 100% secure and the security could always be worked on.

I have been using Fortinet FortiWeb for a year and a half.

Fortinet FortiWeb is stable. It is able to detect the latest vulnerability from Log4j that happened on The Verge.

The solution's attack signature receives its update from Fortinet Developer Network, and many of the updates are immediate. The attack signatures are updated regularly due to the connection to Fortinet Developer Network.

The solution is highly scalable.

The technical support was good, they were very fast. They were able to resolve my issues.

I have used the support in many solutions, such as FortiClient, FortiWeb, for Sandbox integration with FortiMail, and other products in Fortinet.

The installation is easy. It takes one day for the implementation, and after 14 days one day for tuning.

Some customer needs to go to production fast, it can take me one day for the installation, and after seven days I can do the tuning quickly.

I do the implementation and support the solution.

There is a subscription to use this solution. There are some additional features that can be added for an extra fee. The use of the features depends on the client's needs, such as full machine learning and signatures.

I would recommend this solution to others. Additionally, I would recommend F5.

I rate Fortinet FortiWeb a nine out of ten.

The most valuable features are support and security.

More templates should be made available for reporting.

I would like to see more improvements with respect to threat intelligence.

I have been using Fortinet FortiWeb for a few years.

This is a stable solution.

Scalability is good. We have more than 1,000 users.

The technical support is okay and I am satisfied with it.

The initial setup is straightforward and the deployment can be completed within a couple of hours.

I would rate this solution a seven out of ten.

Fortinet FortiWeb has improved my organization by protecting our customers' web infrastructure environment.

The most valuable feature is the web application firewall (WAF).

Their support needs improvement.

No stability issues.

No scalability issues.

I would rate their technical support as a nine out of 10.

We previously used NetScaler.

The initial setup was straightforward.

The pricing is reasonable.

Not applicable.

Evaluate this product against other vendors out there.

We were previously a partner.

We use Fortinet FortiWeb to protect our exchange terminal for mail security.

The F5 solution has more features than Fortinet FortiWeb, such as multiple load balancing.

I have been using Fortinet FortiWeb for approximately four years.

The solution is stable.

I have approximately four clients using this solution.

The installation is easy and straightforward, and the timeframe depends on the application

We have one engineer that does the support of this solution.

I have evaluated F5 and Citrix.

I would recommend this solution. I hope they are able to make some changes to compete with other solutions, such as F5 and Citrix.

I rate Fortinet FortiWeb a seven out of ten.