Citrix NetScaler vs Fortinet FortiADC vs HAProxy comparison

Cancel
You must select at least 2 products to compare!
Citrix Logo
8,915 views|6,821 comparisons
91% willing to recommend
Fortinet Logo
4,691 views|3,763 comparisons
83% willing to recommend
HAProxy Logo
10,386 views|7,014 comparisons
91% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Citrix NetScaler, Fortinet FortiADC, and HAProxy based on real PeerSpot user reviews.

Find out what your peers are saying about F5, Citrix, HAProxy and others in Application Delivery Controllers (ADC).
To learn more, read our detailed Application Delivery Controllers (ADC) Report (Updated: April 2024).
769,334 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"If you need PCI-compliance and have high security requirements, WAF is the most valuable feature. If you need to monitor your load-balancing services with complex types of monitoring, make sure everything is alright, and load balancing is important, Content Switching and Monitoring features are the keys to your needs. If you want to provide a lot of static images or data, the Caching feature works best for you.""The web application firewalling component is a powerful feature.""It has helped us to increase the resiliency of the application and the performance.""The best feature of Citrix is its track record of stability in its features.""For NetScaler, our major use cases are database load balancing, PowerVPN VPN access gateway, WAF (Web Application Firewall), and content switching.""What I like most about Citrix NetScaler is its stability, and I didn't see a lot of issues with it.""Load Balancing and SSL offloading are key features.""The most valuable feature for us is the application firewalling in Citrix NetScaler, ensuring only valid traffic enters our environment."

More Citrix NetScaler Pros →

"From a technical perspective, it is the most scalable device from Fortinet.""The most valuable feature is its simplicity.""The GSLB, the DR side, is the best part. Because we had our main side in one city, we created another, and we had a complete MPLS over the internet. We used the GSLB and data loss for our business applications.""Ease of use in deploying and having it up and running requires minimal knowledge.""Simple to use and easy to integrate.""Although FortiADC has multiple features that I like, the global DNS is the most helpful. It is primarily useful for customers with huge environments and at least two data centers. FortiADC can act as your DNS server. It can check which data center has the lowest latency, and route traffic to that one. It's an intelligent DNS.""The main feature that we use is GSLB (Global Server Load Balancing). GSLB makes the customer's network more reliable by scaling applications across multiple datacenters. GSLB as a disaster recovery solution can direct traffic based on site availability.""It's a good product because it supports all the features that ADC solutions in the market can support, like F5 solutions, for example, such as the LTM of F5."

More Fortinet FortiADC Pros →

"We were able to use HAProxy for round robin with our databases, or for a centralized TCP connection in one host.""​​Reliability. HAProxy is the most reliable product I have ever used.""The solution is user-friendly and efficient.""Stability is number one.""The technical support has been, in one word, perfect. Every time I call, I’m on the phone with a representative within five minutes who is highly skilled and willing to help, whether in the case of critical issues or simple advice.""We use it as a load balancer for our application servers.""The most important features would be the load-balancing of HTTP and TCP requests, according to multiple LB-algorithms (busyness, weighted-busyness, round robin, traffic, etc). Another important feature that we cannot live without is the username/passwd authentication for legacy systems that had none.""The features I find valuable in this solution are session control which automatically disconnects users that forget to log off, and the ability to write rules to either allow or block certain file requests."

More HAProxy Pros →

Cons
"Citrix should improve the documentation. It is not really clear how to set up many features to our advantage. When we setup Citrix NetScaler ADC, we have to figure it out by ourselves without a lot of documentation.""Citrix NetScaler has been recently acquired by another company and the support has been negatively impacted, the solution is at its end of life. The support for the solution could improve. The sales team needs to be improved.""The technical support could be improved. They do not respond or assist customers in a timely manner.""Integration with other third party providers and third party applications could be better because it can be a bit complex at present.""The interface needs to be improved because the competition is coming up with ones that are more eye-catching, straightforward, and sophisticated.""The GUI should be improved.""Citrix ADC can improve if it provides a more user-friendly interface and clear working protocols. Citrix is not working with classic RFC, it is working with Citrix RFC, which is not common in the world. If engineers of Citrix can provide us with more information on working with the classic IP networks it would be a benefit.""The solution could be more secure."

More Citrix NetScaler Cons →

"The L7 Persistent load-balancing algorithm has not worked for me after having tested it many times with my customer's in-house application. I'd like to suggest that the company make sure that all load-balancing algorithms work properly with most applications, even those that are in-house apps.""The solution’s pricing could be improved.""I had a terrible experience with Fortinet support. I only used support once when I bought the solution. I got no response for two days. However, I believe that it's no longer the case. Fortinet solutions have problems when they're launched. For example, we had issues with Fortinet's authenticator when it came out. We also had trouble with FortiNAC in the beginning.""The product's stability for VMs could be better.""Fortinet has some drawbacks, and it can be a bit challenging to scale.""There is a mismatch between the number of features they are offering and the device capacity on how much it can handle.""Technical support and documentation could both be improved.""The user interface could be more friendly and CLI could be more like that of Fortigate."

More Fortinet FortiADC Cons →

"I would like to evaluate load-balancing algorithms other than round robin and SSL offloading. Also, it would be helpful if I could logically divide the HAProxy load-balancing into multiple entities so that I would install one HA Proxy LB application which could be used for different Web servers for different applications. I am not sure if these features are available.""There is room for improvement in the pricing model. It could be cheaper.""Improving the documentation with multiple examples and scenarios would be beneficial. Most users encounter similar situations, so having a variety of scenarios readily available on the tool's website would be helpful. For instance, if I were part of the HAProxy team, I'd create a webpage with different scenarios and provide files for each scenario. This way, users wouldn't have to start from scratch every time.""HAProxy is very weak in the logging and monitoring part and requires improvement.""The basic clustering is not usable in our very specific setup. The clustering is mainly a configuration replication and is great in a case of active-passive usage. In the case of an active-active (or with more than two nodes) where the configuration is not fully identical, it cannot be used as-is.""Pricing, monitoring, and reports can be improved.""Sometimes it's challenging to get through the log, and you need a log to understand what is going on. It isn't easy to map the logging with the documentation, and every time I read the log, I have to pull out the documentation to understand what I'm reading.""HAProxy could do with some good combination integrations."

More HAProxy Cons →

Pricing and Cost Advice
  • "It's not for startups or SOHO."
  • "Costly product and complicated licensing."
  • "It all depends on the features that will be used and the number of accesses."
  • "It is true that it is a bit pricey compared to newer technologies coming to the market. For example, A10 is a load balancer that does everything that Citrix can and it does a lot more than what NetScaler does when it comes to the security space, and their prices are so cheap. Every box comes with its own license and support built into it. When you compare that with NetScaler, you have to buy licenses separately, you have to buy a support agreement that is going to be separate. A small NetScaler, even if it is a VPX which is a virtual server, could cost you close to $150,000 to $200,000 dollars. So the pricing is really high."
  • "We have been evaluating F5, Citrix, and other ADC products. Citrix is the most expense of all of them."
  • "We are quite happy with price. It's not too high."
  • "I do not have any experience with the pricing of the product."
  • "You get the value for your money. There aren't any hidden fees."
  • More Citrix NetScaler Pricing and Cost Advice →

  • "The price is competitive"
  • "Compared to F5, FortiADC pricing is better."
  • "The solution could be more cost-effective."
  • "They offer a perpetual license."
  • "The solution is less expensive than F5 or Imperva and is the most reasonably priced option available."
  • "I believe the price is good. It's fair. There are no extra costs."
  • "The product has affordable pricing."
  • "The solution's pricing is an issue and should be improved."
  • More Fortinet FortiADC Pricing and Cost Advice →

  • "HAProxy is free software. There are optional paid products (support/appliances)."
  • "The price is well worth it. HAProxy Enterprise Edition paid for itself within months, simply due to the resiliency it brings. It was a bit more expensive than we were originally interested in paying, but we are thankful we chose to go with HAProxy."
  • "Very good value for the money. One of the simplest licensing schemes in this category of products."
  • "Test/lab virtual machines can be installed without a licence. They can't be used for performance testing but otherwise behave like production nodes."
  • "If you don't have expertise then go with the licensed version. Otherwise, open-source is the best solution."
  • "We use NGINX as well. However, because the health checks are a paid feature, I like to avoid it whenever possible​."
  • "I think that the pricing is very fair, I would definitely recommend buying the Enterprise license."
  • "The only cost is for the image manager, who is responsible for uploading the image, and that is trivial."
  • More HAProxy Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Application Delivery Controllers (ADC) solutions are best for your needs.
    769,334 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The most valuable feature for us is the application firewalling in Citrix NetScaler, ensuring only valid traffic enters… more »
    Top Answer:After deployment, Citrix Netscaler shifted to a subscription-based license scheme for support, which is slightly more… more »
    Top Answer:Citrix NetScaler is a robust product, but mastering it requires significant learning and training due to its complexity… more »
    Top Answer:For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you have… more »
    Top Answer:I recommend Fortinet FortiADC. My experience with Fortinet has been very positive. Our company has been using it for… more »
    Top Answer:The user interface is very easy and integrates with Sandbox easily.
    Top Answer:I do recommend HAProxy for more simple applications or for companies with a low budget, since HAProxy is a free… more »
    Top Answer:The solution is effective in managing our traffic.
    Ranking
    Views
    8,915
    Comparisons
    6,821
    Reviews
    25
    Average Words per Review
    382
    Rating
    8.3
    Views
    4,691
    Comparisons
    3,763
    Reviews
    10
    Average Words per Review
    507
    Rating
    7.9
    Views
    10,386
    Comparisons
    7,014
    Reviews
    15
    Average Words per Review
    424
    Rating
    7.4
    Comparisons
    Also Known As
    Citrix ADC, NetScaler, Citrix NetScaler VPX
    FortiADC Application Delivery Controller, FortiADC
    HAProxy Community Edition, HAProxy Enterprise Edition, HAPEE
    Learn More
    HAProxy
    Video Not Available
    Overview

    Citrix NetScaler is an application delivery controller (ADC) and load-balancing solution for multi-cloud environments. Because its software and hardware form factors are all built on a single code base, Citrix NetScaler provides operational and feature consistency with comprehensive security for monolithic and microservices-based applications on-premises and in the cloud. The solution is designed to optimize, manage, and secure network traffic. Switching features, security and protection features, and network integration efficiency capabilities are all part of its feature set.

    Citrix NetScaler Features

    Citrix NetScaler has many valuable key features. Some of the most useful ones include:

    • Citrix Gateway
    • Secure Access
    • Layer 7 content switching
    • Database load balancing
    • Triscale clustering
    • E-based policy enforcement
    • Surge protection and priority queuing
    • Application acceleration
    • Application security, including DoS attack defense, content rewriting and response control, SSL encryption, and more.
    • Network Integration

    Citrix NetScaler Benefits

    There are many benefits to implementing Citrix NetScaler. Some of the biggest advantages the solution offers include:

    • Improved Application Performance: Citrix NetScaler optimizes the delivery of applications, reducing latency and improving the user experience.
    • Scalability: The solution can scale to handle large amounts of traffic, ensuring that applications are available even during periods of high demand.
    • Advanced Security: Citrix NetScaler includes a range of security features, such as SSL offloading, to help secure applications and protect against threats.
    • Availability: Load balancing and failover capabilities ensure that applications are always available, even in the event of a failure.
    • Good user experience: The solution’s Global Server Load Balancing (GSLB) ensures that users are directed to the nearest available application, reducing latency and improving the user experience.
    • Reduced costs: By improving application performance and reducing downtime, Citrix NetScaler can help organizations reduce costs associated with application delivery.
    • Agility: Citrix NetScaler makes it easier for organizations to deploy and manage applications, helping to increase the speed and efficiency of IT operations.
    • Analytics and monitoring: Provides insight into network and application performance, helping organizations to identify and resolve issues quickly.

    Reviews from Real Users

    Citrix NetScaler is a solution that stands out when compared to many of its competitors. Some of its major advantages are that it is easy to use, is robust, and has good load balancing.

    A Senior Citrix Engineer at Troye, says, “The web application firewalling component is probably the most powerful feature as it can identify attacks on the network at an application level which is quite important. There is also good functionality where we use IP reputation and geofencing to mitigate threats from the outside world.”

    “The feature that I have found most valuable is its load balancing,” explains a Security Consultant at a tech services company.

    Timur G., Team Head of Network Security at DOM.RF, writes, “The most valuable feature of Citrix ADC is its ease of use.” 

    Another PeerSpot reviewer, Nirav S., Technical Solutions Architect at MindTree, mentions, "Compared to other solutions, Citrix ADC is much more robust in terms of the native integration to cloud platforms. It is far more robust from an operational point of view as well."

    Fortinet FortiADC is a robust application delivery controller (ADC) that delivers application optimization, application security, and application availability. FortiADC is a valued offering from Fortinet, which is widely recognized as a trusted supplier of dynamic security solutions worldwide. FortiADC offers dynamic security functions (AV, DDoS, and WAF) in addition to advanced application connectors for a simplified deployment and complete transparency to an organization's networks and applications. FortiADC offers three primary deployment options: physical machine, virtual machine, (VM) and cloud solution options.

    Fortinet FortiADC Benefits

    • FortiADC security protocol: FortiADC integrates with FortiSandbox to improve the overall antivirus security protections where every file is scanned for known and unknown malicious risks. If a file is identified as malicious or problematic, it will be blocked in the future.

    • SSL protocol: FortiADC securely uses the most up-to-date cryptography to provide exceptional encryption and decryption using a hardware-based SSL ASIC. FortiADC offers complete transparency to inspect all traffic for threats, improves server response time, and reduces backend server load, SSL inspection and SSL offloading. FortiADC integrates seamlessly with Gemalto’s SafeNet Hardware Security Module (HSM).

    • FortiADC connectors: FortiADC Fabric Connectors offer open API-based integration and coordination with numerous software-defined networks (SDNs), third-party partners, and cloud management providers. Fortinet Fabric Connectors provide deep open and turnkey integration with recognized third-party vendors such as AWS, K8s, OCI, and SAP, in multi-vendor solutions, improving scalability, simplified management, and automation.

    • Business stability: FortiADC load balancing for on-premise global server load balancing (GSBL) and in the cloud (FortiGSBL Cloud) will ensure users can maintain a reliable and available network by improving the ability of scaling applications throughout numerous data centers to reduce application response times and enhance disaster recovery. Users are able to define protocols based on network latency concerns, overall data performance, and site availability.

    Fortinet FortiADC Features

    • Application availability

      • 4-7 application load balancing: DNS, HTTPS, RTMP, RADIUS, MySQL and more

      • External fabric connectors: Splunk Integration, AWS/OCI Connector, Kubernetes Service.

      • Security fabric connectors: FortiSIEM, Fortigate BanIP Integration, FortiAnalyzer, and more.

      • Deployment modes: High availability (AA/AP Failover), Router mode, transparent mode (switch), one-arm mode (proxy with X-forwarded for support.

    • Web application firewall (WAF)

      • Security services: Captcha support, cookie support, HTTP header security, XML/SOAP/JSON validation, CSRF protection, API gateway, and more.

      • Application security: Web attack signature, bot detection, web vulnerability scanner, OWASP Top-10 Wizard, API protection and more.
    • Application enhancement

      • HTTP and TCP improvement: TCP buffering, HTTP compressions/decompression, HTTP caching (dynamic and static objects), Bandwidth monitoring using quality of service (QoS), TCP buffering, and more.

      • Authentication offloading: Two-factor authentication (Fortitoken/Fortitoken Cloud and Google Authentication), NTLM, AUTH2.0, SAML 2.0 (SP and Idp) RADIUS, LDAP, Kerbos, and local.

      • Networking: Integration with Ansible, Cisco ACI, OpenStack and Nutanix, NVGRE and VXLAN support, VLAN and port trunking support, IPv6 Support (SLB, firewall, routing and interfaces), Dynamic NAT, Hide NAT, Static NAT for added scalability and flexibility.

      • Management: Syslog support, SNMP using private MIBs with threshold-based traps. REST APIs, VDOMS, data analytics, real-time monitoring graphs, role-based monitoring, intuitive reporting, FortiView integration, and more.

    HAProxy is considered by many in the industry to be one of the fastest and most popular and trusted software load balancer products in the marketplace today. Organizations are able to immediately deploy HAProxy solutions to enable websites and applications to optimize performance, security, and observability. HAProxy solutions are available to scale to any environment.

    HAProxy is an open-source product and has a robust, active, reliable community. The solutions are continually tested and improved on by the community. HAProxy offers a dynamic design to support the most modern architectures, microservices, and deployment environments (appliances, containers, virtual, and cloud).

    HAProxy utilizes a cloud-native protocol, which makes it a complete solution for cloud services such as Red Hat OpenShift, OVH, Rackspace, Digital Ocean, Amazon Web Services (AWS), and more. It also can be used as the reference load balancer in OpenStack.

    HAProxy Products

    • HAProxy One: This is a next-gen end-to-end application delivery platform created to secure and streamline modern application architectures. It offers a complete suite of solutions, such as application delivery software, turnkey, and appliance services observed and administered through a central control plane. The product supplies application acceleration, CDN, DDoS, bot management, WAF capabilities, and load balancing.
    • HAProxy Fusion Control Plane: This product enables organizations to streamline workflows, arrange traffic routing and security protocols, enhance the speed of delivery, and scale out of the organization’s applications. HAProxy Fusion Control Plane offers an intuitive user interface to observe and control the complete product lineup and API for administering numerous fleets of HAProxy Enterprise servers, either in the cloud or on premises.
    • HAProxy Edge: This product offering is an application delivery network (ADN) that provides a broad array of turnkey application services with amazing scale and complete visibility. Services include application and content acceleration, advanced security, and load balancing.
    • HAProxy ALOHA Hardware or Virtual Load Balancer: This product is a virtual load balancer or plug-and-play hardware constructed upon HAProxy Enterprise that is designed to support proxying at Layer 4 and Layer 7. It has a user-friendly GUI, simple deployment, and no limit on backend servers, making it a complete product for organizations desiring a reliable system to provide high-end load distribution for critical services.
    • HAProxy Enterprise Kubernetes Ingress Controller: This product is designed to facilitate smooth traffic flow into a Kubernetes cluster. It is able to automatically discover anomalies and changes in an organization's Kubernetes infrastructure and provide precise distribution of traffic to healthy pods, with no downtime caused by poor pod health or scaling changes. The product comes with an embedded WAF to optimize the security of an organization’s applications running in Kubernetes.
    • HAProxy Enterprise: This product is the enterprise-class edition of HAProxy offering a dynamic and sturdy code base with next-generation features, an enterprise suite of add-ons, professional services, and trusted support. 

      • Cluster-wide tracking and rate limiting
      • Advanced DDoS and bot management
      • Web application firewall
      • Reliable expert support
      • High performance modules
      • Device detection and geolocation
      • Real-time dashboard

    Reviews from Real Users

    Having the right load balancing solution – which is what HAProxy is – and protection in place gives organizations peace of mind.” - Nathanel S., Platform Architect at SES

    “I use HAProxy for individuals who can not buy low balancers. I built NFV in a box and send individuals a pathway into an HAProxy VM. The setup was not difficult; it usually takes a day to complete for a VPC. When it comes to pricing, HAProxy is free.” - Nasir O., Network & Cloud Architect at Koala Compute Inc.

    Sample Customers
    ABB Schweiz, Aer Lingus, AIDS Healthcare Foundation, Amnet Technology Solutions, Aramex International, Ascenty, Atos, Autodesk
    Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
    Booking.com, GitHub, Reddit, StackOverflow, Tumblr, Vimeo, Yelp
    Top Industries
    REVIEWERS
    Computer Software Company26%
    Financial Services Firm15%
    Manufacturing Company11%
    Healthcare Company8%
    VISITORS READING REVIEWS
    Computer Software Company15%
    Financial Services Firm13%
    Government9%
    Healthcare Company5%
    REVIEWERS
    Retailer14%
    Consumer Goods Company14%
    Computer Software Company14%
    Educational Organization14%
    VISITORS READING REVIEWS
    Computer Software Company20%
    Government9%
    Financial Services Firm9%
    Comms Service Provider8%
    REVIEWERS
    Financial Services Firm35%
    Retailer13%
    Computer Software Company13%
    Manufacturing Company13%
    VISITORS READING REVIEWS
    Computer Software Company19%
    Financial Services Firm11%
    Government9%
    Comms Service Provider8%
    Company Size
    REVIEWERS
    Small Business36%
    Midsize Enterprise18%
    Large Enterprise45%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise15%
    Large Enterprise63%
    REVIEWERS
    Small Business47%
    Midsize Enterprise24%
    Large Enterprise29%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise19%
    Large Enterprise54%
    REVIEWERS
    Small Business34%
    Midsize Enterprise32%
    Large Enterprise34%
    VISITORS READING REVIEWS
    Small Business24%
    Midsize Enterprise17%
    Large Enterprise59%
    Buyer's Guide
    Application Delivery Controllers (ADC)
    April 2024
    Find out what your peers are saying about F5, Citrix, HAProxy and others in Application Delivery Controllers (ADC). Updated: April 2024.
    769,334 professionals have used our research since 2012.