Share your experience using Limelight Cloud Security [EOL]

The easiest route - we'll conduct a 15 minute phone interview and write up the review for you.

Use our online form to submit your review. It's quick and you can post anonymously.

Your review helps others learn about this solution
The PeerSpot community is built upon trust and sharing with peers.
It's good for your career
In today's digital world, your review shows you have valuable expertise.
You can influence the market
Vendors read their reviews and make improvements based on your feedback.
Examples of the 83,000+ reviews on PeerSpot:

Security Specialist at a manufacturing company with 10,001+ employees
Real User
Top 20
Cost-effective, easy to configure, and works very well as a single solution for multiple environments
Pros and Cons
  • "The ease of configuration is valuable. We have Azure WAF, we have OCI WAF, and we also have Cloud Armor for GCP, but their configuration isn't very easy. It's pretty simple in FortiWeb, and we can enable or configure whatever we want."
  • "The dashboards are not that configurable. Application-specific dashboards can be improved. If we have 50 applications, there should be something to see what's happening with these 50 applications. There could be a graph or a consolidated alert page where all alerts are inbuilt. They have other products that I can use, but this feature should be built into FortiWeb."

What is our primary use case?

We have multiple environments. Some applications are in Oracle Cloud, some are in Azure, some are in GCP, and some are on-prem. We wanted a single solution for web applications, and that's why we chose FortiWeb. In the case of the cloud, we don't even have to manage it. It's a managed service from Fortinet.

How has it helped my organization?

We have not been using it for a very long time. It has only been eight months, and so far, there have been two main benefits. The first benefit is that if I have an on-prem solution, I can buy their hardware and deploy it, but the configuration is the same. If I have a cloud, I can use FortiWeb as a service or as a virtual machine. It depends on requirements, but the configuration remains the same. The configuration doesn't change. We have a lot of global parts and a lot of teams are working on it, so it gets easy to communicate and verify the configuration and create a baseline.

Costing is another benefit. The cost is based on the traffic. If an application is used, we pay for it, but if it's not used, we don't have to pay for it. With other solutions, we have to buy the solution, and then we have to purchase or take licenses. If they aren't used, we are just burning money without any use.

We are using anomaly detection and bot mitigation. In terms of anomaly detection, it is able to find the behavior. We have some applications where normal users are logging from India, and if the behavior changes, it gives us an alert, but in terms of bot mitigation, I haven't found much.

It's easy to use. I don't have to do any changes in my environment. For example, if I use Azure WAF, I have to use a traffic gateway, load balancer, or something similar, whereas, with FortiWeb, I don't have to change any architecture. I just have to change my DNS entry. That's it. If I'm able to change my DNS entry, FortiWeb works.

Adding new applications is also quite easy. You just add the application and change the DNS settings, and you are good to go. Whether you want to block or unblock, or you want the learning mode or protection mode, you can enable or disable it with just one click, and you are good to go. Most of the settings are already there if you want to tweak them. It has a GUI. You must have to click here and there. The documentation is also good. If I don't know something, their documentation is quite helpful. A lot of people are using Fortinet, so YouTube videos and articles are also available.

The configuration part is easy. The configuration and implementation process is streamlined. We don't have to change anything. We don't have to follow 10 processes. It's a single process with which everybody is familiar. Manpower and manhours are saved because a lot of discussions are avoided. It also helps us in creating a baseline. We now have a baseline of what we need. So, from an instant response point of view, it's easy for us because we are getting the same results out of it.

It has reduced false positives. As compared to my old solution, there is at least a 17% to 18% reduction.

It has reduced the number of alerts that our organization receives. There is a 50% to 60% reduction in alerts.

It has saved us time. We were spending around three to four days setting up our old solution, whereas now, we are spending a maximum of four hours.

What is most valuable?

The ease of configuration is valuable. We have Azure WAF, we have OCI WAF, and we also have Cloud Armor for GCP, but their configuration isn't very easy. It's pretty simple in FortiWeb, and we can enable or configure whatever we want.

Its cost is also good. If I'm using an application for 15 days, I pay only for 15 days.

FortiWeb is good for blocking unknown threats and attacks. I've done a PoC with Azure WAF and OCI WAF, and in comparison, FortiWeb is quite good.

What needs improvement?

The dashboards are not that configurable. Application-specific dashboards can be improved. If we have 50 applications, there should be something to see what's happening with these 50 applications. There could be a graph or a consolidated alert page where all alerts are inbuilt. They have other products that I can use, but this feature should be built into FortiWeb.

Reporting could also be better. There should be inbuilt reports that we can use to present on how it is benefiting and other things. We should be able to get reports in PDF or other common formats.

For how long have I used the solution?

It has been around eight months.

What do I think about the stability of the solution?

Its stability is good. Stability-wise, there aren't any major differences among Azure WAF, OCI WAF, Google Cloud Armor, and Fortinet FortiWeb.

What do I think about the scalability of the solution?

If I'm using FortiWeb as a service, I don't have to care about scaling because everything is taken care of by Fortinet. From a scaling point of view, I don't have to do anything. If it's on-premises, we already know how many users are going to use it, and we can decide on the model accordingly. So far, we haven't had to scale it up for any project.

How are customer service and support?

I've not contacted them for FortiWeb. We are also using Fortinet firewalls for which I've taken their help.

Which solution did I use previously and why did I switch?

We had our own solution. We called it SecOps. It had something from RedHat and something from OPNsense. We built it that way. We were using that. We switched to FortiWeb because of two reasons. The first reason was the cost, and the second thing was that we wanted a single solution that can be implemented everywhere. We are from R&D. We decide on a solution, and then our product team implements it. When we have multiple tools, operations and maintenance become quite a headache because every tool has its own learning curve. All tools are not the same.

How was the initial setup?

We have on-premises as well as public cloud environments. We have Azure, OCI, and GCP. 

Its initial setup is straightforward. It takes a little bit more time the first time because we have to set up the subscription, etc. Next time, it takes only around four hours.

What about the implementation team?

We implemented it in-house. We are a global team, so a lot of people were involved. From the R&D side, at least five to six people were involved.

In terms of maintenance, when it's on-prem, some sort of maintenance is required in terms of firmware upgrades. We also follow ISO standards, so we have to do maintenance. We have a requirement to check everything once a month, but FortiWeb doesn't take much time.

What was our ROI?

We have been using it only for eight months, so I need more time to see its price-performance ratio, but it's worth the money. I'm getting what I'm paying for.

There are time savings. Previously, we were spending four to five days setting up our SecOps solution, whereas now, we are spending only four hours.

What's my experience with pricing, setup cost, and licensing?

When I use any other firewall, I have to take a license. It could be a perpetual license or subscription-based. In both cases, we have to pay some amount in advance, whereas in the case of FortiWeb, when using it as a service, I am paying half a dollar only for the domain name, and then I am paying based on the traffic or the number of requests. In every organization, there are some applications that are heavily used, and there are some applications that are not heavily used. So, why go with a yearly, three-yearly, or five-yearly plan when you can just pay based on the traffic that WAF is processing? Previously, for each project, the cost was $800 to $1,000 per application. Now, it's $100 to $120. For some of the applications, there is a 90% reduction, and for some of the applications, there is a 50% reduction. We're paying only $500 to $600.

Which other solutions did I evaluate?

We checked OCI WAF, Microsoft Azure WAF, Google Cloud Armor, and Fortinet FortiWeb. We also checked other WAF solutions such as Akamai and CloudFlare but didn't do a PoC with them. We did a PoC with OCI WAF, Microsoft Azure WAF, Google Cloud Armor, and Fortinet FortiWeb.

We went for Fortinet FortiWeb because we wanted a single solution that can be implemented anywhere. If we use Azure WAF, it would be hard to use in GCP. We have to create a connection between both, whereas we can implement Fortinet FortiWeb on any cloud. If we have on-prem applications, we can implement FortiWeb hardware as a solution. In some places, we have strict requirements. If it's a VMware data center, they also have the FortiWeb VM solution. If we want to use Docker images, they also provide Docker images. We can just use a single tool. We are not dependent on multiple tools.

What other advice do I have?

Every team has different requirements, but if you need an easy solution that can be deployed in a very short time, FortiWeb is the right one. It doesn't need too much expertise when you're initially configuring it, and even if you're testing it, the cost is quite low. It's good even for small projects.

It has the API gateway functionality, but we aren't using that. We are also not using API discovery and API security. I've enabled machine learning, but we have not used it a lot. We are in the exploring phase.

Overall, I'd rate Fortinet FortiWeb an eight out of ten.

Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
JorgeBlanco - PeerSpot reviewer
Cybersecurity Analyst at a transportation company with 501-1,000 employees
Real User
Top 5
Gives us highly available servers without service interruptions, and timely support when needed
Pros and Cons
  • "It saves us a lot of work in terms of management since it has tasks already defined automatically. That enables us to better administer our services. It is very dynamic and easy to administer."
  • "A feature that I would like to see included in the next version might be a better analysis when working with crypt issues. Right now, it is very manual; you load it into Alteon and it runs. It would be interesting to see a more dynamic process."

What is our primary use case?

We use it for balancing all of our services and our servers.

How has it helped my organization?

It saves us a lot of work in terms of management since it has tasks already defined automatically. That enables us to better administer our services. It is very dynamic and easy to administer.

Another benefit of using Alteon is the support that Radware, as a company, provides. They are very fast and that is key because the availability of our exposed services is always very important to us.

We realized these benefits immediately, with highly available servers without service interruptions. We have two servers, which, thanks to the virtual services that Alteon has, can be quickly balanced. Our services are always up. The time-to-value was almost immediate. The high availability of services helps avoid losses and any instability that might result in intermittent services.

We have high availability for both our servers and services, thanks to the virtual service that Alteon manages. We have two Alteon teams internally, so if one data center suddenly has a problem, the other data center still functions. That means we have an immediate solution. When one is not there, the other immediately takes control.

We go to the analytics, to the graphs and to the logs, where we can identify problems and failures. We have it configured to send us notifications and alerts when a service is slow or does not respond for some time. With the alerts and the logs, we are able to further verify the graph of the services and their states of health. That helps us a lot to quickly find out if we have a problem and find solutions. We can save 80 percent of the time it used to take to investigate a case because it makes it much easier and simpler for us to find an issue.

What is most valuable?

The most valuable aspect of Alteon is the availability it provides for our services. The availability of services is very important for any company, and especially for us since we are a port with many internet-facing services.

In addition, the solution is very dynamic and easy to manage.

Another excellent feature is the integrated application protection. It is an excellent product with many features that serve to protect our company. The services we provide are of vital importance, so their availability and protection with Alteon are truly important.

What needs improvement?

It is a fairly complete service and it is difficult for me to think of what can be improved. A feature that I would like to see included in the next version might be better analysis when working with crypt issues. Right now, it is very manual; you load it into Alteon and it runs. It would be interesting to see a more dynamic process.

For how long have I used the solution?

I have been using Radware Alteon for about six years.

What do I think about the stability of the solution?

Alteon is very stable. The equipment has been working for six years. We have a refresh scheduled and we have the new equipment here, but we have not yet made the change. Our old equipment continues to work perfectly. The change is being made because of the company's policy: every five years, all the equipment must be renewed.

What do I think about the scalability of the solution?

It's a very scalable solution. We always have plans to increase usage.

How are customer service and support?

Their technical support is an excellent service. They answer very quickly and you always have their support. Anytime we suddenly have an issue that we don't understand, we go to them and they provide excellent service and technical support. Depending on the urgency of the case, they call or write to you. We do not have any complaints.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

This is our first load-balancing platform.

How was the initial setup?

The deployment is private. We have the Alteon equipment onsite in two physical data centers.

The complexity of the deployment depends on how many and what types of services there are, but it was simple because of the accompaniment and support we had from Radware. Radware itself came in and installed the service; they gave us tutorials too, so it was very simple.

You need to consider what your services are and what you are going to exhibit. It is important to have a work plan. We divided our implementation into three days. On the first day, equipment was installed, on the second day it was configured, and the third day was a day of monitoring.

Becoming familiar with Alteon was very easy. We did the training for a week, but we quickly became familiar with the platform. If you're thinking about Alteon but concerned about the learning curve, Alteon is very dynamic and easy to learn. In addition, Radware's team does not leave you alone. Their technical team is always there to support you on any questions you may have.

Soon we will renew our equipment; we have already bought and received it. And we will go through the same process again, installing, configuring, and monitoring on the third day. It is very fast.

There is no maintenance. The platform works pretty well on its own. It has reduced our maintenance overhead by just about 100 percent because we do not have maintenance related to Alteon.

What about the implementation team?

The people from Radware were the ones who implemented it. On our side, there were two people handling the implementation, the administrator and an analyst.

What was our ROI?

On the financial side, my understanding is that there has been a return on investment. If we did not have Alteon for service availability, our services could be affected, and, in the end, that would create financial issues.

In the technical area, the return on investment is the availability of our services. It is very important that our availability is optimal for both our internal and external clients. That is the greatest return on investment.

What's my experience with pricing, setup cost, and licensing?

We have a three-year contract with Radware. It is beneficial to have a longer-term contract because you can obtain more discounts. It seems to be a much cheaper alternative.

We use their Gel Elastic License (GEL). It allows us to integrate what we need. With this licensing model, we have a lower cost for using Alteon in our company. Radware does not force us to use everything but only what we really need for our operations. That's why it is quite good. We have saved about 15 percent using the Gel Elastic License, which is actually quite a lot.

Which other solutions did I evaluate?

We did not evaluate many products since the provider that advises us on cybersecurity issues was the one who recommended that we choose Radware. We saw the benefits and it was chosen. We did not do much comparison with other solutions because we felt very confident in our provider's reasoning. Our provider, E-Global, who suggested Radware to us, gave us complete confidence in Radware.

What other advice do I have?

Don't think about it too much. It's an excellent solution and it's quite reliable.

The most important lesson I have learned by using Alteon is that, thanks to these certified solutions, we can have our services available and we are able to maintain our good name as a company and our reputation in the market.

Foreign Language:(Spanish)

¿Cuál es nuestro caso de uso principal?

Lo utilizamos para equilibrar todos nuestros servicios y servidores.

¿Cómo ha ayudado a mi organización?

Nos ahorra mucho trabajo en cuanto a gestión ya que tiene tareas ya definidas de forma automática. Eso nos permite administrar mejor nuestros servicios. Es muy dinámico y fácil de administrar.

Otro beneficio de utilizar Alteon es el soporte que brinda Radware, como empresa. Son muy rápidos y eso es clave porque la disponibilidad de nuestros servicios expuestos siempre es muy importante para nosotros.

Nos dimos cuenta de estos beneficios de inmediato, con servidores de alta disponibilidad sin interrupciones del servicio. Contamos con dos servidores, los cuales gracias a los servicios virtuales que tiene Alteon se pueden equilibrar rápidamente. Nuestros servicios siempre están en funcionamiento. El tiempo de obtención de valor fue casi inmediato. La alta disponibilidad de los servicios ayuda a evitar pérdidas y cualquier inestabilidad que pueda resultar en servicios intermitentes.

Gracias al servicio virtual que gestiona Alteon disponemos de alta disponibilidad tanto de nuestros servidores como de servicios. Tenemos dos equipos Alteon internamente, por lo que si un centro de datos repentinamente tiene un problema, el otro centro de datos aún funciona. Eso significa que tenemos una solución inmediata. Cuando uno no está, el otro inmediatamente toma el control.

Revisamos las analíticas, los gráficos y los logs, donde podemos identificar problemas y fallos. Lo tenemos configurado para que nos envíe notificaciones y alertas cuando un servicio va lento o no responde durante un tiempo. Con las alertas y los logs podemos verificar aún más la gráfica de los servicios y sus estados de salud. Eso nos ayuda mucho a saber rápidamente si tenemos un problema y encontrar soluciones. Podemos ahorrar el 80 por ciento del tiempo que solía tomar investigar un caso porque nos hace mucho más fácil y sencillo encontrar un problema.

¿Qué es lo más valioso?

El aspecto más valioso de Alteon es la disponibilidad que brinda para nuestros servicios. La disponibilidad de servicios es muy importante para cualquier empresa, y especialmente para nosotros ya que somos un puerto con muchos servicios hacia el Internet.

Además, la solución es muy dinámica y fácil de gestionar.

Otra característica excelente es la protección de aplicaciones integrada. Es un producto excelente con muchas características que sirven para proteger nuestra empresa. Los servicios que brindamos son de vital importancia, por lo que su disponibilidad y protección con Alteon es verdaderamente importante.

¿Qué necesita mejorar?

Es un servicio bastante completo y me cuesta pensar en qué se puede mejorar. Una característica que me gustaría que se incluyera en la próxima versión podría ser un mejor análisis al trabajar con problemas de crypt. Ahora mismo es muy manual; lo cargas en Alteon y se ejecuta. Sería interesante ver un proceso más dinámico.

¿Durante cuánto tiempo he usado la solución?

He estado usando Radware Alteon durante unos seis años.

¿Qué pienso sobre la estabilidad de la solución?

Alteon es muy estable. El equipo ha estado funcionando durante seis años. Tenemos una actualización programada y tenemos el nuevo equipo aquí, pero aún no hemos realizado el cambio. Nuestro antiguo equipo sigue funcionando perfectamente. El cambio se debe a la política de la empresa: cada cinco años se deben renovar todos los equipos.

¿Qué pienso sobre la escalabilidad de la solución?

Es una solución muy escalable. Siempre tenemos planes para aumentar el uso.

¿Cómo es el servicio y soporte al cliente?

El soporte técnico es un excelente servicio. Responden muy rápido y siempre cuentas con su apoyo. Cada vez que de repente tenemos un problema que no entendemos, acudimos a ellos y nos brindan un excelente servicio y soporte técnico. Dependiendo de la urgencia del caso, te llaman o te escriben. No tenemos ninguna queja.

¿Cómo calificaría el servicio y soporte al cliente?

Positivo

¿Qué solución utilicé anteriormente y por qué cambié?

Esta es nuestra primera plataforma de balanceo.

¿Cómo fue la configuración inicial?

El despliegue es privado. Contamos con Alteon en dos centros de datos físicos.

La complejidad del despliegue depende de cuántos y qué tipos de servicios hay, pero fue sencillo gracias al acompañamiento y soporte que tuvimos por parte de Radware. El propio Radware vino e instaló el servicio; También nos dieron tutoriales, así que fue muy sencillo.

Debes considerar cuáles son tus servicios y qué vas a exhibir. Es importante tener un plan de trabajo. Dividimos nuestra implementación en tres días. El primer día se instaló el equipo, el segundo día se configuró y el tercer día fue un día de monitoreo.

Familiarizarse con Alteon fue muy fácil. Hicimos la formación durante una semana, pero rápidamente nos familiarizamos con la plataforma. Si estás pensando en Alteon pero te preocupa la curva de aprendizaje, Alteon es muy dinámico y fácil de aprender. Además, el equipo de Radware no te deja solo. Su equipo técnico está siempre ahí para apoyarte en cualquier duda que puedas tener.

Pronto renovaremos nuestro equipo; ya lo hemos comprado y recibido. Y volveremos a realizar el mismo proceso, instalación, configuración y monitorear al tercer día. Es muy rápido.

No hay mantenimiento. La plataforma funciona bastante bien por sí sola. Ha reducido nuestros gastos generales de mantenimiento en aproximadamente un 100 por ciento porque no tenemos mantenimientos relacionados con Alteon.

¿Y el equipo de implementación?

La gente de Radware fueron quienes lo implementaron. Por nuestra parte, había dos personas a cargo de la implementación, el administrador y un analista.

¿Cuál fue nuestro retorno de la inversión?

En el aspecto financiero, tengo entendido que ha habido un retorno de la inversión. Si no tuviéramos a Alteon para la disponibilidad del servicio, nuestros servicios podrían verse afectados y al final, eso crearía problemas financieros.

En el área técnica, el retorno de la inversión es la disponibilidad de nuestros servicios. Es muy importante que nuestra disponibilidad sea óptima tanto para nuestros clientes internos como externos. Ese es el mayor retorno de la inversión.

¿Cuál es mi experiencia con los precios, el costo de instalación y las licencias?

Tenemos un contrato de tres años con Radware. Es beneficioso tener un contrato de mayor duración porque puedes obtener más descuentos. Parece ser una alternativa mucho más económica.

Usamos la licencia Gel Elastic (GEL). Nos permite integrar lo que necesitamos. Con este modelo de licencia, tenemos un menor costo por usar Alteon en nuestra empresa. Radware no nos obliga a utilizar todo sino sólo lo que realmente necesitamos para nuestras operaciones. Por eso es bastante bueno. Hemos ahorrado alrededor del 15 por ciento con la licencia Gel Elastic, que en realidad es bastante.

¿Qué otras soluciones evalué?

No evaluamos muchos productos ya que el proveedor que nos asesora en temas de ciberseguridad fue quien nos recomendó elegir Radware. Vimos los beneficios y fue elegido. No hicimos muchas comparaciones con otras soluciones porque confiábamos mucho en el razonamiento de nuestro proveedor. Nuestro proveedor, E-Global, que nos sugirió Radware, nos dio total confianza en Radware.

¿Qué otro consejo tengo?

No lo pienses demasiado. Es una solución excelente y bastante confiable.

La lección más importante que he aprendido al utilizar Alteon es que, gracias a estas soluciones certificadas, podemos tener nuestros servicios disponibles y podemos mantener un buen nombre como empresa y nuestra reputación en el mercado.

Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Flag as inappropriate