Integration with existing infrastructure has improved efficiency and centralized management
What is our primary use case?
The main use case for Fortinet FortiWeb is handling huge amounts of data from the customer side when they lack proper data structure. Customers request a solution that can manage large volumes of data and classify it, which is the primary reason they select Web Application Firewalls.
Additionally, they seek to protect and separate applications within their network between production and non-production environments, as well as define bandwidth allocation for approved applications and restrict forbidden ones.
What is most valuable?
Fortinet does not have the best Web Application Firewall in the world, but they do have interoperable systems. From the customer side, especially if they are already buying FortiGates, firewalls, mail, proxy, and other solutions, it becomes much easier for them to purchase Fortinet FortiWeb. This is because there is one technical support team and a single point of contact from the vendor side when they need technical expertise.
The main benefits provided to users who already have other Fortinet solutions include better economics and easier maintenance due to unified technical support and a convenient single point of contact. Updates are much easier because Fortinet has one operating system for all their products. If the customer buys a manager as the central console of the whole system, they can operate all systems from one console and deploy all updates, renewals, or other changes.
What needs improvement?
Fortinet can improve their technical support, especially the response time. There appears to be an issue with their SLA. When a customer opens a ticket, it is picked up within one or two hours. However, after the customer submits a specific question and requests troubleshooting help from Fortinet support, it takes at least three to five days to provide a proper answer. The response time from the support team is an area that requires improvement.
For how long have I used the solution?
We are a distributor and I continue to work with Fortinet solutions as a reseller distributor.
What do I think about the stability of the solution?
I have not received any complaints or reports of issues from our partners or our technical team regarding stability. Perhaps three or four years ago there was an incident at a customer site in Serbia, but that was not related to Fortinet. The issue was related to network segmentation because they could not reach all logs from their network. The problem was not from Fortinet but from the Cisco ASA, not the switch.
What do I think about the scalability of the solution?
For scalability on a scale from one to ten, Fortinet FortiWeb is very scalable and it is easy to improve the bandwidth and the system. You can add additional boxes that combine together to achieve a bigger throughput for investigation and research.
How was the initial setup?
I have not received any complaints from the partner side regarding troubles or issues with implementation. The implementation of Fortinet FortiWeb and WAF into the Fortinet ecosystem proceeded very smoothly.
What about the implementation team?
That is a question for the technical part of my team and is not within my area of responsibility.
What other advice do I have?
We primarily sell Fortinet's flagship model, which is FortiGate, their next-generation firewall. After that, we sell switches, wireless devices, and solutions such as mail, web protection, and EDR. These are the most sold products in Serbia from Fortinet's portfolio.
We have recently closed a deal in Serbia with Fortinet FortiWeb.
The documentation is excellent, particularly the implementation manual. The pricing is very competitive compared to most vendors producing similar solutions. When comparing Fortinet FortiWeb to F5 BIG-IP, which is their matching solution, Fortinet FortiWeb uses smaller boxes while meeting the same technical specifications. This automatically makes Fortinet FortiWeb cheaper than F5. F5 is considered the most sold vendor in this area for Web Application Firewalls globally, and Fortinet FortiWeb offers better pricing in comparison. I would rate this product a ten out of ten.
Smart, Reliable Security with Impressive AI—Minor Slowdowns Under Heavy Load
What do you like best about the product?
What I appreciate most about FortiAppSec Cloud is its intelligent and automated approach to web application security, which makes the entire process much simpler. The AI driven threat detection is particularly impressive, as it can identify and block attacks in real time. This not only reduces the need for manual intervention but also ensures robust and consistent protection. Overall, I find it reliable, efficient, and straightforward to manage offering everything necessary for securing modern applications.
What do you dislike about the product?
What I dislike about FortiAppSec Cloud is that it can occasionally cause application performance to slow down, especially when managing high volumes of traffic or dealing with intricate security rules.
What problems is the product solving and how is that benefiting you?
This solution safeguards web applications from threats such as SQL injection and bots by using AI driven automation. It helps save time while ensuring that applications remain secure.
Powerful Automated Security, but Setup and Reporting Could Improve
What do you like best about the product?
FortiAppSec Cloud provides impressive automated protection by leveraging advanced AI to ensure strong web application security. It is highly effective at detecting and mitigating threats autonomously, which reduces the need for constant manual intervention. The deployment process is straightforward, and the platform integrates smoothly with existing cloud environments, making security management both simple and efficient.
What do you dislike about the product?
The initial configuration can be somewhat complex, particularly for those setting it up for the first time. This is especially true when it comes to fine-tuning custom security policies, which may require additional effort. Additionally, although the dashboards provide useful information, the reporting features lack flexibility. More customizable options would be helpful for users who need detailed analytics or have specific compliance requirements.
What problems is the product solving and how is that benefiting you?
FortiAppSec Cloud has been effective in safeguarding our web applications against threats such as SQL injection and bots. By doing so, it lessens the need for manual security tasks and enhances the overall reliability of our applications.
Robust AI Security and Easy Management, with Room for Smoother Setup
What do you like best about the product?
FortiAppSec Cloud stands out for its AI-driven threat detection and easy deployment. It delivers strong, adaptive protection against web attacks without needing constant tuning, ensuring security and performance while simplifying management through an intuitive, centralized dashboard.
What do you dislike about the product?
FortiAppSec Cloud can sometimes feel complex during initial configuration, especially for advanced policies. Its reporting options could be more detailed, and occasional latency during policy updates slightly affects real-time monitoring efficiency for large-scale deployments.
What problems is the product solving and how is that benefiting you?
FortiAppSec Cloud protects web applications from threats like SQL injection, cross-site scripting, and DDoS attacks. It automates security management, reduces manual intervention, and ensures compliance—helping maintain uptime, improve data protection, and boost user confidence with consistent, real-time threat mitigation.
Powerful Automated Protection, but Setup and Customization Need Improvement
What do you like best about the product?
What I appreciate most about FortiAppSec Cloud is its robust, automated protection for web applications. Deployment is straightforward, and the solution scales seamlessly to meet growing needs. Its AI-powered threat detection actively blocks attacks as they happen. Additionally, the user-friendly dashboard and comprehensive analytics make managing security both simple and effective.
What do you dislike about the product?
What I find challenging about FortiAppSec Cloud is that, despite its robust capabilities, the initial setup and configuration process can be quite complicated for those who are new to the platform. Making the most of some of its advanced features also demands a certain level of technical expertise. Furthermore, the user interface is not as intuitive as I would like, and the options for customizing reports are somewhat restricted when compared to other solutions.
What problems is the product solving and how is that benefiting you?
FortiAppSec Cloud safeguards my web applications against cyberattacks and data breaches, helping to minimize the risk of downtime and security incidents. Its automated threat detection and mitigation features save both time and resources, while also maintaining strong compliance and reliable performance for all my applications.
Excellent Content Acceleration and Caching, No Complaints
What do you like best about the product?
caching, content routing, accelerating content delivery via globally distributed servers.
What do you dislike about the product?
Nothing to say. Very useful and good working features.
What problems is the product solving and how is that benefiting you?
Evolving threats & zero-day / sophisticated attacks.
Efficient threat prevention and reporting with strong ROI
What is our primary use case?
We are studying ClearPass as a solution. I was requesting a comparison between Aruba ClearPass and FortiWeb Forti.
How has it helped my organization?
FortiWeb has been a helpful investment in our network.
What is most valuable?
The reporting and token system is good. The AI machine learning was qualified to block and report any suspicious activity.
What needs improvement?
I see no room for improvement at the moment.
For how long have I used the solution?
I have been familiar with FortiWeb for about three years now.
How are customer service and support?
The technical support is very helpful. I rate their technical support a nine out of ten.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
I only worked with similar solutions as a POC.
How was the initial setup?
The initial setup was easy.
What was our ROI?
FortiWeb has been a good investment, helping our network and providing a return on investment.
What's my experience with pricing, setup cost, and licensing?
The pricing of Fortinet FortiWeb is affordable and competitive.
What other advice do I have?
I recommend FortiWeb to others. I wish there were more integration with Azure systems.
I'd rate the solution ten out of ten.
A low-maintenance software with machine learning features aiding small-enterprise users
What is our primary use case?
In most cases, the customer uses WAF to protect web applications.
What is most valuable?
The machine learning on FortiWeb WAF is valuable. It is useful for new customers because it provides new signatures, and machine learning, which can help provide new information to customers about their websites.
What needs improvement?
WAF needs more signatures on FortiWeb and updates the database continuously to protect against new attacks. I hope the next release includes integration with the vulnerability scanner, a great feature of FortiWeb. If customers have vulnerability scanners, they can export the scan's result and post it to FortiWeb to patch completely.
For how long have I used the solution?
I have been working with FortiWeb WAF for four years. We are working with the latest version.
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
The solution is not scalable. If you are running medium-sized hardware, you must upgrade and purchase new hardware. Fortinet has an issue with scalability at this point.
How are customer service and support?
I have received fantastic support.
How was the initial setup?
The initial setup and config are a piece of cake. The steps followed during deployment depend on the customer since not all customers have the same deployment phases. We guide deployment depending on the customer's needs. Most of the time I have deployed FortiWeb, it took one month. We needed to boot up vulnerability and configure security controls on each website. After that, the administrator on the customer's side will continue working with FortiWeb.
Maintenance is easy because WAF has a powerful view of logs.
What's my experience with pricing, setup cost, and licensing?
Fortinet has a single license, and it's easy to deploy the license and doesn't take time to retrieve it. WAF is just plug-and-play, unlike other vendors. WAF wins this point. FortiWeb WAF is priced well for customers compared to other vendors' solutions.
Which other solutions did I evaluate?
I also work with F5 Networks. The comparison is a little bit complicated. Depending on the customer's needs, we do not recommend deploying F5 in a small environment. F5 needs a lot of administrators and an IT department. On the other hand, Fortinet will be better in this situation. We need a few people to support WAF. Otherwise, both vendors are perfect.
What other advice do I have?
If you plan to deploy FortiWeb, you must have the right device to achieve high availability. I rate FortiWeb WAF a ten out of ten.
FortiWeb web application firewall (WAF)
What do you like best about the product?
It's a good tool that will protect the web application firewall
What do you dislike about the product?
Sometimes it will be slow in providing a firewall security
What problems is the product solving and how is that benefiting you?
It is very beneficial by helping us to secure our server by their WAF
Fortiweb solutions , I found it quite easy to use and user friendly
What do you like best about the product?
Its GUI is quite user friendly and easy to understand, anyone who has the basic understanding, can easily follow Fortiweb
What do you dislike about the product?
So far so good, it's very very competitive and price wise also it stands great
What problems is the product solving and how is that benefiting you?
I was involved in Configuration as well as in Designing
