Tech specs
1-8 of 80 reviews
What is our primary use case? FortiWeb is used for protecting against malicious activities, such as SQL injections, for outward-facing web forms. What is most valuable? The most valuable features of FortiWeb include its dashboard and out-of-the-box integrations with other Fortinet products, which enhance its effectiveness. FortiWeb's position as part of the Fortinet platform makes it particularly beneficial for Fortinet customers, offering seamless integration and operational cost savings. What needs improvement? There is room for improvement in the portability on multi-cloud environments. Enhanced DDoS integration to make FortiWeb more unified with other Fortinet products could be beneficial. For how long have I used the solution? I have personally been working with FortiWeb for approximately two years. What do I think about the stability of the solution? I would rate the stability of FortiWeb as nine out of ten, indicating highly stable performance. What do I think about the scalability of the solution? I would rate the scalability of the product a seven out of ten. While it is multicloud-enabled, there is more automation in other products that may better suit complex environments. How are customer service and support? I would rate the customer service and support as nine out of ten. How would you rate customer service and support? Positive What about the implementation team? Our team, consisting of three certified Fortinet engineers, handles the deployment, although globally, Exclusive Networks has a large team of certified engineers. What was our ROI? Operational costs decrease when using FortiWeb within the Fortinet stack due to integrated assessments and security event management. What's my experience with pricing, setup cost, and licensing? I would rate the licensing cost as seven out of ten, considering it good value for money. The price is affordable and reasonable for the features offered. Which other solutions did I evaluate? We also work with other vendors such as F5, Proofpoint, and Palo Alto, however, Fortinet stands out for its holistic vision of cybersecurity. What other advice do I have? Overall, I would rate FortiWeb an eight out of ten for existing Fortinet customers due to its seamless integration and good value for money. Disclaimer: My company has a business relationship with this vendor other than being a customer:
What is our primary use case? We use FortiWeb to connect external APIs to our on-prem data center solutions. What is most valuable? We use FortiWeb for extended protection profiles to mitigate SQL injection and other web application threats. It is effective against web application threats and helps with our API protection and load balancing. Additionally, it is cost-effective compared to other solutions. What needs improvement? They could integrate some kind of machine learning and AI facilities to automate workflows. We need to update regular patches frequently, and it requires regular installation and testing of these patches. For how long have I used the solution? We have been working with FortiWeb for almost five years. What do I think about the stability of the solution? It is stable for us, showing good performance in handling web security. What do I think about the scalability of the solution? I would rate its scalability at six because we have to increase our CPU and memory capacities, as it is confined to CPU and memories. How are customer service and support? I would rate the customer service and technical support between eight and nine out of ten. How would you rate customer service and support? Positive How was the initial setup? The setup is easy to manage. What was our ROI? It helps us save costs, about 20% to 30%. What's my experience with pricing, setup cost, and licensing? In comparison to other solutions, the price is reasonable. What other advice do I have? FortiWeb is suitable for medium-scale companies. I recommend using this solution. I'd rate the solution nine out of ten. Which deployment model are you using for this solution? Public Cloud If public cloud, private cloud, or hybrid cloud, which cloud provider do you use? Other Disclaimer: I am a real user, and this review is based on my own experience and opinions.
What is our primary use case? The primary use case involves using FortiWeb to protect web servers from various malicious activities by integrating it into a firewall with features like URL filtering and application control. Additionally, it was deployed to meet the requirements of PCI DSS. How has it helped my organization? FortiWeb has been helpful in securing our web servers effectively. Fortinet FortiWeb is reliable, providing seamless protection and peace of mind regarding the security of our web applications. What is most valuable? FortiWeb has antivirus, web filtering, and application control features. Being part of the next-generation firewall, it's highly effective in ensuring security. The capability to protect from malicious activities is significant, alongside other features like application control. What needs improvement? I cannot provide feedback on what needs improvement as I haven't used other solutions to compare it against and therefore cannot identify any areas lacking in FortiWeb. Overall, FortiWeb is reliable. For how long have I used the solution? It's been a year since I last used FortiWeb, while I previously configured and used it actively. What do I think about the stability of the solution? FortiWeb is reliable in terms of stability. There haven't been specific downtimes or technical issues with FortiWeb. How are customer service and support? We haven’t encountered issues necessitating contact with customer service for FortiWeb, implying stable support from Fortinet. How would you rate customer service and support? Neutral Which solution did I use previously and why did I switch? I have no experience with other solutions. How was the initial setup? The initial setup depends on familiarity with the product. It's manageable with the right expertise. In cases of a simple application, setting up could be achieved in as little as one day. What's my experience with pricing, setup cost, and licensing? I can't determine the exact cost of licensing as it was part of a bundle that offered multiple features and licenses. Which other solutions did I evaluate? I have no experience with other solutions. What other advice do I have? I must emphasize the reliability. I'd rate the solution seven out of ten. Which deployment model are you using for this solution? On-premises Disclaimer: I am a real user, and this review is based on my own experience and opinions.
What is our primary use case? We are studying ClearPass as a solution. I was requesting a comparison between Aruba ClearPass and FortiWeb Forti. How has it helped my organization? FortiWeb has been a helpful investment in our network. What is most valuable? The reporting and token system is good. The AI machine learning was qualified to block and report any suspicious activity. What needs improvement? I see no room for improvement at the moment. For how long have I used the solution? I have been familiar with FortiWeb for about three years now. How are customer service and support? The technical support is very helpful. I rate their technical support a nine out of ten. How would you rate customer service and support? Positive Which solution did I use previously and why did I switch? I only worked with similar solutions as a POC. How was the initial setup? The initial setup was easy. What was our ROI? FortiWeb has been a good investment, helping our network and providing a return on investment. What's my experience with pricing, setup cost, and licensing? The pricing of Fortinet FortiWeb is affordable and competitive. What other advice do I have? I recommend FortiWeb to others. I wish there were more integration with Azure systems. I'd rate the solution ten out of ten. Which deployment model are you using for this solution? On-premises Disclaimer: I am a real user, and this review is based on my own experience and opinions.
What is our primary use case? I used FortiWeb, and I was looking if the SIPTNA from Symantec had something to do with the one from Fortinet. I am a consultant and I propose Fortinet products to my customers. I usually recommend FortiWeb for companies that are looking for a WAF. How has it helped my organization? It's really easier for them to integrate. Sometimes we help them, and once it's integrated, it doesn't have a lot of requirements from their side. They just have to keep the site going with their security assessment. They do not need for us to help them more. What is most valuable? Usually, people want to change, solutions and we recommend that it is easy to use. Even though most products have the same functionality nowadays, FortiWeb is easy to integrate. What needs improvement? Fortinet's technical support is pretty slow, especially when you have quick questions. The support kind of delays itself and sometimes takes more time. That's the only thing that I can think of at the moment. How are customer service and support? Fortinet's technical support is pretty slow and kind of delays itself when you have quick questions. How would you rate customer service and support? Positive Which solution did I use previously and why did I switch? I was using another solution. I just wanted to research it to see if it had something extra. It was just some research for a project. I just wanted to know if any of them had some qualities that seemed similar to Symantec. How was the initial setup? It's true that we are the ones that usually deploy it for our clients. Since we do it for many of them, we think it's really easy. But as for many products, it's really straightforward. What about the implementation team? We are the ones that usually deploy it for our clients. Since we do it for many of them, we think it's really easy. What's my experience with pricing, setup cost, and licensing? It's better. Yeah, it's really good. It's one of the main points why we offer it. Since we are partners with them, sometimes we offer our customers a lower price. Which other solutions did I evaluate? The clients that we know use both FortiWeb and Symantec. I used FortiWeb, and I was looking if the SIPTNA from Symantec had something to do with the one from Fortinet. What other advice do I have? I would recommend FortiWeb for web application security. Most products work the same despite being different solutions. I'd rate the solution nine out of ten. Disclaimer: My company has a business relationship with this vendor other than being a customer:Partner
What is our primary use case? We use it for all our hosted web applications, so they are routed via FortiWave and Fortinet. We use both the network firewall and the application firewall. The whole infrastructure and everything else are protected. Fortinet protects the web infrastructure. What is most valuable? There are very few specific things that are not present in cloud-native firewalls, like Azure Firewall or AWS Firewall. They lack many features, such as the ability to handle paths in requests larger than eight KB. For example, if you upload a document or the page size exceeds eight KB, you might face issues with AWS and other cloud-native firewalls. FortiWeb can handle requests of up to 10MB, providing this capability. It also has a very user-friendly UI. Even someone new to FortiWeb or any firewall system, with the right contextual knowledge, can configure it effectively. The support and documentation provided by Fortinet are generally sufficient for any team to manage infrastructure using Fortinet and FortiWeb. What needs improvement? Native cloud firewalls, like AWS WAF or Azure Firewall, have limitations compared to next-generation firewalls like Fortinet FortiWeb or other solutions. While AWS and Azure have security features, they are often tailored to their specific technologies and may lack some advanced capabilities in next-generation firewalls. This is why we sometimes opt for solutions like Fortinet, even in a cloud environment. Fortinet FortiWeb has strengths, but there is room for improvement. For example, its threat intelligence capabilities may not be as advanced as some competitors. While Fortinet excels in many areas, it could enhance its advanced intelligence features. However, in terms of configuration, maintenance, and securing infrastructure, Fortinet remains a strong option. For how long have I used the solution? I have been using Fortinet FortiWeb as a partner for five to five years. What do I think about the stability of the solution? I rate the solution’s stability a seven out of ten. What do I think about the scalability of the solution? It is suitable for enterprises. I rate the solution’s scalability as seven or eight out of ten. How are customer service and support? We have a procurement team and a support engagement team that is helping us with issues. They are maintaining the SLA and all those things. How was the initial setup? Deployment can be straightforward, like spinning up EC2 instances or Azure VMs with Fortinet, which can be a one-click process. The complexity arises from configuring Fortinet within your specific ecosystem. The configuration depends on the size and nature of your infrastructure, including the number of machines and appliances and the types of systems you are protecting, such as APIs, normal instances, or mobile applications. While deploying Fortinet itself might be quick, configuring it to fit your environment and security needs takes additional time and effort. What other advice do I have? Many other companies offer similar capabilities. We also use other solutions, but Fortinet FortiWeb has strong bot capabilities for threat protection and excellent geo-restriction features. It also handles malicious IP prevention and is easy to use. Our experience has been positive. We’ve only enabled the algorithms provided by FortiWeb and haven’t customized the configuration beyond what FortiWeb offers. The existing rules and features for FortiWeb are good. If you need a next-generation firewall to meet industry and security demands, relying solely on native cloud firewalls like Azure Firewall, AWS Firewall, or Google Cloud Firewall may not be sufficient. These native firewalls often lack the advanced features to protect against various threats. It is advisable to consider solutions like Fortinet FortiWeb or Cloudflare to ensure robust protection. It's a trade-off between price and the service you receive. If you're paying less for a solution that provides good services compared to a competitor where you might pay more for similar support and features, then Fortinet could be a viable option. It might be better if another solution, like Cloudflare, offers better value across multiple aspects such as service, cost, and support. Overall, I rate the solution a seven out of ten. Disclaimer: My company has a business relationship with this vendor other than being a customer:Partner
What is our primary use case? I use FortiWeb to protect all the domains in my organization. It safeguards my entire web segment. All the connections to my environment that do not come over VPN are protected by it, which is crucial as I work in the financial sector with a strong focus on security. FortiWeb stands in front of my environment, where either a firewall or WAF is used to inspect all inbound traffic. How has it helped my organization? It helps protect my organization by providing robust security measures for our web segment. By onboarding all my APIs and web applications onto FortiWeb, it ensures that traffic not coming through the firewall adheres to stringent security protocols. The SaaS model of FortiWeb also helps in managing latency effectively despite our users being in Nigeria while the infrastructure is based in Europe. What is most valuable? The features that I value most in FortiWeb include its inspection of traffic for Intrusion Prevention, Anti-Malware, and whitelisting capabilities. It allows specific IP whitelisting or even regional whitelisting, ensuring only whitelisted traffic from certain geographical regions can access the environment. These security features provide a comprehensive defense against malicious activities. What needs improvement? One area that needs improvement is the handling of SaaS downtime. When there is downtime at their data center, it becomes a transit point issue for us, causing downtime in our environment as well. Although measures like built-in redundancy and manual switching between data centers exist, there is room for improvement in making these transitions automatic without impacting the customer. Automating the migration without manual intervention would significantly enhance user experience during downtime. Additionally, being able to read non-flagged traffic for operational purposes could also be an area to improve. For how long have I used the solution? I have been using FortiWeb for about three years now. What do I think about the stability of the solution? The performance of FortiWeb is impressive because I use it as a SaaS-based solution, meaning it is not hosted inside my environment. Despite initial concerns about latency due to traffic redirection, it has performed well even with our users situated in Nigeria accessing infrastructure deployed in Europe. How are customer service and support? Their support is generally good, around a seven out of ten. They have a structured support system where you need to log into a platform to raise a case. For urgent issues, you need to raise a case and follow up with a phone call to escalate it to a higher priority. However, one downside is that getting immediate attention during emergencies can take up to thirty minutes or more. How would you rate customer service and support? Positive How was the initial setup? Setting up the account is quick and can be done in thirty minutes to an hour if you know what you're doing. Onboarding applications are straightforward and can be completed in about ten minutes or less. Overall, the deployment can be completed in a matter of hours. What's my experience with pricing, setup cost, and licensing? FortiWeb is cheaper by over ten percent compared to other solutions like Barracuda and F5. Which other solutions did I evaluate? I evaluated F5, Barracuda, and Cloudflare. FortiWeb stood out in terms of ease of use, management, and cost. What other advice do I have? I would recommend using Fortinet above any other tool. It is secure, cost-effective, and easy to use. The deployment and operational aspects are user-friendly. Which deployment model are you using for this solution? Public Cloud If public cloud, private cloud, or hybrid cloud, which cloud provider do you use? Other Disclaimer: I am a real user, and this review is based on my own experience and opinions.
What is most valuable? The solution's most valuable feature is its security profile. What needs improvement? The solution could improve its ease of use and add more advanced WAF features in future releases. For how long have I used the solution? I have been working with the product for more than five years. Which solution did I use previously and why did I switch? I've worked with both F5 and Fortinet and find F5 to be much better. F5 is easier to implement, more compatible with applications, and more robust and stable. Regarding securing applications behind the WAF, F5 generally provides better security. How was the initial setup? The solution's implementation is not complex and depends on the number and complexity of customers' applications. What's my experience with pricing, setup cost, and licensing? Fortinet FortiWeb's pricing is reasonable. Its licensing costs are yearly. What other advice do I have? The product has been in the WAF business for a long time. Its maturity cannot be compared to other alternatives. Based on my experience with Fortinet FortiWeb, I'd recommend it in specific cases, especially if you have a limited budget. It can meet basic requirements. However, other vendors have better features and support. I rate the overall product a six out of ten. Which deployment model are you using for this solution? On-premises Disclaimer: I am a real user, and this review is based on my own experience and opinions.
