What advice do you have for others considering Fortinet FortiWeb?

I would recommend FortiWeb for web application security. Most products work the same despite being different solutions. I'd rate the solution nine out of ten.

I would recommend using Fortinet above any other tool. It is secure, cost-effective, and easy to use. The deployment and operational aspects are user-friendly.

The product has been in the WAF business for a long time. Its maturity cannot be compared to other alternatives. Based on my experience with Fortinet FortiWeb, I'd recommend it in specific cases, especially if you have a limited budget. It can meet basic requirements. However, other vendors have better features and support. I rate the overall product a six out of ten.

The product's document says that Forinet FortiWeb can detect zero-day attacks, but it needs more devices like FortiSandbox for help. Fortinet FortiWeb needs to be integrated with FortiSandbox. I think it is Fortinet's strategy to upsell other tools because Fortinet doesn't want to put the solution in one box or one device. If you want another feature, Fortinet wants you to buy another box. I rate the tool an eight out of ten.

My company doesn't specifically host e-commerce platforms since we offer mainly government services. The security part has been satisfactory till now, and we haven't faced any problems yet. FortiGate FortiWeb's features that have been most effective in mitigating web-based threats are possible because of the signatures. My company doesn't need to enforce a lot of policies or stuff. Fortinet FortiWeb has a lot of internal databases that can help you, and you can use whatever platform you are hosting your web applications through whichever software you use. it can build up a web protection profile that matches your needs, making it a very helpful tool. Speaking about how machine learning features enhance our security posture, I would say that some aspects of the website are not normally clear for our company, and machine learning helps in such areas. It just traces the normal usage of the web applications along with the websites or links most users visit while also checking which URLs are mostly used, after which the tool differentiates between the normal usage and any abnormalities, based on which it builds the model that can be used to improve the security. Sometimes, a person cannot do things manually and is not sure about all the aspects of our web applications because many are not developers. Machine learning comes into the picture because one may not know all the stuff associated with the product. A team of four or five people is enough to deploy the tool. Maintaining the tool is actually not a very big task and not many people are required for it. The integration capabilities of the product with other security tools have benefited our company's security strategy as it sits smoothly in our network. The tool doesn't cause any problems with the integration part. I would recommend that users use the tool's high availability. With the tool, one box is not enough, so there is a need to have a cluster of two boxes. Users need to measure their needs regarding the logging process and everything else, including processing. Even before starting to use it, we have to set up everything, or you would be confused about how to use the tool in the future, and it would be difficult to figure out how much retention log retention we would need in our company. It is important to set up everything related to the users' needs so that they don't need to change a lot of settings in the future. I rate the tool an eight out of ten.

As an integrator, I recommend FortiWeb to our clients and all other clients. Overall, I would rate it an eight out of ten.

I can't give general advice because I work with medium to large-scale organizations – my perspective is different from someone who uses a few servers in a data center. So, my advice for larger companies is that you need to have a very clear analysis of your specific needs. Each configuration option can make or break your business at that scale. In my opinion, FortiWeb would be a good fit for load balancing between three or four servers in a single physical data center location. And if you primarily want protection from standard, known web threats – OWASP type of stuff. If you have an application in one place and don't need to do specialized manipulation of requests to the website, then it's a good solution. Overall, I would rate the solution a five out of ten because it lacks advanced options and isn't very scalable. It seems suitable for average websites – that's my personal opinion.

I rate FortiWeb a five out of ten.

Overall, I rate the solution a seven out of ten.

I rate Fortinet FortiWeb eight out of 10. FortiWeb is a suitable product for SMEs. I recommend a proof of concept before going forward with any project.

I rate Fortinet FortiWeb a nine out of ten. I would definitely recommend the solution. FortiWeb is rich in security features and additional features like load balancing. It's one of the best products we use. It's easy and quick to deploy. The documentation is excellent. We are pleased with the product and see it as an integral part of deploying new applications in the cloud or on-premises efficiently.

Fortinet FortiWeb seems to have worked well for blocking unknown threats and attacks. It hasn't necessarily helped us streamline anything, but it has simplified how we provide the front-end firewall capability. It has reduced false positives to some degree. It tries to identify those to tell us what are the different threats, but it's hard to provide metrics without measuring what false positives might have been there. However, I do know that the reporting that it gives can identify that. Similarly, I don't know if it has reduced the number of alerts. However, I do know that it has allowed us to categorize and understand what types of threats we get. From the threat alerts, we get to know whether they're alerts we should be concerned about or whether they're just alerts notifying us that those are things that have come in that it has taken care of. So, I don't know if it has really reduced them as much as it has helped us to understand what they are and be able to focus more on if there are alerts that we need to take action on and investigate, or whether they're alerts for things that have been taken care of and we don't necessarily have to spend any time on. Overall, I'd rate Fortinet FortiWeb an eight out of ten for what it does.

I recommend it to everyone. Because we're a data protection company, we have a lot of people who want to do pen testing against us, and I'm very confident that we're protected because of Fortinet. If you're looking for a very comprehensive web application firewall, which is both simple to set up and also has a huge number of features to turn on, features that can give you some added protection for specific needs, give Fortinet a go. It's worth your time, and it won't take much time either.

The reason I recommend this product is because it guarantees that your network will be safe if it is set up properly and you fully utilize most of the functions. Overall, I would rate FortiWeb solution a nine out of 10.

I rate the solution a ten out of ten, and I recommend it for every organization with web services.

I highly recommend that any web application firewall be deployed in the IT infrastructure where companies host web applications. It should be there. Whatever you choose should integrate with a third-party load balancer. I'd rate the solution a ten out of ten.

It is important as part of your regular process to update any tools including the solution. Versions are built in other countries so it is a good idea to ensure you are using the latest, gold-standard version for your area. For example, check for direct internet access, review active directory authentications, and configure users, servers, and certificates. The solution is super easy to use, is inexpensive, and includes great technical support.

I rate Fortinet FortiWeb a nine out of ten.

We are just customers and end-users. Potential new users should compare different products from different vendors to make a decision on a web application firewall. It doesn't matter if it is FortiWeb, or F5, or something else, just take some time to compare. I'd rate the solution six out of ten.

I sell or presell, and in general, the feedback is great. In fact, I think that Fortinet FortiWeb is number one in terms of performance.

I rate Fortinet FortiWeb an eight out of ten.

I would advise getting the right engineer. You need someone who is a specialist, and that's very important. I would rate it an eight out of 10.

I would recommend this solution to others. Additionally, I would recommend F5. I rate Fortinet FortiWeb a nine out of ten.

I would recommend this solution. I hope they are able to make some changes to compete with other solutions, such as F5 and Citrix. I rate Fortinet FortiWeb a seven out of ten.

As I am a Fortinet partner, I make use of many of its products. I like the FortiWeb products. I rate Fortinet FortiWeb as a nine out of ten.

I would recommend those wanting to implement this solution to use good integrators, there are not too many people who know about this solution. I lived in Spain and there are not too many installations made, it's quite difficult to find people that know a lot about it. It's not a difficult installation and the vendor helped us a lot and is very helpful. You have professional services you can use from the vendor if you choose, but they are quite expensive for customers. One of the biggest lessons I have learned from using Fortinet FortiWeb is Fortinet helps you a lot. They can develop something specifically for a customers' use case without any costs for them. I rate Fortinet FortiWeb a nine out of ten.

Our company is a Fortinet partner. I'd rate the solution at a seven out of ten. In terms of functionality, it does a perfect job, however, when you have to integrate with third-party tools, that's where you might have issues. Going forward, maybe what Fortinet needs to do is to ensure that they don't have integration issues with the other big vendors that are common in terms of what's deployed out there. Someone might want FortiWeb, however, for example in my case where a bank needed to integrate that with Jamalt or HSM for description, they have to do their homework. When you're dealing with financial clients, they need to have seamless integration and not to have these challenges where it would take time to fix as an issue. That should be figured out pre-deployment. Companies in banking can't wait for clients to point out that this is an issue. They have to attend to it beforehand and resolve issues to meet expectations.

I rate FortiWeb nine out of 10. I would recommend it.

You need to accurately calculate the requirements of your infrastructure before implementing FortiWeb or any other web application firewall. Accuracy is very critical when scaling the product or the model that will be deployed on your infrastructure. I would rate FortiWeb an eight out of ten.

We're using the latest version of the solution. I cannot speak to the exact version number, as I don't have it on hand. We're a company that helps implement this product for clients. At this time, I'd rate the product at an eight out of ten. We've largely been very satisfied with its capabilities. I'd recommend the product to other users and companies.

I would rate this solution a ten out of ten.

We like the product, but we haven't yet decided to purchase it because we don't have the budget for now. We will express our preferences towards FortiWeb to our top management, and it will be decided by them. We will suggest to them that it is a good product. I would rate Fortinet FortiWeb a nine out of ten.

FortiWeb is a security product that I can recommend. My advice for anybody who is implementing this type of solution is not to simply believe the words of the vendors. Test the product in your environment and then you can select the best one for your needs. A lot of vendors nowadays will tell you that they are the best, but the best thing to do is test each of the products inside your network. The roadmap that the vendor has for this product is good. They have a lot of extra features that they are developing for future releases. They have an amazing R&D team, they know the competition, and they know the market. In my department, we find that it is amazing and are not searching for additional functionality. I would rate this solution a ten out of ten.

I would recommend this solution to others if they can afford it. We plan to continue using this solution. It is a good solution, and the customers are quite happy using it. I would rate Fortinet FortiWeb a nine out of ten.

In summary, this is a good product and I can recommend it for others. I would rate this solution an eight out of ten.

I would recommend this solution to others who are interested in using it. I plan to continue with my usage of this solution in the future. It's a good product, but if they could better the stability, it would be great. I would rate Fortinet FortiWeb an eight out of ten.

Fortinet FortiWeb is rated as one of the top WAF devices in many of the independent research reports. Our customers find Fortinet FortiWeb much better than other solutions. We plan to continue using this solution if an opportunity is there. It depends on the customer's requirements. If a customer is going for an online e-commerce website, we would always recommend going with Fortinet FortiWeb. I would rate Fortinet FortiWeb an eight out of ten.

We're using the latest version of the solution. Usually, for our security programs, I'm using on-prem. For now, in my experience, the typical Indonesian customer is using on-prem, as they worry about using the cloud, as the data cannot be stored in HR and it's actually often stored in another country. It's my understanding that we'll continue to use the solution for a while to come. Overall, I would recommend the product. On a scale from one to ten, I'd rate it at an eight. If it had a better interface and/or better pricing, I might rate it a bit higher.

My advice to people would be to evaluate the marketplace against your requirements and choose appropriately. Fortinet does operate at the enterprise level. It is listed on the Australian standard and it does carry Australia's approval for common criteria. So it does address the requirements needed for security for the assessments. Not every product can. On a scale from one to ten (where one is the worst and ten is the best), I would rate this Fortinet solution as a seven-out-of-ten because of user administrative controls, usability, and price.

We are a solution provider and system integrator company. We work for DCC countries. We deal with Fortinet, Meraki, Sophos, Check Point, Barracuda, and Juniper SRX solutions. Fortinet FortiWeb is comparable to Barracuda. We don't have many customers for Fortinet WAF, and we couldn't get that much good feedback. We mostly use Barracuda WAF. We use it even in the cloud environment. Fortinet is fine on the firewall side. We haven't sold many Barracuda firewalls, but for WAF, we mostly use Barracuda. We prefer Barracuda because they provide good training, and they always follow up. Customers also prefer Barracuda or any other WAF service. Customers receive good support from Barracuda. Fortinet WAF is rare. I would recommend this product only based on customer requirements. At the end of the day, how you install, configure, and meet customer requirements are more valuable. I never place a product ahead of a customer. Fortinet WAF might not be suitable for certain customers. Similarly, Barracuda WAF might not be suitable for certain customers. I always get customer requirements and then supply the product according to their requirements. I would rate Fortinet Fortiweb a five out of ten. It is neither good nor bad.

In my opinion, F5 is the best solution in the world, whereas Fortinet FortiWeb would be second. I have heard that Barracuda is a good solution, but I have not worked with it. In my experience, F5 is the better solution. I would rate Fortinet FortiWeb a seven out of ten.

We have been using Fortinet for four years and internally we are using Cisco. We would certainly recommend this product. I would rate this solution a nine out of ten.

This is a good product and I strongly recommend it, especially for companies in the banking industry. I would rate this solution an eight out of ten.

While I have not done comprehensive testing with FortiWeb, I have no complaints so far. My advice for anybody who is considering this product is that if they are not very advanced in terms of technical training, this product is a good choice because it is very simple to implement. I would rate this solution an eight out of ten.

The type of product you get depends on what you want to protect, how you want to protect it, and how many people will be accessing FortiWeb. What we have now is working fine. I would rate FortiWeb as an eight (out of 10).

Be sure that the security is correctly configured and all the attack patterns are covered. Make sure to do an independent assessment of the security. I would rate it a nine out of ten. We are very satisfied with it. We have an issue when the underlying web protected generates a logout and we want the authentication portal to recognize that the application has been logged out. When the underlying application generates a logout, the portal does not recognize the logout. I would like a way for the FortiWeb portal to easily recognize the portal.

I would rate this solution a seven out of ten.

In the version of Fortinet FortiWeb that we have, it does not include the scanner. We cannot access every feature. If you have all the popular products, you can use the system perfectly to connect everything. Fortinet can improve the security firebase in support for HTTPS and the CPU with additional configurations. On a scale from 1 to 10, I would rate Fortinet FortiWeb a two.

Every external solution acceptable for work will use FortiWeb. We do have three or four FortiWeb solutions now and if there is anything we need to share through the internet, it's going to be through FortiWeb. In terms of advice, I'd say take a good look at the support side of the help documents. There a very good document cycle on the Fortinet website. There's a lot of information. Get to know the solution. I would rate this solution eight out of 10.

The interface has been a pain in the past but now with the later version, 2.2, the user behavior analysis has improved. Before when you want to deploy an application, for example, you needed to have a login page and make sure to search for the user behavior and all the interactions. That way, you could generate flexible usage for that application. Now that's automated, so apart from that, there's no huge report or feature that we would like to improve. I would rate this product a ten out of ten.

If you are looking to be partner with Fortinet, you have to buy licenses. Not even VMs are free to partners. Fortiweb in essence, needs to become part of Fortigate. Fortinet is not suitable for SMB customers since you have to deploy several boxes in order to get thing right. Also, speed of deployment is important and that isn't fast with many boxes. On a scale from one to ten, I would rate this product a solid seven. It's a good product.

I would rate it an eleven out of ten.

I would rate it a seven out of ten. A seven and not a ten because of the antivirus issue.

I rate FortiWeb at eight out of 10 because it is good at what it does but I think it could do more, like combining DDoS protection.