Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb vs NSFOCUS Web Application Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (12th)
Fortinet FortiWeb
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
96
Ranking in other categories
Web Application Firewall (WAF) (5th)
NSFOCUS Web Application Fir...
Average Rating
7.0
Reviews Sentiment
8.0
Number of Reviews
1
Ranking in other categories
Web Application Firewall (WAF) (43rd)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
OcheEluma - PeerSpot reviewer
Enhanced security with comprehensive traffic inspection and some downtime automation needs
One area that needs improvement is the handling of SaaS downtime. When there is downtime at their data center, it becomes a transit point issue for us, causing downtime in our environment as well. Although measures like built-in redundancy and manual switching between data centers exist, there is room for improvement in making these transitions automatic without impacting the customer. Automating the migration without manual intervention would significantly enhance user experience during downtime. Additionally, being able to read non-flagged traffic for operational purposes could also be an area to improve.
it_user933945 - PeerSpot reviewer
Offers Application Protection Against Web Attacks
There is a need for expanded licensing terms and options. There's also a need for improved and more agile customization features. The user needs to be able to manage each policy as required; the functionality needs to empower the user. There should be a complete suite of desktop provider policies available to users. Overall, it needs to be more user-friendly.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Easier http to https redirect using page rules"
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"Its most significant benefit to date is the speed with which it refreshes DNS records on the internet once you change it. If you are changing a website or registering a new record, it is very quick."
"Cloudflare consolidates various capabilities into one product, streamlining processes."
"It is a stable solution. I rate the stability a ten out of ten...I rate the scalability a ten out of ten."
"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"The tool is user-friendly."
"The solution provides good load balancing and protection against DDoS attacks."
"The most valuable feature is ease of use."
"The GUI is user-friendly and it's easy to understand how to manage it."
"The valuable feature of Fortinet FortiWeb vulnerability scanner"
"If I need something from tech support, I can get it answered within the hour."
"It's the extra security that is the most valuable feature. You have insight into your traffic. There are some great insights into what utilities hackers are trying to exploit. It blocks a lot of stuff from the internet."
"The solution has a good sandbox feature."
"I have recently been looking at the SSL certificate features and the learning mode of the appliance. This appliance learns from the pattern of SSL attacks."
"Built-in security templates, AV integrated, strong threat intelligence."
"Since we are using this tool for protection purposes we really appreciate the hybrid security abilities; the main idea here is that we powerful protection our application needs."
 

Cons

"It should be easier to collect the logs with companies like Sumo. However, based on my discussions with the salespeople, I understand that's how they make their money. With the enterprise product, they want people doing those kinds of enterprise features to do the logging. They want them to pay a lot of money, and that's where I have an issue with them. That should be a default. You should be able to get the log no matter what. The logging should be universal."
"Cloudflare's console should be made more user-friendly."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"There should be a specific price list for enterprise-level customers."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"Sometimes their more advanced caching tools can cause higher first-byte times and problems with JavaScript."
"Latencies are always a problem."
"The solution could use more analytics on the backend to give us more insights into everything. More reports would be helpful."
"We would like the interface to be easier to use and more user-friendly. The interface needs to be enhanced."
"FortiWeb does not exist in a cloud-based form. Its only available for deployment as a virtual appliance on AWS and Azure IaaS platforms. Because of the trend to WAF environments, it would be good to have it as a SaaS. Also, FortiWeb would be more competitive if it combined WAF and DDoS protection."
"Fortinet WAF came out recently, and there is not much feedback about customer experience. For each project, customers ask about the scenarios and references of the customers who have implemented this solution, which we don't have. They need to simplify the customer experience and provide more information so that we can propose Fortinet Fortiweb as a WAF solution to customers and convince them. They need to improve their service and training. We need good training to implement and use it properly and know more about it. We still don't know much about Fortinet WAF. We didn't get any proper training sessions. Other vendors like Cisco, Palo Alto, Check Point, and Barracuda provide such sessions. Whenever we receive a request from a customer for this solution, we just give the price. We don't propose this solution because we don't know much about it. We propose whatever we are familiar with and what is supported."
"Fortinet FortiWeb could improve data integration."
"The solution could have more customization."
"Centralized management of multiple devices, and GUI improvement, could reduce the learning curve."
"Its threat intelligence capabilities may not be as advanced as some competitors."
"Another area for improvement is logging. When troubleshooting, the logs sometimes take a while to update. We've had people report that some things aren't logged if they're successful. It's a bit hit-and-miss. For example, sometimes people access one of our services, and it's successful, but we don't see that in the logs."
"There is a need for expanded licensing terms and options. There's also a need for improved and more agile customization features. The user needs to be able to manage each policy as required; the functionality needs to empower the user. There should be a complete suite of desktop provider policies available to users. Overall, it needs to be more user-friendly."
 

Pricing and Cost Advice

"The solution is expensive when compared to other products but offers unlimited bandwidth."
"There are no additional costs beyond the standard licensing fees."
"I give the price a five out of ten."
"The price is reasonable."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"The tool is a premium product, so it is very expensive."
"The cost primarily depends on the size of the organization."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"The product is expensive. I rate the pricing a ten out of ten."
"FortiWeb can be purchased in VM mode for a lower price and the same features."
"When I use any other firewall, I have to take a license. It could be a perpetual license or subscription-based. In both cases, we have to pay some amount in advance, whereas in the case of FortiWeb, when using it as a service, I am paying half a dollar only for the domain name, and then I am paying based on the traffic or the number of requests."
"It is not a cheap product. It is not like a Linux or a Genex that you can deploy. It is a hardware appliance, and it is built for a specific reason and reliability. It is an enterprise-class solution. You wouldn't find an SMB investing in something like this."
"​It really pays off to buy licences for multiple years​."
"The pricing is average; the product is neither particularly expensive nor affordable."
"All our Fortinet pricing is bundled together for different products, like FortiGate, FortiAnalyzer, and FortiWeb. FortiWeb, by itself, is probably around $2,500 to $3,500."
"It's an expensive solution, although there are no additional costs."
Information not available
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
868,759 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
12%
Financial Services Firm
11%
Government
7%
Comms Service Provider
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise20
Large Enterprise30
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
The pricing for Fortinet FortiWeb varies with different models having different prices. It depends on the requirement...
What needs improvement with Fortinet FortiWeb?
There is room for improvement in Fortinet FortiWeb. The team was only from FortiGate itself. They are making new firm...
Ask a question
Earn 20 points
 

Also Known As

Cloudflare DNS
No data available
NSFOCUS WAF, NSFOCUS Web Application Security
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
2016 G20 Summit
Find out what your peers are saying about F5, Amazon Web Services (AWS), Microsoft and others in Web Application Firewall (WAF). Updated: September 2025.
868,759 professionals have used our research since 2012.