Cato SASE Cloud Platform vs Fortinet FortiWeb comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Lookout
Sponsored
Average Rating
7.2
Number of Reviews
5
Ranking in other categories
Secure Web Gateways (SWG) (24th), Mobile Data Protection (7th), Cloud Access Security Brokers (CASB) (12th), Threat Intelligence Platforms (18th), Endpoint Detection and Response (EDR) (43rd), Mobile Threat Defense (2nd), ZTNA as a Service (13th), ZTNA (10th), Secure Access Service Edge (SASE) (18th)
Cato SASE Cloud Platform
Average Rating
8.8
Number of Reviews
23
Ranking in other categories
WAN Optimization (2nd), Cloud Access Security Brokers (CASB) (5th), Software Defined WAN (SD-WAN) Solutions (5th), WAN Edge (5th), ZTNA as a Service (5th), Secure Access Service Edge (SASE) (6th)
Fortinet FortiWeb
Average Rating
8.0
Number of Reviews
83
Ranking in other categories
Web Application Firewall (WAF) (4th)
 

Featured Reviews

AP
May 23, 2023
User-focused design makes it easy to understand, and operations running in background provide peace of mind
In any of the discussions that we've had with their technical teams, they have been very knowledgeable and helpful in certain aspects. They have a lot of partnerships, from what we can tell, and that does start to make the waters a little bit murky. They have third parties that provide functionality and there is a concern that we're going to be bounced around between five different groups to get help for a problem. If you describe it incorrectly, all of a sudden you're with a group that can't help you and they have to forward you to another group. They have been very responsive and super helpful when it comes to any of the issues we've identified. Still, that concern about being bounced around between multiple partners detracts from the overall experience.
PabloCousino - PeerSpot reviewer
Jun 13, 2023
An easy-to-setup solution with good network visibility
We use the solution to access network and security platforms. It also offers in-built WAN and zero-trust security models. It is possible to detect and mitigate the incident using Cato The solution helps customers with well-integrated features, including security and network visibility. The…
KA
Jan 19, 2023
People can run a pen test on our system whenever they like and we'll pass with flying colors
When it comes to blocking unknown threats and attacks, I would give it the highest score possible. We first started using AWS and its Web Application Firewalls. That was okay, but it was quite a manual process to keep it up to date, whereas Fortinet is always up to date, and the default rules or the modules that you can turn on are very easy to use. Overall, the solution is extremely easy to use. It's all very step-by-step. We just tell it what DNS records to approve and it sets up an SSL certificate. And then, all traffic just starts flowing through Fortinet and then straight over to us. Our network is quite secure, so we have allowed individual IPs that are listed by Fortinet so that we're not just blanket-accepting everything. It's enabling our web servers to be more secure by only allowing Fortinet, instead of the whole world, like we used to. Also, if you want to diagnose something, rather than outright blocking it, you can just log it so you can see what's happening. You can go through the audit trail as well. There might be a situation where it will prompt you to block everyone's traffic from a specific IP. In terms of FortiWeb's advanced modules, we have two main, different Fortinet applications. One is for our web-based stuff and the other is for our Windows agents, which is all API traffic. We use different sets of the modules, or the advanced features, but across both, we use pretty much everything.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The protection offered by the product is the most valuable feature. It detects vulnerabilities or traps on our users' phones and then prompts them to clean up their devices. Tools we used previously would only discover, which required us to gather information on the backend, so Lookout is a welcome upgrade."
"The solution is stable."
"On the outside, the main differentiation is because Lookout ingest. They have ingested basically all of the apps for the last ten years and all the versions of all the apps, and we have that in a corporate database that allows us to do very large-scale machine learning and analysis on that data set. That's not something that any of the competitors really have the capability to do because they don't have access to the data set. A lot of the apps you can no longer get them because that version of the app is five or six years old, and it just doesn't exist anywhere anymore, except within our infrastructure. So, the ability to have that very rich dataset and learn from that dataset is a real differentiator."
"The most valuable features are the antivirus as a whole, the anti-malware, and all of the protection features that scan our enterprise devices."
"I haven't had any trouble, and practically forget that I'm using it."
"The feature that I find to be the most valuable is the bandwidth aggregation."
"The query and the SD-WAN are useful features of the solution."
"The visibility control and security aspects are amazing."
"The product is efficient and easy to use."
"We appreciate the optimization and acceleration of the performance of SDP users."
"Additionally, Cato has a global point of presence, which means instead of using other technologies to connect branches and provide access for a retail organization or any organization with branches, we can utilize Cato's backbone. Furthermore, by consolidating different technologies into one solution, there are additional cost savings from that perspective."
"The solution is a simple WAN solution. We've onboarded the socket on the Cato platform, and it provides connectivity. There is no complex routing."
"It is a good product. We have just blocked everything coming from some geographical locations or certain countries, and it has been working very efficiently when I look at logs, events, and incidents generated from the system. It is generating very good analytic reports about it. This is the most valuable thing about this solution. It has load balancing and almost everything that a web application firewall needs. It is very flexible and easy to learn and configure. It can be easily learned and configured by using the information available on different channels such as YouTube."
"The customers are very happy with this solution because of two things. First, the IPS integration with a web application is very tightly done on Fortinet. Second, the ease of use is there. The management interface or the GUI interface is very easy to use, configure, and manage. These are the two main valuable features. It supports integration with other Fortinet products. It also integrates very well with the firewall and sandboxing technology. They already have enough integration with different technologies. They have got a complete tech intelligence view of the whole product."
"The most valuable feature is that this product represents a whole solution, including a WAF, and even anti-defacements."
"FortiGate is a stable product."
"Fortinet FortiWeb is priced well."
"The GUI is user-friendly."
"Fortinet FortiWeb has improved my organization by protecting our customer's web infrastructure environment."
"The initial setup is pretty straightforward."
 

Cons

"We just submitted an enhancement request reflecting the main area we want to see improvement in; the APIs. Currently, we're able to build dashboards, but it's somewhat backward because we use our MDM API to create them. Lookout should provide API to customers so we can query our data and use it in our cloud, and this is the only outstanding area for improvement with the product right now."
"Lookout was moving into the SSE space. And so their work on SecureWeb Gateway and SD-WAN is still sort of evolving."
"The stability depends on the service from where you access it. Because sometimes, the place you are in, you have Gateway. You don't have Gateway. The gateway is overutilized. At the end, you need to go through their gateways. And this is the key point here. You have a tracking point. If it's not well orchestrated, and it scales up as you add more to the existing team, you will suffer"
"From the analysis that we've done, they do seem to be maybe a step behind in trying to enter the market with a new solution. But when they do pick up, they do come out with some good products."
"Modifying or incorporating Cato Network to work with a third-party platform, such as Microsoft, or other Software-as-a-Service (SaaS) offerings would be beneficial. Having more integration partners would help the users implement the solution."
"A little tweaking or improvement of the UI in terms of logging when troubleshooting would be an improvement because it's very detailed."
"The different languages in the user interface should be enhanced."
"They can't do one-to-one NAT (Network Address Translation) in AP (their access point), and that is something that Palo Alto can do."
"I would like to see better integration with identity providers."
"For a packaged solution, needing external intervention or a system integrator to get other features not offered by Cato Networks could be an area for improvement. Cato Networks does what it's meant to do and is even overstretching capabilities when introducing new features. The product can only have very few features added on top of what its currently doing. Managed service providers can deliver the extra features you'd need. It's a set of managed services, and what Cato Networks does is very comprehensive. So, for the time being, when the actual incarnation of the SASE solution is deployed, Cato Networks is a very effective product. Naturally, technology will evolve, so everybody knows that in three, four, or five years, there will be a new kid on the block, a new game. Still, at the moment, Cato Networks only needs to improve a little regarding SASE delivery. The product is doing very well, but one feature the Cato Networks team is doing right is preparing for the future through deploying the SSE 360, so the security service is at that edge. It's an excellent strategy to prepare for the future. SSE 360 is what Cato Networks should invest in the most to keep prospering."
"Cato Networks could improve their intrusion detection. There is not a lot in place."
"The tool needs to be more granular. Its reports are not very in-depth."
"It would also be helpful if they could introduce easier reporting. It's good to have those reports that go to C-level management, and Fortinet does provide some graphs, but if they went into some more detail, that would be great."
"Fortinet FortiWeb could improve data integration."
"FortiWeb does not exist in a cloud-based form. Its only available for deployment as a virtual appliance on AWS and Azure IaaS platforms. Because of the trend to WAF environments, it would be good to have it as a SaaS. Also, FortiWeb would be more competitive if it combined WAF and DDoS protection."
"The automation piece can be improved. Although they say it can be automated very well, there is still manual work. Its usability should be improved in terms of automation because we want to build an infrastructure with code, but you can't do that easily with this solution. If they can give us APIs in the firewalls that we can tap into, it would be perfect."
"Another area for improvement is logging. When troubleshooting, the logs sometimes take a while to update. We've had people report that some things aren't logged if they're successful. It's a bit hit-and-miss. For example, sometimes people access one of our services, and it's successful, but we don't see that in the logs."
"No solution is 100% secure and the security could always be worked on."
"Integration and learning about attacks. I would improve these areas by making FortiWeb integrate with other network technologies and feedback from multiple platforms."
"The documentation for the machine learning could be better."
 

Pricing and Cost Advice

"Lookout is definitely on the lower end when it comes to price point and that seems to be the only differentiator. The technology is in place in this space and it's really about who is coming in at the better price point now."
"The pricing is fair; it's comparable to our previous solution, and we carried out multiple POCs and POVs (proof of value). The product is worth the money we pay for it."
"The licensing costs are good. Prisma has much more options and support for security, but it has a higher cost. For example, Lookout costs 2/3rd of Prisma's licensing price."
"In terms of feature performance versus cost, they're a good value."
"The price is not an issue for us, as it is priced more competitively than some other vendors."
"The pricing of the solution depends upon the bandwidth required for different branches"
"The price of Cato Networks is in the middle range compared to other solutions. NetFoundry is a less expensive solution than Cato Networks."
"The product is very competitively priced, and that's compelling. They don't charge the customer based on the operational cost like other brands such as Palo Alto. Cato has its own fully-fledged cloud, with their own data centers, equipment, and so on, which is an advantage. I rate the solution five out of five for affordability."
"The solution is reasonably priced since Cato Networks provides features like SASE and monitoring, which I am very happy with currently."
"If you compare with VeloCloud, the price is the same or even cheaper."
"The solution has reasonable pricing. It has a yearly subscription. The pricing depends on the permit to code. Sometimes, we need to increase the permit, and the cost will automatically change. There's no fixed cost. Unless we request additional modules such as DNS security, ELP, and decent features, there will be no additional cost."
"The solution's pricing is flexible."
"​It really pays off to buy licences for multiple years​."
"The pricing is in the middle. I would rate the pricing a five out of ten. It feels like a justified cost for the features."
"The costs are standard. We pay around $1,600 yearly."
"There's only one payment for the duration of the license. On a scale from one to five, I would rate pricing at four. I have not encountered any additional costs on my projects involving Fortinet FortiWeb."
"The price of Fortinet FortiWeb is reasonable. This is one of the key factors of why we use this solution."
"We are on an annual license for this solution and the price is approximately €100."
"It's an expensive solution, although there are no additional costs."
"Keep a loose margin between your actual bandwidth and the product sizing when using hardware appliances. Only virtual machines are upgradable to larger sizes."
report
Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.
787,779 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
19%
Manufacturing Company
10%
Financial Services Firm
10%
Government
6%
Computer Software Company
29%
Manufacturing Company
9%
Financial Services Firm
7%
Retailer
6%
Educational Organization
39%
Computer Software Company
11%
Financial Services Firm
7%
Comms Service Provider
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Lookout?
The licensing costs are good. Prisma has much more options and support for security, but it has a higher cost. For ex...
What needs improvement with Lookout?
The solution could improve identity integration as well. Zero trust, it's a good start as a zero-trust solution. More...
What do you like most about Cato Networks?
The solution is a simple WAN solution. We've onboarded the socket on the Cato platform, and it provides connectivity....
What is your primary use case for Cato Networks?
We use the solution as a WAN, but we plan to optimize it by incorporating security features like zero trust for enhan...
What advice do you have for others considering Cato Networks?
In terms of security, we are planning to deploy more features and our current usage is primarily focused on branch ne...
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
The pricing is in the middle. I would rate the pricing a five out of ten. It feels like a justified cost for the feat...
What needs improvement with Fortinet FortiWeb?
I'd like more customization. I'm not sure if everyone would agree, as it might add complexity. But for advanced users...
 

Also Known As

CipherCloud
Cato Networks
No data available
 

Overview

 

Sample Customers

Paysafe, AdRoll, Pet Lovers Centre, Arlington Orthopedics, Humphreys & Partners Architects
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Palo Alto Networks, Cisco, Zscaler and others in Secure Access Service Edge (SASE). Updated: June 2024.
787,779 professionals have used our research since 2012.