


Find out in this report how the two Web Application Firewall (WAF) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
My experience with the pricing or licensing of Cloudflare Web Application Firewall is that many features can be accessed for free, so the pricing is definitely reasonable.
Microsoft Azure Application Gateway significantly impacts our cost savings while maintaining higher performance.
If we can use a shared resource, then the return on investment is really nice.
We have seen a return on investment in terms of time-saving and cost-saving by not creating our own infrastructure.
I would rate the technical support with Cloudflare as excellent every time I've had to contact them.
The technical support of Cloudflare Web Application Firewall rates between five and seven at maximum.
The company provides technical support, and they are mostly available 24/7.
The proximity of Fortinet with customers ensures quick issue resolution.
Sometimes it could be faster, but generally, their support is reliable.
I would say they provide the best support for Application Gateway because they own the product, so their support is top-notch.
There is room for improvement, specifically in paid support, by providing more direct contact.
I would rate Microsoft support as good because they have a very skilled technical support team in the background
The scalability of Cloudflare Web Application Firewall rates between 8 to 9, as it depends upon the use cases and what exactly the client needs.
It auto checks everything, and you need to install the certificate.
In my experience, Fortinet FortiWeb Cloud WAF-as-a-Service's scalability is quite good, and I would rate it at eight point five out of ten.
We are purchasing Fortinet FortiWeb Cloud WAF-as-a-Service from the distributor side, who have provided support and a price discount.
Microsoft Azure Application Gateway is a very scalable product.
It has the autoscaling feature, so there is not much concern around performance; it can scale significantly.
Microsoft Azure Application Gateway is a scalable solution.
The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10.
The stability of the solution is excellent.
We have been using it for the past two to three years, and there have been good results with no problems so far.
The stability is good, and except for a few instances, I don't see the non-availability of Azure Cloud services.
The product can improve by having more multitenancy capability, which is currently not available.
I think they're doing a good job with DNS and as support for any domains that I create or that my clients create, it's mandatory for me to ensure they have Cloudflare as their DNS provider.
And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network.
Fortinet FortiWeb Cloud WAF-as-a-Service could be improved with better logging capabilities, as many come with less spacing, necessitating a FortiSIM for enhanced functionality.
The utilization of AI in Fortinet FortiWeb Cloud WAF-as-a-Service still needs to be upgraded and improved.
I want them to provide SAML authentication.
One feature I mentioned is the support for non-HTTPS protocols such as TCP, which could allow one endpoint for all kinds of protocols.
There is room for improvement in terms of support, such as assigning agents directly for more straightforward engagement.
In future releases of Microsoft Azure Application Gateway, I would like to see more AI functionalities and a better dashboard as well as some customizations.
It is twice cheaper.
I just recommend Fortinet FortiWeb Cloud WAF-as-a-Service because it is very expensive.
The price is not the cheapest, but it offers great value for money.
We would prefer to have it cheaper, but it is still expensive.
Azure solutions are quite expensive.
When it comes to pricing for Microsoft Azure Application Gateway, I would rate it a seven out of ten.
The custom rules and the geo-redundant geographical rule feature, which allows me to implement geographical rules for customers, add significant value.
The best features of Cloudflare Web Application Firewall are multiple, including the WAF, rate limiter, and bot attack protection.
Cloudflare Web Application Firewall's advanced reporting and analytics tools add a layer that we're able to visualize and see before it actually hits the local firewall.
It is possible to easily find vulnerabilities with the WAF.
It effectively mitigates web attacks, provides virtual protections, and handles large traffic with minimal processing effort.
Its usability is a key aspect as it is very easy to use and deploy in front of new APIs.
We are using it for some of the security features for our applications, particularly for securing traffic in transit with SSL.
The Web Application Firewall (WAF) in Microsoft Azure Application Gateway has been very effective in protecting applications from security threats.
The gateway's Web Application Firewall feature enhances security as it is the first entry point to your network from the outside world.
| Product | Mindshare (%) |
|---|---|
| Cloudflare Web Application Firewall | 4.7% |
| Microsoft Azure Application Gateway | 4.1% |
| Fortinet FortiWeb Cloud WAF-as-a-Service | 0.9% |
| Other | 90.3% |

| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 6 |
| Large Enterprise | 6 |
| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 2 |
| Large Enterprise | 5 |
| Company Size | Count |
|---|---|
| Small Business | 22 |
| Midsize Enterprise | 6 |
| Large Enterprise | 24 |
Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.
Fortinet FortiWeb Cloud WAF-as-a-Service provides cloud-based web application protection, ensuring businesses secure their web apps against threats without hardware management, offering dynamic scalability and threat intelligence.
Fortinet FortiWeb Cloud WAF-as-a-Service offers an advanced security platform that effectively protects web applications from cyber threats by leveraging comprehensive threat intelligence and efficient traffic management. Its cloud-native architecture facilitates seamless integration, allowing for scalable security solutions that adapt to varying demand levels. Known for reducing complexity, it empowers organizations to focus on strategic initiatives without the need for dedicated on-premise resources. The service also provides robust analytics, enabling informed decision-making based on real-time threat landscapes.
What are the key features?In industries such as finance and e-commerce where sensitive data protection is paramount, Fortinet FortiWeb Cloud WAF-as-a-Service is extensively implemented to secure web applications against potential vulnerabilities. It ensures compliance with stringent regulatory standards and protects consumer information, thus maintaining trust and brand reputation. Healthcare providers leverage it to protect patient records, a sector that demands the utmost security and confidentiality.
Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Traditional load balancers operate at the transport layer (OSI layer 4 - TCP and UDP) and route traffic based on source IP address and port, to a destination IP address and port.
To learn more about our solution, ask questions, and share feedback, join our Microsoft Security, Compliance and Identity Community.
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.