Try our new research platform with insights from 80,000+ expert users

Fortinet FortiDDoS vs Fortinet FortiWeb comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiDDoS
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (11th)
Fortinet FortiWeb
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
95
Ranking in other categories
Web Application Firewall (WAF) (4th)
 

Mindshare comparison

While both are Security Services solutions, they serve different purposes. Fortinet FortiDDoS is designed for Distributed Denial-of-Service (DDoS) Protection and holds a mindshare of 2.8%, down 3.0% compared to last year.
Fortinet FortiWeb, on the other hand, focuses on Web Application Firewall (WAF), holds 8.4% mindshare, up 7.3% since last year.
Distributed Denial-of-Service (DDoS) Protection
Web Application Firewall (WAF)
 

Featured Reviews

Yazan Omar - PeerSpot reviewer
An easy-to-use tool with great GUI
The product's initial setup phase was really easy. There is a lot of time involved in the testing phase and other processes related to the area of deployment, so it may take up to two weeks to deploy the solution. The solution is deployed on an on-premises model. One person is enough to take care of the deployment phase of the product. The person involved in the deployment phase needs to better understand topologies when dealing with Fortinet.
Kacem CHAMMALI - PeerSpot reviewer
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The equipment works very well, and I have not encountered any issues with it."
"The most valuable feature is the cloud DDoS scrubbing capability."
"I find the interface easy to use."
"The product allows the users to adjust the thresholds."
"The solution already has security profiles and it can protect from DDoS attacks and other kinds of attacks."
"It allows me to see all the traffic on my network."
"The equipment works very well, and I have not encountered any issues with it. It is a good solution for my company."
"Packet inspection has been effective for mitigating DDoS attacks."
"The AI-driven threat detection enhances protection capabilities, and the product is equipped with hardware acceleration, improving performance considerably."
"Fortinet is a great SD-WAN player when it comes to security capabilities."
"It is a stable product."
"Auto Learn feature: Makes policy additions or deletions for my customers very simple​"
"Other than the additional security with exploit protection, we have simpler certificate handling, as we can keep internal servers using internal certificates continuously distributed and updated by Active Directory Group Policy, while the public certificates become updated only in a single place, FortiWeb itself."
"The deployment was very easy."
"FortiWeb provides the level of security we need at an excellent price point. It's easy to deploy and operationally efficient."
"The WAF profiles has been effective at mitigating web-based threats."
 

Cons

"The tool needs to focus more on the area of application traffic management, where it currently has some shortcomings."
"The challenge lies within the customer environment, particularly in Brazil, where companies have stringent security requirements for implementing solutions."
"I find that there have been issues in the past year with the solution hanging. It freezes often."
"The product’s pricing needs improvement."
"The primary area for improvement is the on-premises capacity limit, currently fixed at 10 GB."
"All the thresholds that need to be configured should be included in the default so that user will not forget or misconfigure."
"The web interface could be much better."
"I would like to see analytics, big data."
"​Their support needs improvement."
"The initial setup process could be improved."
"The solution could have more customization."
"When we look at the incident reports in the dashboard, they are available for a maximum duration of 24 hours. They should provide more time for the analysis and increase the duration of the availability of these reports. Currently, it gives the options for 5 minutes, 1 hour, and 24 hours. It would be excellent if there are more options for a longer time period. It may be configurable, but I don't know how to do it."
"Though the reporting is a nice aspect associated with the tool, I feel that it has certain shortcomings and can be made better."
"The solution could offer more integration opportunities."
"We would like the interface to be easier to use and more user-friendly. The interface needs to be enhanced."
"The initial setup in our data center was somewhat complex."
 

Pricing and Cost Advice

"The product’s pricing needs improvement."
"It's quite pricey."
"The solution is reasonably priced."
"The price of Fortinet FortiWeb is reasonable. This is one of the key factors of why we use this solution."
"Previously, for each project, the cost was $800 to $1,000 per application. Now, it's $100 to $120. For some of the applications, there is a 90% reduction, and for some of the applications, there is a 50% reduction. We're paying only $500 to $600."
"If one is cheap and ten is expensive, I rate the tool an eight."
"It should be somewhere about 36,000 Euros. That's the cost for three years. It's moderately priced."
"There are no licensing costs."
"Due to the situation in Iran with the sanctions, the price of this solution is very expensive."
"The solution is a bit expensive when compared to other products."
"It is fine now. We had to earlier negotiate the price."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
857,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
9%
Manufacturing Company
9%
University
7%
Educational Organization
31%
Computer Software Company
10%
Financial Services Firm
8%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would prefer Arbor.
What do you like most about Fortinet FortiDDoS?
The product's initial setup phase was really easy.
What is your experience regarding pricing and costs for Fortinet FortiDDoS?
Fortinet FortiDDoS offers lower costs compared to other solutions. The licensing costs are annually renewed.
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
Fortinet FortiWeb is cost-effective compared to solutions like F5. It offers strong performance for the price, providing substantial value for our customers.
What needs improvement with Fortinet FortiWeb?
The cloud-based security service of Fortinet FortiWeb could be enhanced to match the level of providers like Cloudflare ( /products/cloudflare-reviews ). Right now, it is more focused on on-prem so...
 

Also Known As

Fortinet DDoS, FortiDDos
No data available
 

Overview

 

Sample Customers

Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Cloudflare, Radware, NETSCOUT and others in Distributed Denial-of-Service (DDoS) Protection. Updated: June 2025.
857,028 professionals have used our research since 2012.