Try our new research platform with insights from 80,000+ expert users

Barracuda WAF-as-a-Service vs Fortinet FortiWeb comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Barracuda WAF-as-a-Service
Ranking in Web Application Firewall (WAF)
33rd
Average Rating
7.2
Reviews Sentiment
7.4
Number of Reviews
5
Ranking in other categories
No ranking in other categories
Fortinet FortiWeb
Ranking in Web Application Firewall (WAF)
4th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
95
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2025, in the Web Application Firewall (WAF) category, the mindshare of Barracuda WAF-as-a-Service is 0.9%, up from 0.4% compared to the previous year. The mindshare of Fortinet FortiWeb is 8.4%, up from 7.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF)
 

Featured Reviews

Hadar Eshel - PeerSpot reviewer
Easy to install platform with valuable policy management features
We use the product for securing email systems, protecting websites, and safeguarding web-based applications and portals One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strategy. Additionally, it could operate in a local data center.…
Kacem CHAMMALI - PeerSpot reviewer
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product's bot protection feature is valuable for our company."
"The most valuable features of the solution are it is plug and play, has automated policies, a simple configuration, and is easy to create rules."
"It provides an ease of policy management."
"I like its ability to identify known attacks, including DDOS attacks. It's valuable because software must be able to stop known attacks. Application attacks are evolving all the time. When it comes to software-as-a-service, we need to have software that knows about all the latest attacks. It should also protect against major unknown attacks."
"The solution can be used for threat prevention or as a cloud-to-cloud backup system"
"Fortinet FortiWeb is priced well."
"The initial setup is pretty straightforward."
"The deployment was very easy."
"One main feature we are very happy about is file security and upload functionality."
"L-7 protection makes possible to protect legacy/not up-to-date servers/applications without changing the application code."
"One of the big advantages of using Fortinet FortiWeb is all the Fortinet family solutions use the same user interface and logic. This makes it easy to use, configure, manage, and understand if you have used one of their solutions before or are wanting to implement other Fortinet solutions in the future. Additionally, all Fortinet solutions can be managed with one application called FortiManager."
"The GUI is user-friendly."
"It offers some feedback and suggestions that guide our system development while helping our vendors to update their applications and fix any issues or bugs."
 

Cons

"We found it a bit slow when accessing it through the web browser. The URL also exposed the user name and the hashed password. When I log into my Barracuda WAF user portal, I could see the username and the hashed password on the URL itself. So, it is not very secure, and it is important to take that off."
"The stability of the product is an area of concern where improvements are required."
"It's a very specific solution that is only requested for a customer's web code or their global IT policy."
"One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strategy."
"The solution can improve by bundling Security Operation Center (SOC) with the WAF-as-a-Service, it would provide a lot more value to customers."
"There is room for improvement in the portability on multi-cloud environments."
"Lacks a VM demo to enable testing prior to purchase."
"They could improve their support a little bit for faster response time."
"Fortinet FortiWeb is not scalable. You'll need more budget to change the hardware."
"The support side of things can be improved."
"We have had problems with deployments where we've had to contact technical support to resolve them."
"A better load balancer is needed when multiple servers are used for the same website."
"The false positives are annoying.​"
 

Pricing and Cost Advice

"The product is expensive but it offers flexible pricing. It could be affordable."
"I rate the product's price a five on a scale of one to ten, where one is low, and ten is high. There are no additional costs to be paid apart from the standard licensing fees attached to the solution."
"It's very difficult for me to give an estimate of the cost. All I know is that we sell the box itself as a service."
"Keep a loose margin between your actual bandwidth and the product sizing when using hardware appliances. Only virtual machines are upgradable to larger sizes."
"The price of Fortinet FortiWeb is expensive in our Ethiopian currency."
"FortiWeb offers these services at a price that SME customers can afford, but it's also suitable for large enterprises. Still, they need to put in more work to gain a greater share of enterprise business because they face stiff competition in this segment from F5, Cloudflare, and some others."
"We are on an annual license for this solution and the price is approximately €100."
"When I use any other firewall, I have to take a license. It could be a perpetual license or subscription-based. In both cases, we have to pay some amount in advance, whereas in the case of FortiWeb, when using it as a service, I am paying half a dollar only for the domain name, and then I am paying based on the traffic or the number of requests."
"The price is competitive."
"The costs are standard. We pay around $1,600 yearly."
"If one is cheap and ten is expensive, I rate the tool an eight."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
856,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
20%
Government
14%
Financial Services Firm
7%
Comms Service Provider
7%
Educational Organization
33%
Computer Software Company
10%
Financial Services Firm
8%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What needs improvement with Barracuda WAF-as-a-Service?
One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strategy. Additionally, it could operate in a local data center. This limitation hinder...
What is your primary use case for Barracuda WAF-as-a-Service?
We use the product for securing email systems, protecting websites, and safeguarding web-based applications and portals.
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
Fortinet FortiWeb is cost-effective compared to solutions like F5. It offers strong performance for the price, providing substantial value for our customers.
What needs improvement with Fortinet FortiWeb?
The cloud-based security service of Fortinet FortiWeb could be enhanced to match the level of providers like Cloudflare ( /products/cloudflare-reviews ). Right now, it is more focused on on-prem so...
 

Also Known As

Barracuda WAF as a Service
No data available
 

Overview

 

Sample Customers

Salvation Army
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Barracuda WAF-as-a-Service vs. Fortinet FortiWeb and other solutions. Updated: June 2025.
856,873 professionals have used our research since 2012.