No more typing reviews! Try our Samantha, our new voice AI agent.

F5 Advanced WAF vs Fortinet FortiAppSec Cloud comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

F5 Advanced WAF
Ranking in Web Application Firewall (WAF)
3rd
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
72
Ranking in other categories
No ranking in other categories
Fortinet FortiAppSec Cloud
Ranking in Web Application Firewall (WAF)
26th
Average Rating
9.0
Reviews Sentiment
6.6
Number of Reviews
2
Ranking in other categories
CDN (12th), Distributed Denial-of-Service (DDoS) Protection (17th), API Security (16th), Dynamic Application Security Testing (DAST) (10th)
 

Mindshare comparison

As of November 2026, in the Web Application Firewall (WAF) category, the mindshare of F5 Advanced WAF is 3.3%, down from 7.6% compared to the previous year. The mindshare of Fortinet FortiAppSec Cloud is 1.4%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
F5 Advanced WAF3.3%
Fortinet FortiAppSec Cloud1.4%
Other95.3%
Web Application Firewall (WAF)
 

Featured Reviews

reviewer2797602 - PeerSpot reviewer
Senior Security Systems Engineer at a tech services company with 11-50 employees
Granular security policies have protected critical applications and ensure safe user and admin access
Improvements could be made regarding the log information from the backend CLI. There are enhancements needed; if a request gets blocked on the TCP layer, there should be traces or data to verify which source generated these requests, including the source and port information for initiation. These data are missing from F5 Advanced WAF. Besides that, another improvement could be refining the bot detection to minimize false positives; it should be able to verify more granularly between legitimate and non-legitimate clients. Overall, I find everything else good. A wish list feature I have is for the Technical Assistance Center (TAC) to respond more promptly. Their response time needs improvement; while they do not take excessive time, it can be enhanced, especially given it is a security product.
OE
CIO at a financial services firm with 51-200 employees
Advanced threat protection has reduced financial risk and improves application security visibility
The issue I have with Fortinet FortiAppSec Cloud is that the real-time analysis is not robust; I am unable to see all the logs of everything that happened, including what is passive. It only logs when there are suspicious activities, which means if something is not considered suspicious by Fortinet, I will not see the full picture. That is a disadvantage because it will not log unless it identifies an IOC or attacks, meaning I cannot see traffic information in a way that helps build more intelligence. The biggest issue I have with Fortinet FortiAppSec Cloud is that the logging is not as extensive as I would prefer. For instance, if there was an issue two days ago and Fortinet FortiAppSec Cloud did not mark it as a concern, I will not see any information about that, making it challenging to explain to customers if their request did not reach us. It hampers visibility from an API perspective. They need to enhance monitoring and logging to be more extensive and capture even passive activities. The AI integration in Fortinet FortiAppSec Cloud is still new. The generative models are good, but there is much work left to improve. It is not as intelligent as it could be; thus, enhancements around the AI co-assistant would be beneficial. Additionally, logging and monitoring need improvement as I can capture traffic and investigate offline on my Fortinet firewall, including full traffic view, but Fortinet FortiAppSec Cloud currently focuses only on security concerns, which does not give the complete picture.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The initial setup was was easy to install."
"F5's user-friendly interface and seamless integration stand out as the most valuable features for us."
"My favorite feature of F5 is the ability to play around with the ciphers. I also like the ability to have an immediate display of the support IDs when a real blockage occurs. The protection offered is great."
"The valuable features vary from customers to customers. Some customers are okay with the basic features of the WAF, and some customers use advanced WAF with a few other features."
"The product is very easy to use and they provide great support."
"The most valuable feature is artificial intelligence and to get extra internal access."
"The level of configurability that I get with F5 Advanced WAF solution is immense, and I have to be a bit aware of how it works and all of its features, but at the end of the day, it is all about the administration expertise that I will require to have and use it to my liking based on the kind of services that I have onboarded on my solution itself."
"We chose this product because we believe it is the best product for us."
"We have seen a reduction in incidents and a good return on investment from Fortinet FortiAppSec Cloud, with our return on investment around 60%."
"My favorite Fortinet device is the FortiGate next-gen firewall itself; it is a complete suite with intrusion prevention, intrusion detection, anti-malware, anti-DDoS, and SD-WAN functionalities."
 

Cons

"Improvements could be made regarding the log information from the backend CLI; if a request gets blocked on the TCP layer, there should be traces or data to verify which source generated these requests, including the source and port information for initiation."
"The pricing could be more flexible."
"They should work on the virtualization of NGINX."
"Although we're getting some reports, we're not getting all the reports we need. There seems to be a gap in report management."
"The solution is pretty difficult to set up. You really have to have a grasp of the product to configure it correctly."
"My experience with the technical support from F5 is that on the technical side, we sometimes face issues with reachability and availability."
"It's sometimes difficult to customize APIs with F5 Advanced WAF, which could be made easier."
"We usually use a third-party tool for logging and reporting. It would be nice if we could do that right on this solution. They have one, but it's not very stable. Logging and reporting effectively would be a big enhancement."
"Real-time traffic analysis has posed an issue for us because we did not see logs for legitimate traffic."
"The issue I have with Fortinet FortiAppSec Cloud is that the real-time analysis is not robust; I am unable to see all the logs of everything that happened, including what is passive."
 

Pricing and Cost Advice

"The cost is slightly above average."
"The price of F5 Advanced WAF could improve it is expensive."
"The pricing is too high."
"F5 Advanced WAF technical support comes at a cost, and it's expensive."
"I rate F5 Advanced WAF's pricing a three out of ten."
"As far as the pricing of F5 Advanced WAF I would rate it a four out of five depending on what features I am looking for. Imperva is more expensive."
"After buying the program, you just pay for the support every year."
"I would rate the pricing as seven out of ten"
Information not available
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Outsourcing Company
10%
Comms Service Provider
9%
Computer Software Company
9%
Construction Company
19%
Financial Services Firm
10%
Comms Service Provider
9%
Healthcare Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise16
Large Enterprise31
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for F5 Advanced WAF?
F5 Advanced WAF is somewhat costly compared to other vendors, but it is worth the investment due to the stability it provides to the environment and infrastructure.
What needs improvement with F5 Advanced WAF?
Improvements could be made regarding the log information from the backend CLI. There are enhancements needed; if a request gets blocked on the TCP layer, there should be traces or data to verify wh...
What is your primary use case for F5 Advanced WAF?
My main use case for F5 Advanced WAF is to protect external and internal applications from cyber attacks and to prevent malicious payloads and malicious data from reaching servers. Even if maliciou...
What needs improvement with Fortinet FortiAppSec Cloud?
Real-time traffic analysis has posed an issue for us because we did not see logs for legitimate traffic. A separate license is needed for Fortinet FortiAppSec Cloud to send logs to other cloud serv...
What is your primary use case for Fortinet FortiAppSec Cloud?
Fortinet FortiAppSec Cloud is used as a WAF solution.
What advice do you have for others considering Fortinet FortiAppSec Cloud?
We are a customer running Fortinet FortiAppSec Cloud for both our organization and one for our customer. Three users use Fortinet FortiAppSec Cloud. As administrators, it is easy to maintain. Using...
 

Overview

 

Sample Customers

MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
Information Not Available
Find out what your peers are saying about F5 Advanced WAF vs. Fortinet FortiAppSec Cloud and other solutions. Updated: September 2026.
920,929 professionals have used our research since 2012.