Fortinet FortiAppSec Cloud vs NGINX App Protect comparison

Fortinet FortiAppSec Cloud vs. NGINX App Protect

Download the complete report

Helped 902,988 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cloudflare Web Application ...

Featured Reviews

Dean Barisic

CTO at PlayNirvana

Advanced security reporting has protected high-traffic betting platforms from constant attacks

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we have a dedicated IT team for that, and I'm not involved with Cloudflare much anymore. But if I were to compare them to F5, I would like to see more features that F5 offers. F5 has an option to bring the whole infrastructure, the whole WAF and all their packages, Bot Management, and everything else on your infrastructure. You need to install certain services from their side, and then you can choose if you would like requests to hit your servers immediately or if requests need to be proxied through F5 backbone. That would be a nice addition because we have 90% of the traffic as legit traffic coming from whitelisted servers. If it comes from whitelisted servers, I don't need to go every request through the backbone; I could easily just IP whitelist everything. Then I could maybe have Bot Management on my infrastructure that drastically reduces the price of Cloudflare. I would like to see Push CDN more improved in the next release of Cloudflare Web Application Firewall. And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network. From our perspective, if we have a listener that listens for stock updates, I would just need to have one processor that pushes those updates to the Cloudflare API, and then Cloudflare would broadcast that message to all listeners. Cloudflare will check the order of the message, and if you, as a customer, are not connected or have some kind of network issue, when you reconnect, you will receive the latest state and missing updates.

Read full review

reviewer2812593

CIO at a financial services firm with 51-200 employees

Advanced threat protection has reduced financial risk and improves application security visibility

The issue I have with Fortinet FortiAppSec Cloud is that the real-time analysis is not robust; I am unable to see all the logs of everything that happened, including what is passive. It only logs when there are suspicious activities, which means if something is not considered suspicious by Fortinet, I will not see the full picture. That is a disadvantage because it will not log unless it identifies an IOC or attacks, meaning I cannot see traffic information in a way that helps build more intelligence. The biggest issue I have with Fortinet FortiAppSec Cloud is that the logging is not as extensive as I would prefer. For instance, if there was an issue two days ago and Fortinet FortiAppSec Cloud did not mark it as a concern, I will not see any information about that, making it challenging to explain to customers if their request did not reach us. It hampers visibility from an API perspective. They need to enhance monitoring and logging to be more extensive and capture even passive activities. The AI integration in Fortinet FortiAppSec Cloud is still new. The generative models are good, but there is much work left to improve. It is not as intelligent as it could be; thus, enhancements around the AI co-assistant would be beneficial. Additionally, logging and monitoring need improvement as I can capture traffic and investigate offline on my Fortinet firewall, including full traffic view, but Fortinet FortiAppSec Cloud currently focuses only on security concerns, which does not give the complete picture.

Read full review

Valerio Guaglianone

Dev Ops Engineer at adesso AG

Long-term web protection has supported reliable traffic management but needs a simpler interface

NGINX App Protect is a good product. I have used both versions from F5 -also the free version- (I mean the NGINX/NGINX One/App Protect free trial period), and I think it is a good product. It's stable, affordable, and easy to manage. NGINX App Protect is a comprehensive security solution that combines advanced WAF, DoS protection, API security, and DevSecOps automation in a lightweight, scalable package ideal for modern cloud-native architectures. The adaptive machine learning capabilities are truly commendable, as the solution can establish traffic baselines and detect anomalies in real time. It automatically adjusts security policies, minimizing the need for manual intervention and reducing false positives. Additionally, it supports scalable deployment across diverse environments, including on-premises, cloud, Kubernetes, and containers, offering both flexibility and scalability I have experience with the web server, F5 load balancer, and similar products provided by Ergon, for eg. the web application firewall and the Microgateway for K8S. I'm also familiar with F5 BIG-IP products.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The setup process is very simple for me."

"The security features are valuable. The particular feature we use is called OWASP."

"Caching is the most valuable feature of Cloudflare Web Application Firewall."

"The impact of Cloudflare Web Application Firewall's integration with existing web technologies on our site's performance and security measures is quite great, actually."

"For us, the key feature of Cloudflare is DDoS protection and IP hiding, especially since we are a crypto company."

"This is a good product; it's reliable and scales well."

"There is a huge signature repository"

"The initial setup process is simple."

More Cloudflare Web Application Firewall pros

"My favorite Fortinet device is the FortiGate next-gen firewall itself; it is a complete suite with intrusion prevention, intrusion detection, anti-malware, anti-DDoS, and SD-WAN functionalities."

"We have seen a reduction in incidents and a good return on investment from Fortinet FortiAppSec Cloud, with our return on investment around 60%."

"NGINX App Protect is a good product and performs very well even when it is under stress."

"WAF is useful to track mitigation, inclusion, prevention, and the parametric firewall."

"The most valuable feature of NGINX App Protect is its flexibility."

"NGINX App Protect's best features are auto-learning, which creates a profile of applications that are deployed, bot protection, and force protection, which lets you configure your brute force policy and alert for and prevent brute force attacks."

"It has the best documentation features."

"The most valuable feature of NGINX App Protect is its open source."

"The initial setup was simple and took three to four days."

"We use NGINX for security headers, and as a proxy; it is also a very good tool for load balancing."

More NGINX App Protect pros

Cons

"The reporting could be improved if it were more granular."

"They need to improve their support because getting a response for basic requests took around 48 hours, which is too long."

"The learning curve was steep initially."

"Cloudflare should update the version of the ModSecurity core rule set that they run on."

"The blocked logs are difficult to read at times."

"Cloudflare Web Application Firewall should improve visibility for a customer."

"Their documentation could be better. They don't have documentation that explains everything well."

"The ModSecurity core rules need to be updated."

More Cloudflare Web Application Firewall cons

"The issue I have with Fortinet FortiAppSec Cloud is that the real-time analysis is not robust; I am unable to see all the logs of everything that happened, including what is passive."

"Real-time traffic analysis has posed an issue for us because we did not see logs for legitimate traffic."

"NGINX App Protect would be improved with integration with Shape and F5 WAF, which would make it easy for users to manage all their web application security with a single solution."

"Setting policies and parameters through the UI should be more automated because the process is manual, where we can only edit one rule at a time."

"Its technical support could be better."

"The dashboard could provide a more comprehensive view of the status of the connections."

"This solution is not really scalable. Both the virtual appliance and the physical appliance are limited in terms of how much traffic they can handle."

"The integration of NGINX App Protect could improve."

"The configuration needs to be more flexible because it is difficult to do things that are outside of the ordinary."

"They have a messy license model; it's not really made for microservice architecture. It's getting expensive really, really fast."

More NGINX App Protect cons

Pricing and Cost Advice

"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."

"We pay $210 per month for CloudFlare WAF."

"The annual licensing fee is $10,000 USD."

"The solution is expensive."

"Cloudflare Web Application Firewall is more affordable than other solutions."

"It is not too pricey."

"It starts at $20 and can easily go up to $200 monthly"

"What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."

More Cloudflare Web Application Firewall pricing and cost advice

Information not available

"Our licensing costs are about $40,000 a year."

"There are not any additional costs we had to pay to use NGINX App Protect."

"The product's price is high."

"The price of NGINX App Protect is approximately $3,000 annually. All of our licenses are observed by a managed service partner."

"There are no additional fees."

"Really understand the licensing model, because we underestimated that."

"The licensing fees for this solution are pretty expensive for what it does, but there is no alternative."

"There is a monthly or annual subscription to use NGINX App Protect. There are not any additional costs to the subscription."

More NGINX App Protect pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.

See recommendations

902,988 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

17%

Financial Services Firm

Comms Service Provider

Manufacturing Company

Construction Company

26%

Healthcare Company

10%

Manufacturing Company

Financial Services Firm

13%

Comms Service Provider

13%

Computer Software Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	6
Large Enterprise	6

No data available

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	7
Large Enterprise	13

Questions from the Community

What is your experience regarding pricing and costs for Cloudflare Web Application Firewall?

The price of Cloudflare Web Application Firewall is reasonable.

What needs improvement with Cloudflare Web Application Firewall?

I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we...

What is your primary use case for Cloudflare Web Application Firewall?

We are using Cloudflare Web Application Firewall's advanced reporting and analytics tools with their Zero Trust, so e...

What needs improvement with Fortinet FortiAppSec Cloud?

Real-time traffic analysis has posed an issue for us because we did not see logs for legitimate traffic. A separate l...

What is your primary use case for Fortinet FortiAppSec Cloud?

Fortinet FortiAppSec Cloud is used as a WAF solution.

What advice do you have for others considering Fortinet FortiAppSec Cloud?

We are a customer running Fortinet FortiAppSec Cloud for both our organization and one for our customer. Three users ...

What is your experience regarding pricing and costs for NGINX App Protect?

I will not be able to answer about my experience with pricing, setup cost, and licensing for NGINX App Protect, as so...

What needs improvement with NGINX App Protect?

I did not face any issues with NGINX App Protect. The only issue that we had is that someone was trying to install th...

What is your primary use case for NGINX App Protect?

I have been dealing with NGINX App Protect and the WAF policy. I usually recommend NGINX App Protect for banking and ...

Fortinet FortiWeb vs Cloudflare Web Application Firewall

Comparisons

Compared 7% of the time

Check Point WAF (formerly CloudGuard WAF) vs Cloudflare Web Application Firewall

Compared 6% of the time

Imperva Application Security Platform vs Cloudflare Web Application Firewall

Compared 6% of the time

Radware Cloud WAF Service vs Cloudflare Web Application Firewall

Compared 5% of the time

Cloudbric WAF+ vs Cloudflare Web Application Firewall

Compared 3% of the time

More Cloudflare Web Application Firewall Competitors

Fortinet FortiWeb vs Fortinet FortiAppSec Cloud

Compared 14% of the time

Cloudflare vs Fortinet FortiAppSec Cloud

Compared 14% of the time

Aryaka Unified SASE Platform vs Fortinet FortiAppSec Cloud

Compared 13% of the time

OpenText Dynamic Application Security Testing vs Fortinet FortiAppSec Cloud

Compared 9% of the time

Akamai App and API Protector vs Fortinet FortiAppSec Cloud

Compared 7% of the time

More Fortinet FortiAppSec Cloud Competitors

AWS WAF vs NGINX App Protect

Compared 7% of the time

Imperva Application Security Platform vs NGINX App Protect

Compared 6% of the time

Haltdos Enterprise WAF vs NGINX App Protect

Compared 6% of the time

Fortinet FortiWeb vs NGINX App Protect

Compared 5% of the time

More NGINX App Protect Competitors

Product Reports

Cloudflare Web Application Firewall

Download Cloudflare Web Application Firewall product report

Cloudflare Web Application Firewall report

Web Application Firewall (WAF)

Download Fortinet FortiAppSec Cloud product report

NGINX App Protect

Download NGINX App Protect product report

Also Known As

Cloudflare WAF

No data available

NGINX WAF, NGINX Web Application Firewall

Overview

Cloudflare Web Application Firewall integrates DDoS protection, load balancing, and firewall capabilities. Its ease of use, configurability, and robust security measures make it a versatile choice for protecting web applications.

Cloudflare Web Application Firewall provides a comprehensive defense against threats with advanced reporting and robust security measures. It includes DNS integration, rate limiting, and extensive rule sets, all within a SaaS model that allows API configurability. Users value its caching, scalability, and pricing, although enhancements are needed in rate-limiting and third-party integration. Improvements in customer support, especially in India, real-time controls, and user documentation are also desired. Users seek a more intuitive dashboard, better log management, and improved alert systems, along with multitenancy capabilities and enhanced reporting.

What are the key features of Cloudflare Web Application Firewall?

DDoS Protection: Shields applications from denial-of-service attacks
Load Balancing: Ensures efficient traffic distribution
DNS Integration: Enhances domain name system security
Rate Limiting: Controls traffic flow and reduces abuse
Extensive Rule Sets: Offers customizable security rules

What benefits and ROI can users find in reviews?

Scalability: Easily adapts to growing business needs
Pricing: Offers reasonable pricing structure
Caching: Improves application performance and speed
Configurable Security: Provides customizable defense settings
Efficient Management: Simplifies security and application control

Cloudflare Web Application Firewall finds application in industries like banking and retail by acting as a comprehensive security gateway, managing authentication and authorization while protecting web applications from malicious Layer 7 traffic. It also implements load balancing, CDN, and zero-trust policies, supported by advanced reporting, analytics tools, and threat scoring to meet specific industry needs.

Cloudflare

Fortinet FortiAppSec Cloud is a comprehensive security offering, designed to protect applications across cloud environments. It focuses on providing advanced security measures that cater to the needs of enterprises looking for robust application protection.

Fortinet FortiAppSec Cloud leverages an array of sophisticated technologies to offer top-tier security for cloud applications. It safeguards against threats by implementing features such as cutting-edge machine learning models and real-time threat intelligence. This ensures data integrity and application availability, crucial for maintaining normal business operations. By integrating seamlessly into cloud environments, Fortinet FortiAppSec Cloud offers a user-friendly experience that does not compromise on security.

What are the key features of Fortinet FortiAppSec Cloud?

Machine Learning Models: Employs AI for threat detection and prevention, enhancing security efficiency.
Real-Time Threat Intelligence: Offers timely updates to combat emerging threats.
Seamless Cloud Integration: Ensures easy deployment and operation within cloud infrastructures.
Scalability: Adapts to growing business needs, providing consistent security coverage.

What benefits should users expect when evaluating Fortinet FortiAppSec Cloud?

Cost Efficiency: Reduces expenses by preventing security breaches and minimizing downtime.
Enhanced Security Posture: Provides improved protection, reducing vulnerability exposure.
Operational Efficiency: Streamlines management, allowing IT teams to focus on strategic tasks.
Future-Proof Investment: Offers scalable security to meet evolving business demands.

Fortinet FortiAppSec Cloud is widely implemented across industries such as finance, healthcare, and e-commerce. Organizations in these fields benefit from its ability to secure sensitive data and maintain compliance with rigorous industry standards. Its adaptive design ensures that businesses can provide secure and reliable services to their customers at all times.

Fortinet

NGINX App Protect offers comprehensive security features like auto-learning and bot protection. Its real-time threat detection and ease of integration make it suitable for web and mobile application security across on-premises, cloud, and container environments.

NGINX App Protect stands out with its adaptive machine learning, scalable deployment options, and robust API connectivity, offering Layer 7 DDoS protection and an OWASP-certified WAF. While it supports comprehensive traffic and security management, enhancements in platform integration, automation, and technical support could improve usability. The pricing model and policy management options could also see refinement. Commonly employed in securing web and mobile applications, it addresses threats including OWASP Top 10 vulnerabilities and DDoS attacks, while providing seamless integration with Kubernetes and CI/CD pipelines.

What are the key features of NGINX App Protect?

Auto-learning: Adapts to evolving threat landscapes.
Bot and Force Protection: Prevents unauthorized access efficiently.
Integration with DevOps: Streamlines security within CI/CD pipelines.
Adaptive Machine Learning: Continuously enhances threat recognition.
Scalable Deployment: Easily manages growing demand across environments.
Traffic and Security Management: Ensures secure data flow.
Command-line Interface: Offers efficient control and management.
OWASP Certification: Meets top industry security standards.
API Connectivity: Facilitates communication between components.
Layer 7 DDoS Protection: Safeguards against complex attacks.

What benefits and ROI should be considered?

Enhanced Security: Reliable protection against major vulnerabilities.
Effective Traffic Management: Balances load efficiently.
Ease of Implementation: Simple integration saves time and effort.
Operational Scalability: Supports growth across all environments.
Comprehensive Threat Detection: Real-time monitoring minimizes risks.
Flexible Policy Options: Tailors security measures to specific needs.

NGINX App Protect finds broader use in sectors like banking and telecommunications, where it secures high-performance digital infrastructures. Its application spans perimeter security, load balancing, and acts as a reverse proxy in environments necessitating stringent security, high throughput, and robust management. The tool's adaptability facilitates its deployment alongside containers, ensuring compatibility with contemporary development practices.

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk

Information Not Available

Fortinet FortiAppSec Cloud vs. NGINX App Protect