Fortinet FortiADC vs Fortinet FortiWeb comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Fortinet FortiADC
Average Rating
7.8
Number of Reviews
20
Ranking in other categories
Application Delivery Controllers (ADC) (8th)
Fortinet FortiWeb
Average Rating
8.0
Number of Reviews
84
Ranking in other categories
Web Application Firewall (WAF) (4th)
 

Mindshare comparison

As of June 2024, in the Application Delivery Controllers (ADC) category, the mindshare of Fortinet FortiADC is 11.4%, up from 6.9% compared to the previous year. The mindshare of Fortinet FortiWeb is 4.7%, up from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Delivery Controllers (ADC)
Unique Categories:
No other categories found
Web Application Firewall (WAF)
9.8%
 

Featured Reviews

Saeid Khanipour Ghobani - PeerSpot reviewer
Sep 9, 2022
High-level load balancing and routing protocols but scalability is limited to 200 gigabits
The initial setup and configuration are very easy because the solution includes a simple OS. Initial configuration takes about ten minutes for simple environments. It is important to assess the environment and decide what services, servers, and web applications are needed. The solution can be configured in router mode or one-arm mode which uses source NAT as destination NAT to send traffic to the firewall. One-arm mode is more complex and requires discussions with our engineers. For example, you have a website with Node.js for your programming language, Amazon S3 for your CDN, NGINX for your web server, and you use both React and reCAPTCHA. Our team meets with your developer to learn your website and OS through a multi-step process and then we configure the solution to protect everything.
Blair Griffith-Barwell - PeerSpot reviewer
Feb 17, 2023
It comes with several preconfigured rule sets and templates that make deploying new applications easier
One area that needs improvement is using IP addresses within templates. If you allow an IP address to access an application, you should be able to leave a description of that. For example, we allow clients to access these services, and some are restricted to the IP address. When you add an IP, there's no way within the product to say what the IP address is. We need to maintain a separate external list because we need to remove any IP address associated with a client if they stop using our services. In many other products, you can create an object specifying that this IP address is for a client of this name or this service. You don't have this ability within FortiWeb. Another area for improvement is logging. When troubleshooting, the logs sometimes take a while to update. We've had people report that some things aren't logged if they're successful. It's a bit hit-and-miss. For example, sometimes people access one of our services, and it's successful, but we don't see that in the logs.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"From a technical perspective, it is the most scalable device from Fortinet."
"I am impressed with the product's load-balancing feature."
"The main feature that we use is GSLB (Global Server Load Balancing). GSLB makes the customer's network more reliable by scaling applications across multiple datacenters. GSLB as a disaster recovery solution can direct traffic based on site availability."
"The most valuable feature is the SSL offloading capacity."
"Key features include SSL Offloading, VM availability, and L7 load balancing."
"The GSLB, the DR side, is the best part. Because we had our main side in one city, we created another, and we had a complete MPLS over the internet. We used the GSLB and data loss for our business applications."
"We can do patches offline without causing customers outages. The web application firewall features, especially those related to the OWASP Top Ten, provide automated protections. This allows more flexibility in patching the backend applications. Additionally, it offers visibility into the requests being made to the applications, and you can't protect what you can't see."
"It's a good product because it supports all the features that ADC solutions in the market can support, like F5 solutions, for example, such as the LTM of F5."
"The support is quite good."
"The most valuable feature is ease of use."
"The valuable feature of Fortinet FortiWeb vulnerability scanner"
"The most valuable feature is the web application firewall (WAF)."
"The most valuable feature of Fortinet FortiWeb is the ease of integration and configuration."
"The solution has a very simple deployment."
"The ease of configuration is valuable. We have Azure WAF, we have OCI WAF, and we also have Cloud Armor for GCP, but their configuration isn't very easy. It's pretty simple in FortiWeb, and we can enable or configure whatever we want."
"Built-in security templates, AV integrated, strong threat intelligence."
 

Cons

"The solution needs to integrate sFlow. sFlow provides better visualization of the bandwidth and types of traffic passing through the device. When used in the traffic path, this information can be really useful."
"Because it is so generic, the documentation requires special attention. A person who has not worked on Fortinet FortiADC or a similar product will struggle to understand what the document is trying to say. The documentation could be more specific, and more detailed."
"The initial setup could be simplified."
"I think it would be helpful if Fortinet put more video examples on their cookbook site."
"The product's stability for VMs could be better."
"It would be good if they built in a fully functional web application firewall."
"Technical support and documentation could both be improved."
"Issues with SSL and encrypted traffic."
"HA Architecture needs improvement. I would improve it by working on AP HA."
"The initial setup in our data center was somewhat complex."
"I know that we have run into some issues with an SSL certificate and how it functions. Sometimes this breaks connectivity or just limits certain websites that are whitelisted."
"I had some small problems when I was upgrading firmware. After the upgrade, some of my certificates were deleted.​"
"The integration with other products should be improved."
"The documentation for the machine learning could be better."
"A user interface or dashboard for troubleshooting is needed."
"The solution could improve by being able to handle different use cases."
 

Pricing and Cost Advice

"I believe the price is good. It's fair. There are no extra costs."
"The solution could be more cost-effective."
"The solution's pricing is an issue and should be improved."
"They offer a perpetual license."
"The price is competitive"
"The product has affordable pricing."
"The product has average pricing. I rate its pricing a five out of ten."
"The solution is less expensive than F5 or Imperva and is the most reasonably priced option available."
"The pricing is in the middle. I would rate the pricing a five out of ten. It feels like a justified cost for the features."
"FortiWeb offers these services at a price that SME customers can afford, but it's also suitable for large enterprises. Still, they need to put in more work to gain a greater share of enterprise business because they face stiff competition in this segment from F5, Cloudflare, and some others."
"Its subscription prices are cheaper, and it is not very expensive. From a price perspective, Fortinet is a very well-known security vendor. Subscriptions are very simple. They have a couple of licenses on an appliance, and that's it. The cost is not that big. One license is 40K, which they give with all the products. Another one includes the subscriptions for threat prevention, IPS, sandboxing, etc, which is more than enough."
"FortiWeb is more expensive than some competing products."
"It is fine now. We had to earlier negotiate the price."
"The maintenance fee for this product could be improved."
"The solution is a bit expensive when compared to other products."
"The price of Fortinet FortiWeb is expensive in our Ethiopian currency."
report
Use our free recommendation engine to learn which Application Delivery Controllers (ADC) solutions are best for your needs.
789,442 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
20%
Financial Services Firm
9%
Government
9%
Comms Service Provider
7%
Educational Organization
39%
Computer Software Company
11%
Financial Services Firm
7%
Comms Service Provider
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?
For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you have to look for other ADC's like F5, Imperva, Radware, Fortinet, etc.
Do you recommend Fortinet FortiADC?
I recommend Fortinet FortiADC. My experience with Fortinet has been very positive. Our company has been using it for around five years. We mainly use FortiADC for the load balancing of application ...
What do you like most about Fortinet FortiADC?
The user interface is very easy and integrates with Sandbox easily.
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
The pricing is in the middle. I would rate the pricing a five out of ten. It feels like a justified cost for the features, but it might get more expensive in the future. Also, keep in mind that Che...
What needs improvement with Fortinet FortiWeb?
I'd like more customization. I'm not sure if everyone would agree, as it might add complexity. But for advanced users, it would be really useful to have access and the ability to manipulate packets...
 

Also Known As

FortiADC Application Delivery Controller, FortiADC
No data available
 

Learn More

 

Overview

 

Sample Customers

Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about F5, Citrix, HAProxy and others in Application Delivery Controllers (ADC). Updated: May 2024.
789,442 professionals have used our research since 2012.