We changed our name from IT Central Station: Here's why
Get our free report covering Fortinet, Fortinet, F5, and other competitors of Fortinet FortiWeb. Updated: January 2022.
563,327 professionals have used our research since 2012.

Read reviews of Fortinet FortiWeb alternatives and competitors

Hoodad Hashemi
Information Security Manager at a financial services firm with 1,001-5,000 employees
Real User
Useful SSL uploading, highly reliable, and effective detection
Pros and Cons
  • "The most valuable features of F5 Advanced WAF are SSL uploading, signature, and anomaly detection. It is overall a high-quality solution."
  • "The solution could improve by having an independent capture module. It has a built feature that you can deploy the capture on your published website. However, it's not very user-friendly. When you compare this feature to Google Capture or other enterprise captures, they are very simple. It needs a good connection to the F5 Advanced WAF sandbox. When you implement this feature in the data center, you may suffer some complications with connecting to the F5 Advanced WAF sandbox. This should be improved in the future."

What is most valuable?

The most valuable features of F5 Advanced WAF are SSL uploading, signature, and anomaly detection. It is overall a high-quality solution.

What needs improvement?

The solution could improve by having an independent capture module. It has a built feature that you can deploy the capture on your published website. However, it's not very user-friendly. When you compare this feature to Google Capture or other enterprise captures, they are very simple. It needs a good connection to the F5 Advanced WAF sandbox. When you implement this feature in the data center, you may suffer some complications with connecting to the F5 Advanced WAF sandbox. This should be improved in the future.

For how long have I used the solution?

I have been using F5 Advanced WAF for approximately 10 years. This includes my experience when the solution was  formerly named Advanced Security Module(ASM).

What do I think about the stability of the solution?

F5 Advanced WAF is an extremely stable solution.

What do I think about the scalability of the solution?

I have found F5 Advanced WAF scalable.

How are customer service and support?

Technical support is handy and useful when you have your contract available. Once you lose it, you are all alone and there is a penalty to extend your subscription.

Which solution did I use previously and why did I switch?

I have used FortiWeb previously.

These products are not meant to be compared, because they are serving in different areas of expertise. When you are low on budget, it's better to use the FortiWeb. When you have a budget and want quality, it's most recommended to use the F5 Advanced WAF. We are talking about different classes of quality.

How was the initial setup?

When you are using the F5 Advanced WAF for any reason, you have to employ an expert. It's not the same as other solutions, such as FortiWeb, it is not easy to use. It's an advanced device, and you have to have an advanced person to operate it. This is the biggest problem that F5 Advanced WAF.

What's my experience with pricing, setup cost, and licensing?

The price of the solution is reasonable when compared with other products, such as FortiWeb. I am very satisfied with the price.

What other advice do I have?

My advice to those wanting to implement F5 Advanced WAF is they will need to have an expert on any stage of operation. Then once they decide to use the F5 Advanced WAF they have to have very good expert advisors for choosing the product because there are a variety of license options, and you may spend more than what you need. 

In the implementation stage, you have to have experts. At least three experts for the implementation phase. When it comes to the operation, you can't have a temporary expert that comes and goes, you have to have the F5 Advanced WAF expert in your company. It's an advanced device. It's completely different from the FortiWeb and the other devices. It gives you lots of options but it's complicated to implement. You have to have an expert to support you.

I rate F5 Advanced WAF an eight out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
Flag as inappropriate
Muhammed-Shafi
Presales Solutions Architect at Hilal Computers
Real User
Top 5
Good technical support and security features but needs better documentation
Pros and Cons
  • "The solution offers multiple security features. There are machine learning features and great URL encryption. It also offers multi-protocol support against DDoS attacks."
  • "The documentation is lacking. It's not like what you'd get if you were using Juniper or Cisco. They need to expand on it and make it more useful."

What is our primary use case?

We primarily use the solution to secure most data centers. We also use it for mobile apps for malicious automated attacks. 

What is most valuable?

The solution offers multiple security features. There are machine learning features and great URL encryption. It also offers multi-protocol support against DDoS attacks.

The API security they offer is quite good.

The technical support on offer is very good.

There's multiple application delivery which is impressive.

What needs improvement?

The deployment isn't very user-friendly.

There are a lot of up and coming competitors in the space, and there's always new technology coming out. The solution needs to make sure that it keeps up with what's going on in the industry to make sure they don't get left behind.

The documentation is lacking. It's not like what you'd get if you were using Juniper or Cisco. They need to expand on it and make it more useful.

For how long have I used the solution?

I've been using the solution for almost four and a half years.

What do I think about the stability of the solution?

The stability of the solution is good. It's pretty reliable. There aren't bugs or glitches. It doesn't crash or freeze. It's good.

What do I think about the scalability of the solution?

The scalability has been fine. It's been quite good for us. We don't have complaints in that regard.

How are customer service and technical support?

We've always been pretty happy with technical support. We find them helpful and knowledgable.

Which solution did I use previously and why did I switch?

I also work with Fortinet solutions and I find that sometimes they can be limiting and have their own set of difficulties.

How was the initial setup?

The initial setup is okay, however, it's not particularly user-friendly. I wouldn't describe it as complex. It's more difficult.

What about the implementation team?

We are system integrators. We can handle implementations.

What's my experience with pricing, setup cost, and licensing?

The pricing is okay. Unlike other competitors, you are able to negotiate a little bit, which can help drive down the cost to the company.

What other advice do I have?

We're a solution partner, an integrator. We have partnership-level agreements with the solution.

We have multiple deployment models. We use it on-premises as well as on the cloud using both Amazon Web Services and Azure.

Overall, I'd rate the solution seven out of ten. It would be hard for any product to rate a ten out of ten for me. However, to get a bit of a higher mark, it should offer better documentation and be more user-friendly, particularly where deployment is concerned. I'd still recommend Barracuda, though. It's pretty solid.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)
Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator
Presales Engineer at a tech services company with 1,001-5,000 employees
Real User
Top 20
Easy to set up, stable, and scalable
Pros and Cons
  • "The solution is easy to set up."
  • "The configuration is very specific right now and needs to be much more flexible."

What is our primary use case?

I primarily use the solution during application deployments. I use it to protect the applications.

What is most valuable?

The solution offers good protection of applications during deployment. It makes the deployment of applications that are on Azure fairly straightforward.

The solution is easy to set up.

What needs improvement?

The configuration is very specific right now and needs to be much more flexible. They need to work on it so that it's much easier to configure the solution so that it works how we need it to. It needs to be customizable.

The firewall portion of the gateway is very basic. It needs to be improved upon. It needs to be more robust.

For how long have I used the solution?

I've been using the solution for a while now.

What do I think about the stability of the solution?

The solution is quite stable. We haven't had issues with bugs or glitches. It's reliable. It doesn't crash or freeze. We've enjoyed the level of stability provided by the product.

What do I think about the scalability of the solution?

The solution is quite scalable. If a company needs to expand it out a bit, it should be able to do so easily. It's not hard to do so if you need to.

We have about 40 people who are currently using the solution within our organization.

How are customer service and technical support?

We've dealt with technical support in the past moreso in relation to the cloud solution. They helped us with some technical aspects and we found them to be quite helpful. We're satisfied with the level of support that we've been given so far.

Which solution did I use previously and why did I switch?

I also have experience with Radware, Fortinet, and Check Point, among other solutions. We use a variety of different solutions within our organization.

How was the initial setup?

The initial setup is not overly complex, to be honest. For our organization, it was quite an easy setup. It was straightforward. A company shouldn't struggle with getting it up and running.

Depending on the configuration, I can handle a deployment over the course of one day or so.

What about the implementation team?

I was able to handle the implementation myself. I did not need the assistance of a consultant or integrator.

What other advice do I have?

We're partners with Microsoft.

While, at this moment, Azure is only on the public cloud at this moment, the applications are all deployed on-premises.

I'd recommend the solution to other organizations. Overall, we've had a good experience.

I would rate this product at a nine out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Get our free report covering Fortinet, Fortinet, F5, and other competitors of Fortinet FortiWeb. Updated: January 2022.
563,327 professionals have used our research since 2012.