Fortinet FortiWeb pros and cons

Banks have to be compliant with PCI and other things, and FortiWeb is absolutely amazing in terms of providing these reports. Otherwise, they will have to spend a lot of time on them.

One main feature we are very happy about is file security and upload functionality.

The initial setup is pretty straightforward.

If I need something from tech support, I can get it answered within the hour.

Both the internal firewall management and the cloud can be managed by a single console.

The solution has a very simple deployment.

You have the ability to control everything from one single dashboard.

The most valuable feature is that this product represents a whole solution, including a WAF, and even anti-defacements.

It is a good product. We have just blocked everything coming from some geographical locations or certain countries, and it has been working very efficiently when I look at logs, events, and incidents generated from the system. It is generating very good analytic reports about it. This is the most valuable thing about this solution. It has load balancing and almost everything that a web application firewall needs. It is very flexible and easy to learn and configure. It can be easily learned and configured by using the information available on different channels such as YouTube.

The customers are very happy with this solution because of two things. First, the IPS integration with a web application is very tightly done on Fortinet. Second, the ease of use is there. The management interface or the GUI interface is very easy to use, configure, and manage. These are the two main valuable features. It supports integration with other Fortinet products. It also integrates very well with the firewall and sandboxing technology. They already have enough integration with different technologies. They have got a complete tech intelligence view of the whole product.

It offers some feedback and suggestions that guide our system development while helping our vendors to update their applications and fix any issues or bugs.

The automation piece can be improved. Although they say it can be automated very well, there is still manual work. Its usability should be improved in terms of automation because we want to build an infrastructure with code, but you can't do that easily with this solution. If they can give us APIs in the firewalls that we can tap into, it would be perfect.

The GUI could be better. It's limited.

The support side of things can be improved.

It costs too much.

It is not entirely user-friendly.

It may be better if it were easier to create roles.

The solution could improve by being able to handle different use cases.

The initial setup in our data center was somewhat complex.

When we look at the incident reports in the dashboard, they are available for a maximum duration of 24 hours. They should provide more time for the analysis and increase the duration of the availability of these reports. Currently, it gives the options for 5 minutes, 1 hour, and 24 hours. It would be excellent if there are more options for a longer time period. It may be configurable, but I don't know how to do it.

They could improve their support a little bit for faster response time.

The dashboard evaluating the performance of each application connected to the web app's firewall is quite helpful, but the tool is only available in application performance management. So I think if Fortinet could better integrate that particular feature, it would add a lot of value to the product.