In most cases, the customer uses WAF to protect web applications.
Fortinet FortiWeb Web Application Firewall WAF (PAYG)
Fortinet Inc.External reviews
63 reviews
from
and
External reviews are not included in the AWS star rating for the product.
A low-maintenance software with machine learning features aiding small-enterprise users
What is our primary use case?
What is most valuable?
The machine learning on FortiWeb WAF is valuable. It is useful for new customers because it provides new signatures, and machine learning, which can help provide new information to customers about their websites.
What needs improvement?
WAF needs more signatures on FortiWeb and updates the database continuously to protect against new attacks. I hope the next release includes integration with the vulnerability scanner, a great feature of FortiWeb. If customers have vulnerability scanners, they can export the scan's result and post it to FortiWeb to patch completely.
For how long have I used the solution?
I have been working with FortiWeb WAF for four years. We are working with the latest version.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
The solution is not scalable. If you are running medium-sized hardware, you must upgrade and purchase new hardware. Fortinet has an issue with scalability at this point.
How are customer service and support?
I have received fantastic support.
How was the initial setup?
The initial setup and config are a piece of cake. The steps followed during deployment depend on the customer since not all customers have the same deployment phases. We guide deployment depending on the customer's needs. Most of the time I have deployed FortiWeb, it took one month. We needed to boot up vulnerability and configure security controls on each website. After that, the administrator on the customer's side will continue working with FortiWeb.
Maintenance is easy because WAF has a powerful view of logs.
What's my experience with pricing, setup cost, and licensing?
Fortinet has a single license, and it's easy to deploy the license and doesn't take time to retrieve it. WAF is just plug-and-play, unlike other vendors. WAF wins this point. FortiWeb WAF is priced well for customers compared to other vendors' solutions.
Which other solutions did I evaluate?
I also work with F5 Networks. The comparison is a little bit complicated. Depending on the customer's needs, we do not recommend deploying F5 in a small environment. F5 needs a lot of administrators and an IT department. On the other hand, Fortinet will be better in this situation. We need a few people to support WAF. Otherwise, both vendors are perfect.
What other advice do I have?
If you plan to deploy FortiWeb, you must have the right device to achieve high availability. I rate FortiWeb WAF a ten out of ten.
The solution blocks attacks from application layers and protects websites from injection attacks
What is our primary use case?
We use FortiWeb Web Application Firewall to protect websites from injection attacks.
What is most valuable?
FortiWeb Web Application Firewall blocks attacks from application layers and provides protection.
What needs improvement?
FortiWeb Web Application Firewall's signature database updates could be improved.
For how long have I used the solution?
I have been using FortiWeb Web Application Firewall for one year.
What do I think about the stability of the solution?
I rate FortiWeb Web Application Firewall an eight out of ten for stability.
What do I think about the scalability of the solution?
I rate FortiWeb Web Application Firewall a nine out of ten for scalability. Around 10 to 12 users use the solution in our organization.
How are customer service and support?
The solution’s customer support is not good.
How would you rate customer service and support?
Positive
How was the initial setup?
The solution’s initial setup is easier than other products.
What about the implementation team?
It takes one week to deploy FortiWeb Web Application Firewall. As part of the deployment process, we create a FortiGate interface, connect FortiWeb to our website server, create virtual web servers in FortiWeb, and write some access control rules for protection purposes.
What's my experience with pricing, setup cost, and licensing?
FortiWeb Web Application Firewall's pricing is suited for small or medium organizations.
What other advice do I have?
FortiWeb Web Application Firewall is deployed on-cloud in our organization.
I recommend FortiWeb Web Application Firewall to other users because it helps block many attacks that come from the web and application layers. Using the solution to protect organizations from attacks is an easy process.
Overall, I rate FortiWeb Web Application Firewall a nine out of ten.
Deep Dive Log detail for Web Application
What do you like best about the product?
FortiWeb solution protect your applications according to Opswat's top 10 and other web attacks and provide us more log detail about web attack Fortiweb also use clever bot mitigation technologies and detect the user is real or not
What do you dislike about the product?
There is no negative feature for Fortiweb solution.
What problems is the product solving and how is that benefiting you?
Fortiweb products protect our web and mobile applications.
It offers the level of security we need at a good price point
What is our primary use case?
We use FortiWeb as our web application firewall.
How has it helped my organization?
FortiWeb provides the level of security we need at an excellent price point. It's easy to deploy and operationally efficient. FortiWeb enables us to streamline tasks. It's a robust solution that's effortless to configure. The AI and machine learning features help us block unknown threats.
We can bring our web applications online faster because FortiWeb shortens the time needed to bring any application into production. Compared to other application firewalls, FortiWeb has a smoother process for bringing applications online.
FortiWeb has few false positives. It's more accurate than other solutions, so we also see fewer alerts. FortiWeb has helped free up IT staff for other projects. You don't need to spend much time getting applications ready for the web, so IT staff can use this time to manage other things.
What is most valuable?
The AI engine and machine learning features distinguish FortiWeb from other solutions. It has a robust UI. FortiWeb is solidly accurate and provides excellent protection against zero-day attacks using machine learning. It appears to be effective because we've never experienced a breach from a zero-day attack.
We use almost all of the features, including analytics, malware detection, bot mitigation, and API discovery.
What needs improvement?
I think customers have the impression that FortiWeb is primarily for SMEs, but FortiWeb should work to expand its market share and adjust its branding. F5 and some other firewalls are easier to customize. FortiWeb could be more flexible and customizable. The documentation could also be improved because many of the advanced features aren't fully documented.
For how long have I used the solution?
We have used FortiWeb for around a year.
What do I think about the stability of the solution?
FortiWeb is highly stable. We haven't seen any bugs. The solution is reliable once configured properly.
What do I think about the scalability of the solution?
FortiWeb isn't difficult to scale.
How are customer service and support?
I rate Fortinet support six out of 10. The documentation and support need improvement.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
We have used Citrix WAF and the F5. FortiWeb offers most of the same features at a better price.
How was the initial setup?
I have done on-prem, hybrid, and cloud deployments of FortiWeb. The deployment was straightforward for most features, but a few features require some customization and configuration in the console. That's where we ran into problems because the documentation isn't thorough in some areas.
It takes around three or four days to deploy FortiWeb for a simple website. It takes longer for a complex website, but it depends on the level of complexity. We deployed FortiWeb in-house with two people and some help from Fortinet support. It's deployed across multiple data centers and locations.
What was our ROI?
The price-performance ratio is good. The time to value is quick because it's easy to deploy and the ML engine doesn't take long to adjust and apply the correct rules.
What's my experience with pricing, setup cost, and licensing?
FortiWeb offers these services at a price that SME customers can afford, but it's also suitable for large enterprises. Still, they need to put in more work to gain a greater share of enterprise business because they face stiff competition in this segment from F5, Cloudflare, and some others.
What other advice do I have?
I rate Fortinet FortiWeb eight out of 10. FortiWeb is a suitable product for SMEs. I recommend a proof of concept before going forward with any project.
Best way to handle security as future ready
What do you like best about the product?
User friendly
Lot of options work with
Easy creatable rules
Lot of options work with
Easy creatable rules
What do you dislike about the product?
Better if we can create the VPN more easily and available info about this also not sufficient enough
What problems is the product solving and how is that benefiting you?
My lan security and VPN
Excelent tool
What do you like best about the product?
Excellent tool
What I like the most is the number of options it has to manage the network and its security; the graphical interface is amicable and intuitive...
What I like the most is the number of options it has to manage the network and its security; the graphical interface is amicable and intuitive...
What do you dislike about the product?
It remains to improve the licensing issue to make it more accessible, especially in countries with economies that need low cost.
What problems is the product solving and how is that benefiting you?
Being able to detect and block attacks from outside and inside the network.
The DeepLearning advanced to protect the web server
What do you like best about the product?
- Has Machine learning protected to a web server
- Easy Configuration
- Easy Configuration
What do you dislike about the product?
- Lack of Server LoadBalance Feature
- fail positive with detecting the general attack by signature
- fail positive with detecting the general attack by signature
What problems is the product solving and how is that benefiting you?
- Detect Bots and attack by machine learning, no need use signature
FortiWeb web application firewall (WAF)
What do you like best about the product?
It's a good tool that will protect the web application firewall
What do you dislike about the product?
Sometimes it will be slow in providing a firewall security
What problems is the product solving and how is that benefiting you?
It is very beneficial by helping us to secure our server by their WAF
Great Machine Learning Feature Including in Web Application Firewall
What do you like best about the product?
Machine Learning is a good feature for protecting web applications with less initial configure on the FortiWeb.
With machine learning feature, I can also block threat by anomaly detection and block bot by bot detection with less false positive.
With machine learning feature, I can also block threat by anomaly detection and block bot by bot detection with less false positive.
What do you dislike about the product?
The Centralized Configuration Management of FortiWeb - the FortiWeb Manager has been discontinued cause I do not see any firmware update on the FortiWeb Manager, but the FortiWeb has released the new firmware usually. So the FortiWeb Manager can not manage the FortiWeb with the latest firmware (FortiWeb with firmware 6.3.0 and above)
Latest FortiWeb Manager Firmware: 6.2.3
Latest FortiWeb Firmware: 6.4.1
Latest FortiWeb Manager Firmware: 6.2.3
Latest FortiWeb Firmware: 6.4.1
What problems is the product solving and how is that benefiting you?
- Protect Web Application with Machine Learning. Less False Positive.
- Less initial config with Machine Learning.
- Good choice to meet the PCI DSS.
- Less initial config with Machine Learning.
- Good choice to meet the PCI DSS.
Fortiweb solutions , I found it quite easy to use and user friendly
What do you like best about the product?
Its GUI is quite user friendly and easy to understand, anyone who has the basic understanding, can easily follow Fortiweb
What do you dislike about the product?
So far so good, it's very very competitive and price wise also it stands great
What problems is the product solving and how is that benefiting you?
I was involved in Configuration as well as in Designing
showing 51 - 60