FortiWeb Web Application Firewall (WAF) Reviews

Name: FortiWeb Web Application Firewall (WAF)
Brand: Fortinet
Rating: 4.1 (23 reviews)

4.1 out of 5

23 reviews
91% willing to recommend

What is FortiWeb Web Application Firewall (WAF)?

FortiWeb Web Application Firewall uses machine learning to reduce false positives, detects zero-day threats, and blocks DDoS attacks. It integrates with existing security infrastructure and provides SD-WAN capabilities, offering protection for websites and mobile applications.

Get the FortiWeb Web Application Firewall (WAF) Buyer's Guide and find out what your peers are saying about FortiWeb Web Application Firewall (WAF), Azure Front Door, AWS WAF and more!

FortiWeb Web Application Firewall (WAF) is the #16 ranked solution in top Web Application Firewalls. PeerSpot users give FortiWeb Web Application Firewall (WAF) an average rating of 8.2 out of 10. FortiWeb Web Application Firewall (WAF) is most commonly compared to Azure Front Door: FortiWeb Web Application Firewall (WAF) vs Azure Front Door. FortiWeb Web Application Firewall (WAF) is popular among the large enterprise segment, accounting for 43% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Buyer's Guide

FortiWeb Web Application Firewall (WAF)

February 2025

Get the report

Helped 838,713 peers since 2012

Featured reviews

IgnitiusMolepo

Senior IP Network Defense at MTN

The tool secures our critical applications, especially the mobile money application, which is often targeted by attacks. The solution provides rapid protection and has proven reliable against various threats. It blocks malicious traffic, including dormant and DDoS attacks, and offers integrated Web Application Firewall features to safeguard against compromises. You can set it up for customer-facing web applications because customers don't necessarily know all the IP addresses. It uses a source-based approach where any source accessing the application is defined by its IP. When accessing the application, it checks if they are using HTTP or HTTPS and blocks them if necessary. The tool's performance and security reporting capabilities contribute positively to IT security management. Consolidating management within the solution makes it easier for IT to handle the solutions. All functionalities managed on a single box reduce the number of boxes needed for management.

Read full review

Nitith Unarat

Pre-Sales at PPLUS VISION

The price could be close to Imperva; Imperva is the number one firewall. FortiWeb cannot do some kind of ADC solution, like load balancing. I hope they improve that. I'm looking for the ADC solution, the load balancing solution. Because application firewalls with multiple line solutions do come with it. So, I think it should be integrated within FortiWeb WAF.

Read full review

Martin Ellmann

Chief Executive Officer at EE Solutions GmbH

The solution helps protect our company's web applications against common threats up to 99 percent. We feel very safe with the tool. Speaking about how the tool has effectively mitigated web security threats for an application, I would say that it is an application behind the web portal, so there are about a hundred or thousand people who can access a website. If it is a sensitive application, and we have to watch every access to it to make it really safe, that is the reason why we need WAF on the application. My company doesn't use AI with the tool. I recommend the product to others. I would say that others need to have it if they have a shopping website or something similar. I know it is hard to sell because we find it quite hard whenever my company tries to do so. The solution offers 100 percent integration with other Fortinet security products. The ease of policy configuration in the tool is okay. I rate the tool a nine to ten out of ten.

Read full review

FortiWeb Web Application Firewall (WAF) mindshare

As of February 2025, the mindshare of FortiWeb Web Application Firewall (WAF) in the Web Application Firewall (WAF) category stands at 0.7%, up from 0.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Web Application Firewall (WAF)

PeerAnalyst reports

Type	Title	Date
Category	Web Application Firewall (WAF)	Feb 22, 2025	Download
Product	Reviews, tips, and advice from real users	Feb 22, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs AWS WAF	Feb 22, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs F5 Advanced WAF	Feb 22, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs Microsoft Azure Application Gateway	Feb 22, 2025	Download

Title	Rating	Mindshare	Recommending
Azure Front Door	4.4	4.2%	100%	13 interviews Add to research
AWS WAF	4.0	11.8%	80%	58 interviews Add to research

Valuable Features

FortiWeb Web Application Firewall is valued for blocking attacks from application layers, machine learning capabilities, built-in antivirus, user-friendly interface, integration features, threat detection, and compliance with standards. It effectively manages DDoS attacks and allows extensive customization for security consolidation. Users appreciate its SD-WAN capabilities, competitive pricing, channel program, and efficient web access control. It integrates smoothly with existing infrastructure and load-balancing applications, enhancing web application protection with low false positives and a comprehensive attack signature library.

"Their support is truly exceptional when I compare it with similar large-sized companies."
"The good thing about Fortinet is that their enablement is very good in terms of training me and enabling resources on their technology."
"FortiWeb has a very extensive library of known attack signatures, which makes the product fit for any environment, regardless if the customer uses Windows-specific or non-Windows-specific applications."

Room for Improvement

FortiWeb Web Application Firewall needs enhancements in signature database updates and enterprise feature sets. Integration with other products should be smoother, and the interface more user-friendly. Improved documentation and support response times are necessary. Performance and pricing are concerns. Additional capabilities like advanced DDoS protection, antivirus features, and load balancing are desired. Better integration with Cisco and vulnerability scanners is needed. Database expansion for zero-day attack prevention and ease of advanced configurations require attention.

"If some of my customers want to migrate from F5 to Fortinet Firewall, or the Fortinet WAF solution, there are some migration issues since I cannot migrate all the elements quickly using Fortinet Firewall."
"For users not familiar with Fortinet, it could be beneficial to provide more user-friendly analytics and reporting."
"Regarding areas for improvement, the documentation needs work. We had issues with a customer because the documentation didn't clearly show which devices can connect with FortiWeb WAF, leading to misconfiguration and difficult meetings. We also need deeper technical support - finding who's responsible for technical aspects is challenging. Hungary has a good Fortinet office with strong sales and pre-sales employees."

ROI

Organizations report a 70% ROI with FortiWeb Web Application Firewall, highlighting reduced operational costs by 20% through savings on bandwidth and infrastructure. Users emphasize increased security, leading to decreased application downtime. FortiWeb's cost-effectiveness is noted as it is cheaper than alternatives with low false positive rates. Users achieve resource savings of 20% to 30%. The firewall provides more protection, allowing a compromise to use applications effectively.

Pricing

FortiWeb Web Application Firewall offers competitive pricing, suitable for small to medium organizations. While it provides value for money, some users find it expensive compared to other vendors. Pricing includes a standard and an advanced package, with the latter offering additional features like credential stuffing protection. It uses a subscription-based licensing model with an option for a perpetual license. Despite higher licensing costs, FortiWeb's plug-and-play deployment and single-license simplicity are appreciated.

"The product provides very good prices to customers. The price is set well and offers great value for money."
"The tool is really expensive."
"I rate the tool's pricing an eight out of ten."

Popular Use Cases

Organizations primarily use FortiWeb Web Application Firewall (WAF) to secure web applications and websites from various cyber threats, such as injection attacks, malware, and unauthorized access. It is widely employed for load balancing, web filtering, API protection, and bot mitigation. Users implement FortiWeb WAF to ensure secure access, adhere to compliance standards like PCI DSS, and enhance cybersecurity in multi-cloud environments or internet-facing servers, particularly in financial sectors and for critical infrastructure protection.

Service and Support

FortiWeb Web Application Firewall (WAF) customer service and support receive mixed responses. While many praise its good and responsive technical support, rating it eight out of ten and noting improvements, others express dissatisfaction with delayed responses and inconsistent service, especially for partners in certain regions. Some experts highlight exceptional service and quick responses, while others find the support during complex issues lacking and unresponsive, although the addition of elite support is recognized positively.

Deployment

FortiWeb Web Application Firewall's initial setup is generally easy, with some users deploying it within hours or days. It provides remote support and a straightforward wizard for setup. Deployment time varies, with certain users completing it in two months while others take longer. Some find it complex if advanced deployments are required. Fortinet offers good training, aiding those unfamiliar with the process. Maintenance is manageable, but updating firmware can be challenging.

Scalability

FortiWeb Web Application Firewall (WAF) is regarded as scalable by many, with ratings typically ranging from eight to nine out of ten. Users mention it scales well, especially in enterprise settings, with options like virtual or hardware appliances, and SaaS models enhancing flexibility. The firewall can handle various company sizes, from fewer users to those with extensive user bases. Some challenges arise with medium-sized hardware, but flex licensing can mitigate these issues.

Stability

FortiWeb Web Application Firewall is consistently rated highly for stability, with most users giving it scores between eight and ten out of ten. It is recognized as a very stable option, though any issues mostly relate to configuration and upgrade scheduling. Some emphasize the importance of using FortiAnalyzer. Fortinet releases updates frequently, which can be crucial for dealing with vulnerabilities. Instances of instability are rarely mentioned, ensuring reliable performance without network latency issues.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our FortiWeb Web Application Firewall (WAF) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

10%

Comms Service Provider

Educational Organization

Government

Non Profit

University

Outsourcing Company

Retailer

Logistics Company

Non Tech Company

Hospitality Company

Healthcare Company

Consumer Goods Company

Legal Firm

Performing Arts

Real Estate/Law Firm

Energy/Utilities Company

Media Company

Recreational Facilities/Services Company

Insurance Company

Transportation Company

Compare FortiWeb Web Application Firewall (WAF) with alternative products

Learn more about FortiWeb Web Application Firewall (WAF)

FortiWeb WAF secures web applications with features like machine learning-based threat detection, DDoS attack mitigation, and robust integration capabilities. Additionally, it manages HTTP traffic and offers SD-WAN functionalities. Built for GDPR compliance, it supports API protection and bot mitigation while enabling secure mobile and cloud application access. Users implement it across multi-cloud environments and in data centers offering advanced security and compliance, including PCI DSS. Despite feature-rich abilities, users seek enhanced database updates, better enterprise integration, and more accessible analytics. Improvements in support response, documentation, and scalability are desired to strengthen its robust security offering.

What are the key features of FortiWeb WAF?

Machine Learning: Reduces false positives and detects zero-day attacks.
DDoS Protection: Blocks distributed denial of service attacks.
Integration: Seamlessly fits with existing infrastructure.
GDPR Compliance: Ensures data privacy and protection standards.
SD-WAN Capabilities: Manages network distribution effectively.
Mobile and API Security: Protects applications and APIs efficiently.

What benefits and ROI can users expect?

Cost-Effectiveness: Offers a balance between features and pricing.
User-Friendly: Easy to navigate and manage deployments.
Global Deployment: Supports multi-cloud and cross-data center usage.
Security Compliance: Meets standards like PCI DSS for secure operations.
Enhanced Application Security: Provides comprehensive protection for apps.

FortiWeb WAF is widely implemented in data centers and financial industries, ensuring robust protection for web applications and sites. It supports multi-cloud environments on platforms like AWS and Azure, providing secure access while meeting compliance standards. Users benefit from enhanced application security and load balancing capabilities, making it a preferred choice in financial sectors that require VPN and SD-WAN consistency.