F5 Rules for AWS WAF vs Fortinet FortiAppSec Cloud comparison

F5 Rules for AWS WAF vs. Fortinet FortiAppSec Cloud

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

F5 Rules for AWS WAF

Ranking in Web Application Firewall (WAF)

14th

Average Rating

8.4

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

Business Rules Management (3rd)

Fortinet FortiAppSec Cloud

Ranking in Web Application Firewall (WAF)

26th

Average Rating

9.0

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

CDN (11th), Distributed Denial-of-Service (DDoS) Protection (18th), API Security (17th), Dynamic Application Security Testing (DAST) (9th)

Mindshare comparison

As of August 2026, in the Web Application Firewall (WAF) category, the mindshare of F5 Rules for AWS WAF is 0.4%, up from 0.0% compared to the previous year. The mindshare of Fortinet FortiAppSec Cloud is 1.4%. It is calculated based on PeerSpot user engagement data.

Web Application Firewall (WAF) Mindshare Distribution
Product	Mindshare (%)
F5 Rules for AWS WAF	0.4%
Fortinet FortiAppSec Cloud	1.4%
Other	98.2%

Web Application Firewall (WAF)

Featured Reviews

Vibin Thomas

Technical Team Lead - Content Security at Valuepoint Systems

Advanced protection has reduced web attacks and improves application performance and operations

One area where F5 Rules for AWS WAF can be improved is in simplifying the tuning process. While F5 Rules for AWS WAF is powerful, fine-tuning it to match specific application behavior can sometimes be complex and time-consuming, especially for teams without deep WAF expertise. Another improvement could be enhanced visibility and reporting. Although AWS WAF provides logs, having more intuitive and built-in dashboards or clearer categorization of rule triggers would make it easier to quickly identify and analyze attack patterns. Additionally, expanding the capabilities around bot management and behavior analysis would be beneficial compared to some dedicated bot management solutions. More advanced detection techniques could further strengthen the protection against sophisticated automated traffic. Finally, providing more predefined templates or best practice recommendations for different application types would help speed up the deployment and reduce the initial configuration effort.

Read full review

Eluma Oche

CIO at a financial services firm with 51-200 employees

Advanced threat protection has reduced financial risk and improves application security visibility

The issue I have with Fortinet FortiAppSec Cloud is that the real-time analysis is not robust; I am unable to see all the logs of everything that happened, including what is passive. It only logs when there are suspicious activities, which means if something is not considered suspicious by Fortinet, I will not see the full picture. That is a disadvantage because it will not log unless it identifies an IOC or attacks, meaning I cannot see traffic information in a way that helps build more intelligence. The biggest issue I have with Fortinet FortiAppSec Cloud is that the logging is not as extensive as I would prefer. For instance, if there was an issue two days ago and Fortinet FortiAppSec Cloud did not mark it as a concern, I will not see any information about that, making it challenging to explain to customers if their request did not reach us. It hampers visibility from an API perspective. They need to enhance monitoring and logging to be more extensive and capture even passive activities. The AI integration in Fortinet FortiAppSec Cloud is still new. The generative models are good, but there is much work left to improve. It is not as intelligent as it could be; thus, enhancements around the AI co-assistant would be beneficial. Additionally, logging and monitoring need improvement as I can capture traffic and investigate offline on my Fortinet firewall, including full traffic view, but Fortinet FortiAppSec Cloud currently focuses only on security concerns, which does not give the complete picture.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"After implementing F5 Rules for AWS WAF, we observed a reduction of approximately 60 to 70% in web application security incidents reaching our application team, particularly blocking common threats like bot traffic and SQL injections without impacting our downstream systems."

"F5 Rules for AWS WAF's OWASP protection and bot protection have reduced attacks on my applications by 72 to 90%."

"F5 Rules for AWS WAF is a strong, enterprise-focused solution for organizations that need robust web application security, centralized policy management, and better visibility into application layer threats within AWS environments."

"F5 Rules for AWS WAF should be highly recommended for AI applications, as security is a major concern, and using F5 helps prevent security issues and stabilizes organizations and applications."

"I advise anyone looking for a great tool to secure their public-facing applications to start using F5 Rules for AWS WAF."

"F5 Rules for AWS WAF has positively impacted our organization for security through the implementation of traffic rules in our application."

"F5 Rules for AWS WAF has positively impacted us by improving our web application security without adding too much operational overhead."

"Overall, the combination of reduced manual effort, improved security posture, and better application performance has delivered a strong return on investment."

More F5 Rules for AWS WAF pros

"My favorite Fortinet device is the FortiGate next-gen firewall itself; it is a complete suite with intrusion prevention, intrusion detection, anti-malware, anti-DDoS, and SD-WAN functionalities."

"We have seen a reduction in incidents and a good return on investment from Fortinet FortiAppSec Cloud, with our return on investment around 60%."

Cons

"From an improvement standpoint, one area where F5 Rules for AWS WAF could improve is in simplifying policy management and making advanced configurations more intuitive, especially for teams that are newer to enterprise WAF technologies."

"There are potential false positives in F5 Rules for AWS WAF that sometimes require tuning."

"F5 Rules for AWS WAF can be improved by simplifying the tuning process to reduce false positives and providing more built-in dashboards for better visibility and further customization."

"One area where F5 Rules for AWS WAF can be improved is in simplifying the tuning process."

"F5 Rules for AWS WAF could be improved with deeper integration with Infrastructure as Code tools like Terraform for simplification, as well as more AI-driven recommendations for rules tuning to reduce false positives and better dashboards for visibility at the CXO level."

"An area for improvement I see is that while everything is in good shape, I demand continuous improvisation of these rule sets."

"I think F5 Rules for AWS WAF could be improved mainly around visibility, specifically having more actionable recommendations for false positives."

"It's too early to talk about a return on investment with F5 Rules for AWS WAF."

More F5 Rules for AWS WAF cons

"The issue I have with Fortinet FortiAppSec Cloud is that the real-time analysis is not robust; I am unable to see all the logs of everything that happened, including what is passive."

"Real-time traffic analysis has posed an issue for us because we did not see logs for legitimate traffic."

See which vendors are best for you

Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

33%

Comms Service Provider

16%

Computer Software Company

Energy/Utilities Company

Construction Company

22%

Financial Services Firm

11%

Healthcare Company

11%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	1
Large Enterprise	7

No data available

Questions from the Community

What is your experience regarding pricing and costs for F5 Rules for AWS WAF?

My experience with the pricing, setup cost, and licensing for F5 Rules for AWS WAF was good with purchasing and the setup cost.

What needs improvement with F5 Rules for AWS WAF?

The additional costs for F5 Rules for AWS WAF are quite high, as F5 managed rules require a separate subscription on top of the standard AWS WAF charges; it would be great if it would be pre-integr...

What is your primary use case for F5 Rules for AWS WAF?

F5 Rules for AWS WAF manages the security rule set by applying the rules and setting the block directly in AWS WAF to provide advanced protection against web application attacks, bots, threats, and...

What needs improvement with Fortinet FortiAppSec Cloud?

Real-time traffic analysis has posed an issue for us because we did not see logs for legitimate traffic. A separate license is needed for Fortinet FortiAppSec Cloud to send logs to other cloud serv...

What is your primary use case for Fortinet FortiAppSec Cloud?

Fortinet FortiAppSec Cloud is used as a WAF solution.

What advice do you have for others considering Fortinet FortiAppSec Cloud?

We are a customer running Fortinet FortiAppSec Cloud for both our organization and one for our customer. Three users use Fortinet FortiAppSec Cloud. As administrators, it is easy to maintain. Using...

Cloudflare vs Fortinet FortiAppSec Cloud

Comparisons

No data available

Compared 14% of the time

Aryaka Unified SASE Platform vs Fortinet FortiAppSec Cloud

Compared 13% of the time

Fortinet FortiWeb vs Fortinet FortiAppSec Cloud

Compared 12% of the time

OpenText Dynamic Application Security Testing vs Fortinet FortiAppSec Cloud

Compared 10% of the time

Cloudflare Web Application Firewall vs Fortinet FortiAppSec Cloud

Compared 7% of the time

More Fortinet FortiAppSec Cloud Competitors

Product Reports

F5 Rules for AWS WAF

Download F5 Rules for AWS WAF product report

Web Application Firewall (WAF)

Download Fortinet FortiAppSec Cloud product report

Overview

F5 Rules for AWS WAF provides advanced web application protection tailored to secure applications hosted on AWS, offering dynamic defenses against evolving threats.

This solution offers a robust set of rules designed to enhance AWS WAF capabilities, delivering specialized protections against complex web threats. F5 Rules dynamically guard against emerging vulnerabilities, ensuring comprehensive threat mitigation. It's crafted to integrate seamlessly with AWS environments, making it fast and easy to deploy, manage, and scale as compared with legacy alternatives, providing users a manageable and comprehensive security layer for their applications.

What are the key features of F5 Rules for AWS WAF?

Automatic Updates: Regularly refreshes its defenses to address the latest threats.
Pre-built Rules: Offers a library of pre-configured rules that are easy to deploy.
Scalable Configuration: Adapts seamlessly to changing web traffic conditions.

What ROI should users expect from F5 Rules for AWS WAF?

Improved Security Posture: Reduces risk exposure with specialized threat intelligence.
Cost Efficiency: Lowers operational costs by reducing the need for manual threat management.
Time Savings: Streamlines deployment and maintenance with quick setup and automated updates.

In industries such as finance, healthcare, and retail, F5 Rules have been implemented to protect sensitive data and online transactions. This helps ensure compliance with industry regulations while maintaining performance and uptime for web applications.

Fortinet FortiAppSec Cloud is a comprehensive security offering, designed to protect applications across cloud environments. It focuses on providing advanced security measures that cater to the needs of enterprises looking for robust application protection.

Fortinet FortiAppSec Cloud leverages an array of sophisticated technologies to offer top-tier security for cloud applications. It safeguards against threats by implementing features such as cutting-edge machine learning models and real-time threat intelligence. This ensures data integrity and application availability, crucial for maintaining normal business operations. By integrating seamlessly into cloud environments, Fortinet FortiAppSec Cloud offers a user-friendly experience that does not compromise on security.

What are the key features of Fortinet FortiAppSec Cloud?

Machine Learning Models: Employs AI for threat detection and prevention, enhancing security efficiency.
Real-Time Threat Intelligence: Offers timely updates to combat emerging threats.
Seamless Cloud Integration: Ensures easy deployment and operation within cloud infrastructures.
Scalability: Adapts to growing business needs, providing consistent security coverage.

What benefits should users expect when evaluating Fortinet FortiAppSec Cloud?

Cost Efficiency: Reduces expenses by preventing security breaches and minimizing downtime.
Enhanced Security Posture: Provides improved protection, reducing vulnerability exposure.
Operational Efficiency: Streamlines management, allowing IT teams to focus on strategic tasks.
Future-Proof Investment: Offers scalable security to meet evolving business demands.

Fortinet FortiAppSec Cloud is widely implemented across industries such as finance, healthcare, and e-commerce. Organizations in these fields benefit from its ability to secure sensitive data and maintain compliance with rigorous industry standards. Its adaptive design ensures that businesses can provide secure and reliable services to their customers at all times.

Fortinet

F5 Rules for AWS WAF vs. Fortinet FortiAppSec Cloud