As of July 2024, in the Application Delivery Controllers (ADC) category, the mindshare of Fortinet FortiADC is 11.5%, up from 7.3% compared to the previous year. The mindshare of Fortinet FortiWeb is 5.6%, up from 3.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Delivery Controllers (ADC)

Unique Categories:

No other categories found

Web Application Firewall (WAF)

9.7%

Featured Reviews

Andrew Reynolds

Senior Technical Consultant at CBR Cyber Pty Ltd

Jun 20, 2024

Has OWASP Top Ten feature for automated protection and can do offline patches without causing customer outages

I like the load-balancing components because they are very straightforward. The interface is easy to get around and follows a very logical pattern and the API's are very easy to follow. The basic OWASP protections it offers in the web application firewall are also useful. The tool does what it says on the box. Setting up priority groups and using health monitors is easy. We can do patches offline to application servers without causing outages that would affect the customer. The web application firewall features, especially those related to the OWASP Top Ten, provide easily integrated and automated protections. This helps with legislative compliance for our Apps and for compliance with the PCI security standards. This allows more flexibility in patching the back end applications and it offers visibility into the requests being made to the applications - you can't protect what you can't see.

Read full review

Blair Griffith-Barwell

Principal Network Architect at Global Processing

Feb 17, 2023

It comes with several preconfigured rule sets and templates that make deploying new applications easier

One area that needs improvement is using IP addresses within templates. If you allow an IP address to access an application, you should be able to leave a description of that. For example, we allow clients to access these services, and some are restricted to the IP address. When you add an IP, there's no way within the product to say what the IP address is. We need to maintain a separate external list because we need to remove any IP address associated with a client if they stop using our services. In many other products, you can create an object specifying that this IP address is for a client of this name or this service. You don't have this ability within FortiWeb. Another area for improvement is logging. When troubleshooting, the logs sometimes take a while to update. We've had people report that some things aren't logged if they're successful. It's a bit hit-and-miss. For example, sometimes people access one of our services, and it's successful, but we don't see that in the logs.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"From a technical perspective, it is the most scalable device from Fortinet."

"It's a good product because it supports all the features that ADC solutions in the market can support, like F5 solutions, for example, such as the LTM of F5."

"Ease of use in deploying and having it up and running requires minimal knowledge."

"Because ADC is the intermediary between the servers and the end-user application, it gives thorough information about the traffic, what the problem is."

"The main feature that we use is GSLB (Global Server Load Balancing). GSLB makes the customer's network more reliable by scaling applications across multiple datacenters. GSLB as a disaster recovery solution can direct traffic based on site availability."

"We can do patches offline without causing customers outages. The web application firewall features, especially those related to the OWASP Top Ten, provide automated protections. This allows more flexibility in patching the backend applications. Additionally, it offers visibility into the requests being made to the applications, and you can't protect what you can't see."

"The solution provides high-level services such as availability, redundancy, and load balancing between servers."

"Although FortiADC has multiple features that I like, the global DNS is the most helpful. It is primarily useful for customers with huge environments and at least two data centers. FortiADC can act as your DNS server. It can check which data center has the lowest latency, and route traffic to that one. It's an intelligent DNS."

More Fortinet FortiADC pros

"The policies and the filtering are the most valuable features, especially traffic, URL, and application filtering. The solution is excellent at detecting vulnerabilities."

"All the features that FortiGate contains are very suitable for our business. We work with other products in Fortinet, FortiWeb, FortiSandbox, FortiMail, and FortiCache. We use all UTM features like self-encryption, encryption, all UTM features."

"Provides good vulnerability scanning, IPS, and geolocalization."

"One main feature we are very happy about is file security and upload functionality."

"The solution is easy to configure and deploy."

"The WAF profiles has been effective at mitigating web-based threats."

"Some of the threat detection analytics and the filtering capabilities they give us for filtering a certain type of information that we don't want coming into the site are its valuable features. The analytics are pretty good in terms of being able to see what threats have been detected and mitigated, where they're coming from, and things like that."

"FortiWeb is easy to operate with a reasonably high level of protection. FortiWeb provides multiple deployment options with a physical or virtual (FortiWeb-VM) appliance, and acts either as a reverse/transparent proxy or out-of-band. It is also available on AWS and Azure."

More Fortinet FortiWeb pros

Cons

"The product’s price could be reduced. Also, some of its features need to be more advanced."

"The L7 Persistent load-balancing algorithm has not worked for me after having tested it many times with my customer's in-house application. I'd like to suggest that the company make sure that all load-balancing algorithms work properly with most applications, even those that are in-house apps."

"Fortinet FortiADC should include an advanced-level SD-WAN."

"Because it is so generic, the documentation requires special attention. A person who has not worked on Fortinet FortiADC or a similar product will struggle to understand what the document is trying to say. The documentation could be more specific, and more detailed."

"Fortinet has some drawbacks, and it can be a bit challenging to scale."

"There is a mismatch between the number of features they are offering and the device capacity on how much it can handle."

"The product's stability for VMs could be better."

"FortiADC is complex to configure so the interface should be improved."

More Fortinet FortiADC cons

"I would like to see more improvements with respect to threat intelligence."

"Maybe the load balancing options could be enhanced."

"In terms of performance, it needs to be more robust."

"Fortinet FortiWeb is not scalable. You'll need more budget to change the hardware."

"The dashboard evaluating the performance of each application connected to the web app's firewall is quite helpful, but the tool is only available in application performance management. So I think if Fortinet could better integrate that particular feature, it would add a lot of value to the product."

"The F5 solution has more features than Fortinet FortiWeb, such as multiple load balancing."

"A better load balancer is needed when multiple servers are used for the same website."

"F5 and some other firewalls are easier to customize. FortiWeb could be more flexible and customizable. The documentation could also be improved because many of the advanced features aren't fully documented."

More Fortinet FortiWeb cons

Pricing and Cost Advice

"The solution could be more cost-effective."

"Compared to F5, FortiADC pricing is better."

"The price is competitive"

"The product has affordable pricing."

"The product has average pricing. I rate its pricing a five out of ten."

"The solution's pricing is an issue and should be improved."

"I rate Fortinet FortiADC's pricing one out of ten. It is fixed."

"The solution is less expensive than F5 or Imperva and is the most reasonably priced option available."

More Fortinet FortiADC pricing and cost advice

"The license to use Fortinet FortiWeb is approximately $14,000."

"Cheaper than others."

"It is an expensive suite and it is an expensive solution, but it is a manageable one for an enterprise."

"There's only one payment for the duration of the license. On a scale from one to five, I would rate pricing at four. I have not encountered any additional costs on my projects involving Fortinet FortiWeb."

"It really pays off to buy licences for multiple years."

"The price of Fortinet FortiWeb is expensive in our Ethiopian currency."

"The pricing is average; the product is neither particularly expensive nor affordable."

"There are no licensing costs."

More Fortinet FortiWeb pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Delivery Controllers (ADC) solutions are best for your needs.

See recommendations

793,295 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

21%

Financial Services Firm

10%

Government

Comms Service Provider

Educational Organization

40%

Computer Software Company

11%

Financial Services Firm

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?

For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you have to look for other ADC's like F5, Imperva, Radware, Fortinet, etc.

See all answers

Do you recommend Fortinet FortiADC?

I recommend Fortinet FortiADC. My experience with Fortinet has been very positive. Our company has been using it for around five years. We mainly use FortiADC for the load balancing of application ...

See all answers

What do you like most about Fortinet FortiADC?

The user interface is very easy and integrates with Sandbox easily.

See all answers

What do you like most about Fortinet FortiWeb?

The WAF profiles has been effective at mitigating web-based threats.

See all answers

What is your experience regarding pricing and costs for Fortinet FortiWeb?

It's not cheap, but it's not expensive either. It depends on the features you need and whether you choose hardware or a virtual machine. I would rate the pricing a five out of ten, where one is hig...

See all answers

What needs improvement with Fortinet FortiWeb?

Maybe the load balancing options could be enhanced. FortiWeb provides very good protection for web applications, web servers, and mobile apps, but the load-balancing capabilities and mechanisms are...

See all answers

Comparisons

F5 BIG-IP Local Traffic Manager (LTM) vs Fortinet FortiADC

Compared 25% of the time

NetScaler vs Fortinet FortiADC

Compared 16% of the time

Kemp LoadMaster vs Fortinet FortiADC

Compared 7% of the time

A10 Networks Thunder ADC vs Fortinet FortiADC

Compared 5% of the time

Loadbalancer.org vs Fortinet FortiADC

Compared 5% of the time

More Fortinet FortiADC Competitors

F5 Advanced WAF vs Fortinet FortiWeb

Compared 22% of the time

AWS WAF vs Fortinet FortiWeb

Compared 8% of the time

Azure Web Application Firewall vs Fortinet FortiWeb

Compared 7% of the time

Cloudflare Web Application Firewall vs Fortinet FortiWeb

Compared 6% of the time

Imperva Web Application Firewall vs Fortinet FortiWeb

Compared 6% of the time

More Fortinet FortiWeb Competitors

Product Reports

Buyer's Guide

Fortinet FortiADC

July 2024

Download Fortinet FortiADC product report

Buyer's Guide

Fortinet FortiWeb

July 2024

Download Fortinet FortiWeb product report

Also Known As

FortiADC Application Delivery Controller, FortiADC

No data available

Learn More

Fortinet

Overview

Fortinet FortiADC is a robust application delivery controller (ADC) that delivers application optimization, application security, and application availability. FortiADC is a valued offering from Fortinet, which is widely recognized as a trusted supplier of dynamic security solutions worldwide. FortiADC offers dynamic security functions (AV, DDoS, and WAF) in addition to advanced application connectors for a simplified deployment and complete transparency to an organization's networks and applications. FortiADC offers three primary deployment options: physical machine, virtual machine, (VM) and cloud solution options.

Fortinet FortiADC Benefits

FortiADC security protocol: FortiADC integrates with FortiSandbox to improve the overall antivirus security protections where every file is scanned for known and unknown malicious risks. If a file is identified as malicious or problematic, it will be blocked in the future.
SSL protocol: FortiADC securely uses the most up-to-date cryptography to provide exceptional encryption and decryption using a hardware-based SSL ASIC. FortiADC offers complete transparency to inspect all traffic for threats, improves server response time, and reduces backend server load, SSL inspection and SSL offloading. FortiADC integrates seamlessly with Gemalto’s SafeNet Hardware Security Module (HSM).
FortiADC connectors: FortiADC Fabric Connectors offer open API-based integration and coordination with numerous software-defined networks (SDNs), third-party partners, and cloud management providers. Fortinet Fabric Connectors provide deep open and turnkey integration with recognized third-party vendors such as AWS, K8s, OCI, and SAP, in multi-vendor solutions, improving scalability, simplified management, and automation.
Business stability: FortiADC load balancing for on-premise global server load balancing (GSBL) and in the cloud (FortiGSBL Cloud) will ensure users can maintain a reliable and available network by improving the ability of scaling applications throughout numerous data centers to reduce application response times and enhance disaster recovery. Users are able to define protocols based on network latency concerns, overall data performance, and site availability.

Fortinet FortiADC Features

Application availability
- 4-7 application load balancing: DNS, HTTPS, RTMP, RADIUS, MySQL and more
- External fabric connectors: Splunk Integration, AWS/OCI Connector, Kubernetes Service.
- Security fabric connectors: FortiSIEM, Fortigate BanIP Integration, FortiAnalyzer, and more.
- Deployment modes: High availability (AA/AP Failover), Router mode, transparent mode (switch), one-arm mode (proxy with X-forwarded for support.
Web application firewall (WAF)
- Security services: Captcha support, cookie support, HTTP header security, XML/SOAP/JSON validation, CSRF protection, API gateway, and more.
- Application security: Web attack signature, bot detection, web vulnerability scanner, OWASP Top-10 Wizard, API protection and more.

Application enhancement
- HTTP and TCP improvement: TCP buffering, HTTP compressions/decompression, HTTP caching (dynamic and static objects), Bandwidth monitoring using quality of service (QoS), TCP buffering, and more.
- Authentication offloading: Two-factor authentication (Fortitoken/Fortitoken Cloud and Google Authentication), NTLM, AUTH2.0, SAML 2.0 (SP and Idp) RADIUS, LDAP, Kerbos, and local.
- Networking: Integration with Ansible, Cisco ACI, OpenStack and Nutanix, NVGRE and VXLAN support, VLAN and port trunking support, IPv6 Support (SLB, firewall, routing and interfaces), Dynamic NAT, Hide NAT, Static NAT for added scalability and flexibility.
- Management: Syslog support, SNMP using private MIBs with threshold-based traps. REST APIs, VDOMS, data analytics, real-time monitoring graphs, role-based monitoring, intuitive reporting, FortiView integration, and more.

Fortinet FortiWeb is a Web Application Firewall (WAF) that protects your web applications and APIs from attacks targeting known as well as unknown vulnerabilities. As the surface of your web applications evolves with each change of existing features and deployment of new features, your APIs are left exposed. Fortinet FortiWeb provides the board protection capabilities required to protect web applications without sacrificing performance or manageability.

Fortinet FortiWeb is an automatic, advanced multi-layer solution that provides secure protection by discerning irregular behavior and distinguishing between malicious and benign anomalies. In addition, the approach delivers powerful bot mitigation capacities which authorize harmless bots to connect while blocking malicious bot activity securely. Regardless of where an application is hosted, Fortinet FortiWeb will safeguard business applications by providing deployment options, such as virtual machines, hardware appliances, and containers that can be deployed in the data center, cloud environments, or in the cloud-native SaaS solution.

Fortinet FortiWeb Features and Benefits

APIs and web applications have become integral to the rising demand for business-critical applications. Now more than ever, businesses are in need of an automatic firewall that will provide them with security, without sacrificing performance or reliability. Fortinet FortiWeb offers a variety of features and benefits, including:

Security fabric integration: FortiWeb integrates with other Fortinet solutions to provide advanced protection from persistent threats.
Proven web application and API protection: FortiWeb safeguards applications from all DDOS attacks, malicious bot attacks, and OWASP Top-10 threats.
Advanced visual analytics: FortiWeb offers a unique visual reporting tool that other WAF solutions don’t by providing a detailed analysis of attack elements and sources.
Hardware-based acceleration: With fast and secure traffic encryption and decryption, FortiWeb provides best-in-class WAF protection.
ML-based threat detection: FortiWeb delivers multi-layer machine learning defense protection to defend against zero-day attacks and reduce false positives.
False positive mitigation tools: Reduce daily management of policies through advanced tools to guarantee only unwanted traffic is blocked.

Reviews from Real Users

Fortinet FortiWeb offers an industry-leading Web Application Firewall, and users are satisfied with it for a number of reasons, including the ability to control everything from the dashboard and the PCI-compliant reports it offers.

Carlos P., director of business and digital transformation at SERNIVEL3, notes, "You have the ability to control everything from one single dashboard."

A director at a tech service company, says, "Banks have to be compliant with PCI and other things, and FortiWeb is absolutely amazing in terms of providing these reports. Otherwise, they will have to spend a lot of time on them."

Sample Customers

Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data

Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG

Buyer's Guide

Application Delivery Controllers (ADC)

June 2024

Download Free Report

Find out what your peers are saying about F5, Citrix, HAProxy and others in Application Delivery Controllers (ADC). Updated: June 2024.

DOWNLOAD NOW

793,295 professionals have used our research since 2012.

We monitor all Application Delivery Controllers (ADC) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.