The most valuable features of the product are its IPS and VPN server.
Information Security Expert at a financial services firm with 501-1,000 employees
It helps us protect our web and database servers from being penetrated from outside the office.
What is most valuable?
How has it helped my organization?
The device is very handy and it helps us to protect our web and database servers from being penetrated from outside the office.
What needs improvement?
The antivirus and the IPS can be improved in the future.
For how long have I used the solution?
I have used it for about two years.
Buyer's Guide
Fortinet FortiWeb
April 2025

Learn what your peers think about Fortinet FortiWeb. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.
849,686 professionals have used our research since 2012.
What do I think about the stability of the solution?
Fortunately, we have not yet encountered any stability issues!
What do I think about the scalability of the solution?
With the 600-C model, we had some scalability issues.
Which solution did I use previously and why did I switch?
I did not previously use a different solution.
How was the initial setup?
Initial setup was very straightforward and simple.
What's my experience with pricing, setup cost, and licensing?
These devices, especially the 1500-D model, are really worth purchasing and using.
Which other solutions did I evaluate?
Before choosing this product, we evaluated many products such as Cisco, Juniper, Cyberoam, and Sophos.
What other advice do I have?
In my opinion, the FortiGate appliances, and especially the D series, are really powerful ones and worth providing for your network.
Disclosure: I am a real user, and this review is based on my own experience and opinions.

Products Specialist at a tech services company with 51-200 employees
Useful for integrating solutions but could have more customization
Pros and Cons
- "It's easy to use and allows us to integrate solutions together."
- "The solution could have more customization."
What is our primary use case?
We use Fortinet FortiWeb for our VPN. The solution is always updated to the latest version.
The solution is deployed on-premises.
What is most valuable?
It's easy to use and allows us to integrate solutions together.
What needs improvement?
The solution could have more customization.
For how long have I used the solution?
I have used this solution for one year.
What do I think about the stability of the solution?
It's very stable.
I would rate the stability as six out of ten.
What do I think about the scalability of the solution?
It's scalable.
I would rate the scalability as seven out of ten.
How are customer service and support?
Technical support is helpful and they respond quickly. I would rate them as eight out of ten.
How was the initial setup?
I would rate the setup as five out of ten.
What about the implementation team?
Our IT department implemented the solution.
What's my experience with pricing, setup cost, and licensing?
The cost isn't expensive.
What other advice do I have?
I would rate this solution as seven out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer:
Buyer's Guide
Fortinet FortiWeb
April 2025

Learn what your peers think about Fortinet FortiWeb. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.
849,686 professionals have used our research since 2012.
Network Security Engineer at Technicom Mali
Anti-defacement feature intelligently handles complete website backup
Pros and Cons
- "Security Fabric integration. This is really a value-added feature as FortiWeb can interact with the rest of the client’s Fortinet pack to provide an intelligent security layer like (FortiSIEM for central log management and correlation, FortiGate, FortiSandbox for malware analysis, etc.)."
- "FortiWeb does not exist in a cloud-based form. Its only available for deployment as a virtual appliance on AWS and Azure IaaS platforms. Because of the trend to WAF environments, it would be good to have it as a SaaS. Also, FortiWeb would be more competitive if it combined WAF and DDoS protection."
What is our primary use case?
We are a system integrator so we propose FortiWeb to our clients who are looking to protect their public web applications like e-banking platforms, teleservice, and so on.
How has it helped my organization?
A customer said to us that before FortiWeb they regularly had to back up their whole website folder to prevent defacement and ransomware. Now, with the FortiWeb Anti-defacement feature, this process is handled more intelligently, as FortiWeb does it for them.
What is most valuable?
Security Fabric integration. This is really a value-added feature as FortiWeb can interact with the rest of the client’s Fortinet pack to provide an intelligent security layer like (FortiSIEM for central log management and correlation, FortiGate, FortiSandbox for malware analysis, etc.).
What needs improvement?
FortiWeb does not exist in a cloud-based form. Its only available for deployment as a virtual appliance on AWS and Azure IaaS platforms. Because of the trend to WAF environments, it would be good to have it as a SaaS. Also, FortiWeb would be more competitive if it combined WAF and DDoS protection.
For how long have I used the solution?
One to three years.
What other advice do I have?
I rate FortiWeb at eight out of 10 because it is good at what it does but I think it could do more, like combining DDoS protection.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Security Expert at a tech services company
Next-gen firewall and built-in server load balancing. A BYOD feature is missing.
What is most valuable?
- UTM
- Ease of use
- Built-in server load balancing
- VPN
- Next-gen firewall features
How has it helped my organization?
It provides good security visibility.
What needs improvement?
A BYOD feature is missing; this could be a good add-on.
For how long have I used the solution?
I have used it for about 18 months.
What do I think about the stability of the solution?
I did not really encounter any stability issues; it performs well.
What do I think about the scalability of the solution?
I have not encountered any scalability issues in 18 months.
How are customer service and technical support?
Technical support is average; it could improve.
Which solution did I use previously and why did I switch?
We previously used Cisco PIX and ASA. We switched because there is no next-gen firewall in the Cisco portfolio.
How was the initial setup?
Initial setup was straightforward.
What's my experience with pricing, setup cost, and licensing?
Pricing is competitive. Licensing could get expensive as we add feature sets.
Which other solutions did I evaluate?
Before choosing this product, we evaluated Palo Alto, SonicWALL and Juniper.
What other advice do I have?
It is a good option, keeping in mind pricing and features.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
IT Admin at a comms service provider with 1,001-5,000 employees
I set it up on my own. I'd like to see improvements in its internet and servers features.
What is most valuable?
- Firewall policy
What needs improvement?
- Internet
- Servers
For how long have I used the solution?
I have used it for a year and a half.
What do I think about the stability of the solution?
We had one stability issue when I ran it once with Wireshark; it froze.
What do I think about the scalability of the solution?
I have not encountered any scalability issues.
How are customer service and technical support?
I cannot rate technical support because I have not used it yet.
Which solution did I use previously and why did I switch?
How was the initial setup?
Initial setup was not that difficult. It was different to my previous solution; I could do it on my own.
Which other solutions did I evaluate?
Before choosing this product, I did not evaluate other options.
What other advice do I have?
- Be aware of logs.
- Does not compare with Check Point about finding policies.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Security Consultant at Accenture
It has provided stability to applications. The hardware is not sturdy.
What is most valuable?
Application delivery is strong.
How has it helped my organization?
It has provided stability to applications.
What needs improvement?
The hardware does not measure up. Fortinet does not have sturdy hardware.
For how long have I used the solution?
I have been using it for three years.
Which solution did I use previously and why did I switch?
My client was using it when we took over operation of the project.
What's my experience with pricing, setup cost, and licensing?
The price is not too low and it’s not too high.
Which other solutions did I evaluate?
I did not evaluate other options. This product was already implemented.
What other advice do I have?
Check the market before implementing it... because I didn’t get the chance to do so.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Jefe de Venta Especialista de Seguridad Informatica at a tech services company with 51-200 employees
Stable and the support in Peru is good
Pros and Cons
- "FortiGate is a stable product."
- "We have had problems with deployments where we've had to contact technical support to resolve them."
What is our primary use case?
We are a solution provider and I work in the sales team. We resell the Fortinet brand, including the firewall and other solutions.
I have experience with both using and configuration of Fortinet products.
What needs improvement?
We have had problems with deployments where we've had to contact technical support to resolve them.
For how long have I used the solution?
I have been working with Fortinet FortiWeb for five or six years.
What do I think about the stability of the solution?
FortiGate is a stable product.
How are customer service and technical support?
I have a good relationship with the support teams in Peru, and we are well-supported.
We have not needed support to assist with deployment, but we have worked with them for troubleshooting problems.
Which solution did I use previously and why did I switch?
I am familiar with solutions from other vendors, but the majority of my knowledge is of Fortinet products.
How was the initial setup?
We have not had any problems with deployment.
What about the implementation team?
We have a network team that deploys this solution for different clients. We have three engineers in charge of deployment and maintenance.
What other advice do I have?
I would rate this solution a ten out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.

Buyer's Guide
Download our free Fortinet FortiWeb Report and get advice and tips from experienced pros
sharing their opinions.
Updated: April 2025
Product Categories
Web Application Firewall (WAF)Popular Comparisons
Prisma Cloud by Palo Alto Networks
Microsoft Azure Application Gateway
Azure Front Door
AWS WAF
F5 Advanced WAF
NetScaler
Cloudflare Web Application Firewall
Imperva Web Application Firewall
Imperva DDoS
Akamai App and API Protector
Azure Web Application Firewall
Radware Alteon
NGINX App Protect
Barracuda Web Application Firewall
Buyer's Guide
Download our free Fortinet FortiWeb Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which lesser known firewall product has the best chance at unseating the market leaders?
- Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
- What do you recommend for a securing Web Application?
- Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
- Imperva WAF vs. Barracuda: Which One is Better?
- F5 vs. Imperva WAF?
- When should companies use SSL Inspection?
- NGFW with URL Filtering vs Web Proxy
- How does a WAF help to protect against DDoS attacks?
- What's right for me? Fortinet or Citrix?