Fortinet FortiWeb Reviews

With other vendors you need to go through a learning period. With FortiWeb you can just apply a high-security profile and move on. It's very easy to reduce false positives.

• Built-in security templates
• AV integrated
• Strong threat intelligence

Also, if you serve files or you accept files with your server, Fortiweb has built-in antivirus. The Fortinet product family also provides good IP intelligence (botnet C&C, etc.).

Requires very little effort to add device to topology or replace existing WAF device with FortiWeb.

No issues with stability.

No issues with scalability.

Eight out of 10.

F5, A10, KEMP.

It's very easy.

Be sure to look at industry reviews, they have good knowledge about threat intelligence.

Application delivery is strong.

It has provided stability to applications.

The hardware does not measure up. Fortinet does not have sturdy hardware.

I have been using it for three years.

My client was using it when we took over operation of the project.

The price is not too low and it’s not too high.

I did not evaluate other options. This product was already implemented.

Check the market before implementing it... because I didn’t get the chance to do so.

• SSL offloading
• Unlimited number of protected servers
• Load balancing

If a customer has a web portal that frequently experiences attacks, FortiWeb blocks all negative traffic.

It would be great if FortiWeb could provide web forms like Microsoft TMG. (For example, OWA Exchange portal or SharePoint portal.) Many of our customers are looking forward to this functionality.

I don’t use it, but as a partner of Fortinet, I implement it at customers’ sites. Our customers have been using it for about two years.

One of our customers recently experienced a stability problem. The customer has two FortiWeb appliances in an HA cluster (A-P). Something happened and both FortiWeb units became MASTER. Only a reboot of one of the units helped them. We opened a ticket.

I have not encountered any scalability issues.

Sometimes technical support is very slow, but sometimes they work very fast. So I will rate it 5/10.

I did not previously use a different solution.

Initial setup is not very complex. But if we have problems with configuration, we ask support.

We always recommend the full bundle, but sometimes we offer a budget-conscious solution for the customer.

Before choosing this product, I did not evaluate other options.

Look at the PRICE and the PERFORMANCE.

The bandwidth limitation and restriction feature is most reliable and useful, working as expected and hasn’t had any crash or excessive load issues.

Using the interface to set bandwidth limitations and restrictions at the individual IP, group IP, and total IP levels is really useful for allocating dedicated bandwidth for senior users, reducing it for public users, etc.

This product allows our organization to manage each user’s bandwidth limitation for internet service and overall.

The user interface and update/support is not quite user-friendly.

Obviously nowadays these are just normal features, but we are looking for QoS, application visibility, web filtering and mostly threat detection/malware protection/IPS for security side/etc.

We have been using it for five years.

We have not encountered any stability issues. Not at all. We have placed it in our data center, and the equipment’s hardware stability is quite good. The equipment works fine when there is a power outage and comes back. Never had a hardware issue.

We knew the equipment’s scalability and feature range, so it is fair.

There were a few issues with technical support when we tried to extend contract/support.

We used Microsoft ISA software firewall, and we encountered hardware and software failures a lot. We decided to change to a hardware solution because of many power outages.

Initial setup was straightforward and easy to manage.

Pricing is bit high but fair for a hardware unit. However, licensing and benefits for my country and region is not good.

It is an easy-to-manage, great product for a small office.

• Firewall policy

• Internet
• Servers

I have used it for a year and a half.

We had one stability issue when I ran it once with Wireshark; it froze.

I have not encountered any scalability issues.

I cannot rate technical support because I have not used it yet.

I switched from SonicWALL to Fortinet. I am happier now.

Initial setup was not that difficult. It was different to my previous solution; I could do it on my own.

Before choosing this product, I did not evaluate other options.

• Be aware of logs.
• Does not compare with Check Point about finding policies.

The most valuable features of the product are its IPS and VPN server.

The device is very handy and it helps us to protect our web and database servers from being penetrated from outside the office.

The antivirus and the IPS can be improved in the future.

I have used it for about two years.

Fortunately, we have not yet encountered any stability issues!

With the 600-C model, we had some scalability issues.

I did not previously use a different solution.

Initial setup was very straightforward and simple.

These devices, especially the 1500-D model, are really worth purchasing and using.

Before choosing this product, we evaluated many products such as Cisco, Juniper, Cyberoam, and Sophos.

In my opinion, the FortiGate appliances, and especially the D series, are really powerful ones and worth providing for your network.

• UTM
• Ease of use
• Built-in server load balancing
• VPN
• Next-gen firewall features

It provides good security visibility.

A BYOD feature is missing; this could be a good add-on.

I have used it for about 18 months.

I did not really encounter any stability issues; it performs well.

I have not encountered any scalability issues in 18 months.

Technical support is average; it could improve.

We previously used Cisco PIX and ASA. We switched because there is no next-gen firewall in the Cisco portfolio.

Initial setup was straightforward.

Pricing is competitive. Licensing could get expensive as we add feature sets.

Before choosing this product, we evaluated Palo Alto, SonicWALL and Juniper.

It is a good option, keeping in mind pricing and features.

• Routing
• Web filtering
• Wi-Fi control

It’s an all-in-one solution that lowers the cost of having multiple solutions. It gave us more Wi-Fi control capability.

- Logging

We have been using this model for one year. We previously implemented earlier models for six years.

We have encountered very few stability problems. In six years, we had one device that need to be shipped back to Fortinet. We had HA set up at that location, so there was no down time.

We did not have a problem upgrading their firmware updates.

Yes and no; you have to size it right before buying. The hardware on some models is not expandable, but you can easily turn software add-ons on and off.

I’ll give them an 8/10 for technical support.

We had a Cisco router and a Barracuda. We switched from that to a FortiGatefirewall and the Cisco Router. Finally, when the Cisco router was going bad, we replaced it with a FortiGate 100 for firewall and routing capability.

Initial setup complexity depends on the network. The admin console is easy to use.

They have options for their licensing. Look at what you are going to use it for and purchase that way.

Before choosing this product, we did not evaluate other options. We had one of the smaller firewalls, and we upgraded to one of their bigger ones.

Look at sizing. And if you are a 24/7/365 shop, get two for HA.

• Security profiles with application control & web filtering. You can filter which applications are allowed or blocked inside your network, according to the port they are using. Web filtering - which can be applied to Skype for example, prevent botnets, and P2P - also is very helpful when you want to control what is allowed inside the network.
• QoS. You can set QoS according to application priority.
• Antivirus from end to end
• Remote and site-to-site VPN

We have minimized our expenses for internet security/antivirus in host-side products such as FortiClient installation, which has antimalware/web security/antivirus and protects the host from vulnerabilities while connected to the server.

I would like to see support for throughput up to 10 gbps and WAN support. Depending on your device’s design, I’d like to see throughput support up to 2 mbps for SSL, 3 mbps for IPS, and 1.5 mbps for applications. This might already be offered with newer versions.

I haven't used the latest release of device. From my current device perspective, reporting is good, but I want to see, in the future releases if they haven't done yet, is the total traffic alert (highest peak) that could receive on mobile or email. This is very helpful if you could set in required interval to monitor the total traffic that could feel the traffic in your hands.

I have used it for five years.

No issues encountered.

No issues encountered.

I rate the level of technical support 9/10.

It was straightforward for minimal configuration and requirements, CLI for complex configuration.

Pricing and licensing is good and it depends on what the business solution requires.

FortiNet shows me the health of the entire network. Evaluate how you would use FortiNet UTM. Look for the solution which fits your business infrastructure requirements such as VPNs, firewalls, application and web filtering, throughput, and most of all, which device which gives you the best performance.

• Firewall
• Load balancing

It makes our web site system work nice and smooth.

The UI is a little complicated for new users.

I have been using it for over a year.

I have not yet encountered any stability issues.

I have not yet encountered any scalability issues.

I have even contacted technical support once.

My web site used MS NLB service for load balancing and IPS firewall at first, but when our site's connection grew bigger, we discovered that we needed another solution. We chose FortiWeb after a little research into the market.

Initial setup was straightforward.

The pricing is a little high.