The solution's most valuable feature is its security profile.
Executive Manager at a financial services firm with 1,001-5,000 employees
Has security profile but improvement is needed in ease of use
Pros and Cons
- "The solution's most valuable feature is its security profile."
- "The solution could improve its ease of use and add more advanced WAF features in future releases."
What is most valuable?
What needs improvement?
The solution could improve its ease of use and add more advanced WAF features in future releases.
For how long have I used the solution?
I have been working with the product for more than five years.
Which solution did I use previously and why did I switch?
I've worked with both F5 and Fortinet and find F5 to be much better. F5 is easier to implement, more compatible with applications, and more robust and stable. Regarding securing applications behind the WAF, F5 generally provides better security.
Buyer's Guide
Fortinet FortiWeb
June 2025

Learn what your peers think about Fortinet FortiWeb. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
856,873 professionals have used our research since 2012.
How was the initial setup?
The solution's implementation is not complex and depends on the number and complexity of customers' applications.
What's my experience with pricing, setup cost, and licensing?
Fortinet FortiWeb's pricing is reasonable. Its licensing costs are yearly.
What other advice do I have?
The product has been in the WAF business for a long time. Its maturity cannot be compared to other alternatives. Based on my experience with Fortinet FortiWeb, I'd recommend it in specific cases, especially if you have a limited budget. It can meet basic requirements. However, other vendors have better features and support. I rate the overall product a six out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Consultant at Pi DATACENTERS
Reliable with a good sandbox feature and good protection against security threats
Pros and Cons
- "The solution has a good sandbox feature."
- "It can be better with web application firewalls."
What is our primary use case?
FortiWeb is an application firewall. We deployed it as a web application firewall for our 16-plus web applications. We integrate this with Fortigate and the FortiSandbox, and all the applications we are hosting in the data center.
How has it helped my organization?
With the feat of cyber attack, the most important thing we can do is protect the web application. We can protect it from attacks like DDoS. It's helping to maintain our cyber security posture.
What is most valuable?
The most valuable product feature is the web application firewall. It still includes the inline. Its mode of operation is great. It comes with four modes of operation, reverse proxy, two transplant nodes, and WCCP. One node is there for transplant, just to have one more. Any customer, based on their network of topology and deployment type, can choose it and have an easy deployment.
The solution has a good sandbox feature.
It is stable.
What needs improvement?
It can be better with web application firewalls.
It is already close to the best in class. This product is up to the mark right now.
For how long have I used the solution?
I've used the solution for around three years.
What do I think about the stability of the solution?
This is a stable, reliable solution. There are no bugs or glitches. It doesn't crash or freeze.
What do I think about the scalability of the solution?
Capacity-wise, since there is hardware involved, it cannot scale too much. There are some technical limitations.
We have around 2,000 users right now.
We do not have plans to increase usage in the future.
Which solution did I use previously and why did I switch?
We did not previously use a different solution.
How was the initial setup?
How easy or difficult the implementation is depends on the deployment type. It is very easy if you employ reverse proxy. However, it can be a little complex depending on what you need to do.
There was a team that helped deploy the solution, however, for maintenance, you only need one network security engineer.
What about the implementation team?
We used a third party to assist us with the setup.
What was our ROI?
We have witnessed an ROI. I'd rate the level of ROI we've seen a four out of five as it helps mitigate cyber attacks.
What's my experience with pricing, setup cost, and licensing?
I'd rate the pricing at a four out of five in terms of affordability.
Which other solutions did I evaluate?
I'm exploring two or three products right now. We did not evaluate anything before choosing this product.
What other advice do I have?
I highly recommend that any web application firewall be deployed in the IT infrastructure where companies host web applications. It should be there. Whatever you choose should integrate with a third-party load balancer.
I'd rate the solution a ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Fortinet FortiWeb
June 2025

Learn what your peers think about Fortinet FortiWeb. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
856,873 professionals have used our research since 2012.
Easy to use with a nice interface and good support
Pros and Cons
- "The support is quite good."
- "Sometimes, even if you follow the documentation, it doesn't work as expected."
What is our primary use case?
We primarily view the VPN net and use the WAF as our web protection.
What is most valuable?
The interface is very straightforward and easy to use.
It's stable.
The support is quite good.
We found the initial setup pretty simple.
What needs improvement?
Sometimes, even if you follow the documentation, it doesn't work as expected.
The solution can be a bit pricey.
For how long have I used the solution?
I've used the solution for about one year, or maybe a bit more than that.
What do I think about the stability of the solution?
Sometimes it is not as stable as it could be. We've had some issues. Sometimes the loading will be disrupted for no apparent reason. It might be due to the WAF.
What do I think about the scalability of the solution?
We have not tested the scalability of the product.
We have two people working on the solution right now.
It's possible that we will scale the solution in the future. There is the potential that we will use it on another project.
How are customer service and support?
We have contacted support for reliability issues, and they have been able to resolve everything within a matter of hours. They are very quick.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We previously used F5. F5 needs a bit of a higher skill set. It takes some experience to operate.
How was the initial setup?
The implementation took about two months. It's not so hard to set everything up. It's easier than, for example, F5, to set up.
In terms of maintenance, for WAF, I need about three people to handle various tasks.
What about the implementation team?
We hired a consultant to assist us during the setup. The consultant helped my people learn the process so we could become self-sufficient.
What was our ROI?
We have not seen any ROI at this time.
What's my experience with pricing, setup cost, and licensing?
The solution is a little expensive. I'd rate it a three out of five in terms of affordability.
I cannot speak to the exact price we pay for the product.
Which other solutions did I evaluate?
We didn't really look into other options as my boss is pretty well versed in other options. However, we are always looking into comparisons.
What other advice do I have?
We are using the latest version of the solution.
I'd rate the solution an eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Presale Engineer at a computer software company with 1,001-5,000 employees
Has excellent performance, pricing, and support services
Pros and Cons
- "The support services, performance, and pricing are all valuable features. The performance is excellent."
- "The initial setup process could be improved."
What is most valuable?
The support services, performance, and pricing are all valuable features. The performance is excellent.
What needs improvement?
The initial setup process could be improved.
For how long have I used the solution?
I've been working with this solution for two years.
It is deployed both on-premises and on the cloud.
What do I think about the scalability of the solution?
In general, we have small projects, so the scalability has been fine for our clients.
As for users, we have, in general, 50 to 100 clients.
How are customer service and support?
My colleagues at the network operations center have contacted technical support. I would rate technical support at eight on a scale from one to ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We sell and work with several options, but we feel comfortable with Fortinet FortiWeb because the performance and feedback are great.
How was the initial setup?
In general, the initial setup is easy, and I would rate it at four out of five.
What about the implementation team?
I deployed it myself.
What's my experience with pricing, setup cost, and licensing?
There's only one payment for the duration of the license. On a scale from one to five, I would rate pricing at four.
I have not encountered any additional costs on my projects involving Fortinet FortiWeb.
What other advice do I have?
I sell or presell, and in general, the feedback is great. In fact, I think that Fortinet FortiWeb is number one in terms of performance.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Director of business and digital transformation at SERNIVEL3
Useful single location dashboard controls, stable, and helpful support
Pros and Cons
- "You have the ability to control everything from one single dashboard."
- "The solution could improve by being able to handle different use cases."
What is our primary use case?
We use Fortinet FortiWeb for industrial companies. We are making doing network segmentation inside the industrial park, which is quite difficult and we have to design, develop and maintain all of the different kinds of solutions. We brought Fortinet FortiWeb to protect against forbidden access and for special access for providers in the industry.
How has it helped my organization?
We do not use this solution for our organization but for clients' organizations. For example, one customer uses the solution for the protection of all their different applications. Additionally, the solution has protected the servers that are in the DMC, such as services for people in other countries that have to have access.
What is most valuable?
You have the ability to control everything from one single dashboard.
What needs improvement?
The solution could improve by being able to handle different use cases.
For how long have I used the solution?
I have used Fortinet FortiWeb within the past 12 months.
What do I think about the stability of the solution?
The stability is good.
What do I think about the scalability of the solution?
The scalability is quite good. The scalability has been good for each industry. You can integrate Fortinet FortiWeb with all kinds of products of the same vendor. This allows the ability for a lot of different functions that you don't have to have really competent staff because you do not have different vendors. You don't have to call another vendor for solving one ticket or problem. This made everything simple, it was very good.
We have approximately 2,000 people using this solution.
When our customers have acquired more industrial plants we will propose this solution for all those industrial plant customers.
How are customer service and support?
The technical support is good.
I would rate the technical support of Fortinet FortiWeb an eight out of ten.
Which solution did I use previously and why did I switch?
We previously used F5.
How was the initial setup?
The installation was straightforward and it took us approximately one month. There are a lot of services, approximately 15, and other parts to configure.
What about the implementation team?
We used consultants, technicians and, an integrator for the implementation.
We do not need more than three people to do the maintenance and support of Fortinet FortiWeb.
What was our ROI?
We have seen a return on investment. It has been decent but not the best. We choose to work with one large customer and it has been similar to an investment.
What's my experience with pricing, setup cost, and licensing?
We are on an annual license for this solution and the price is approximately €100.
Which other solutions did I evaluate?
We have evaluated a number of solutions, such as Citrix NetScaler.
What other advice do I have?
I would recommend those wanting to implement this solution to use good integrators, there are not too many people who know about this solution. I lived in Spain and there are not too many installations made, it's quite difficult to find people that know a lot about it. It's not a difficult installation and the vendor helped us a lot and is very helpful. You have professional services you can use from the vendor if you choose, but they are quite expensive for customers.
One of the biggest lessons I have learned from using Fortinet FortiWeb is Fortinet helps you a lot. They can develop something specifically for a customers' use case without any costs for them.
I rate Fortinet FortiWeb a nine out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Sales manager at Xxx
A cost-effective solution for web security but lacks stability
Pros and Cons
- "Fortinet FortiWeb is priced well."
- "The product’s stability could be improved."
What is our primary use case?
We use the solution for the office in Oracle.
What is most valuable?
Fortinet FortiWeb is priced well.
What needs improvement?
The product’s stability could be improved.
For how long have I used the solution?
I have been using Fortinet FortiWeb for one year. We are using the latest version of the solution.
What do I think about the stability of the solution?
The product’s stability is normal. I rate it six out of ten.
What do I think about the scalability of the solution?
The solution is scalable.
How was the initial setup?
The initial setup depends on technical knowledge.
What's my experience with pricing, setup cost, and licensing?
The solution is cheaper compared with other solutions. It has a yearly license.
What other advice do I have?
Overall, I rate the solution a seven out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Senior Specialist, IT Security at Ethiopia Commodity Exchange
Beneficial reports, reliable, and scalable
Pros and Cons
- "The most valuable feature of Fortinet FortiWeb is the reports and the AI-based features."
- "Fortinet FortiWeb could improve data integration."
What is most valuable?
The most valuable feature of Fortinet FortiWeb is the reports and the AI-based features.
What needs improvement?
Fortinet FortiWeb could improve data integration.
For how long have I used the solution?
I have been using Fortinet FortiWeb for approximately six months.
What do I think about the stability of the solution?
Fortinet FortiWeb is a stable solution.
What do I think about the scalability of the solution?
The Fortinet FortiWeb is scalable.
We have three administrators using the solution and more than 300 end users using it.
How are customer service and support?
The support from Fortinet FortiWeb is good, but they could improve their response time.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We did not use another solution prior to Fortinet FortiWeb.
How was the initial setup?
In the initial setup of Fortinet FortiWeb, we wanted to deploy it with WCCP mode, but we cannot do it because of the limitation with our Cisco ASA firewalls. It's difficult to integrate with FortiWeb. It is difficult to integrate Fortinet FortiWeb with other vendors other than Fortinet solutions. We cannot integrate it into our existing Cisco Firewall environment. We had to change the system to true transparent deployment mode.
What's my experience with pricing, setup cost, and licensing?
The price of Fortinet FortiWeb is expensive in our Ethiopian currency.
What other advice do I have?
I rate Fortinet FortiWeb a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Sr. Systems Engineer at Kipepeo Solutions Ltd
Integrates well, excellent support, but reference architecture could improve
Pros and Cons
- "The most valuable feature of Fortinet FortiWeb is the ease of integration and configuration."
- "Fortinet FortiWeb could improve in reference architecture for different deployment scenarios."
What is our primary use case?
Fortinet FortiWeb was used to support mobile applications.
What is most valuable?
The most valuable feature of Fortinet FortiWeb is the ease of integration and configuration.
What needs improvement?
Fortinet FortiWeb could improve in reference architecture for different deployment scenarios.
For how long have I used the solution?
I have been using Fortinet FortiWeb for approximately three years.
What do I think about the stability of the solution?
Fortinet FortiWeb is stable.
How are customer service and support?
The technical support from Fortinet FortiWeb is excellent.
Which solution did I use previously and why did I switch?
I have used many other solutions and I formally recommend NGINX. The challenge I have with NGINX is handing over the project to the end customer. The skillsets for managing NGINX as a WAF are a lot. This is what was drawing me towards F5. I wanted something that is seamless from end-to-end, for the customer.
The advantages of NGINX are that it's community-based, and you can get it anytime. Fortinet FortiWeb you have to go through a channel, there's an initial acquisition, and then the annual support which are things that we don't have to consider when we're dealing with NGINX.
How was the initial setup?
The initial setup of Fortinet FortiWeb was easy. The full implementation took approximately one week.
What's my experience with pricing, setup cost, and licensing?
The price of Fortinet FortiWeb depends from customer to customer because some customers are considering using other solutions, such as Imperva. The price of Fortinet FortiWeb sits well for the middle-sized customers that we deal with.
The price is based on our partner model, we are able to negotiate a good discount on GPR because we're also selling the firewall appliance.
What other advice do I have?
I rate Fortinet FortiWeb a seven out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer:

Buyer's Guide
Download our free Fortinet FortiWeb Report and get advice and tips from experienced pros
sharing their opinions.
Updated: June 2025
Product Categories
Web Application Firewall (WAF)Popular Comparisons
Prisma Cloud by Palo Alto Networks
Microsoft Azure Application Gateway
Azure Front Door
AWS WAF
F5 Advanced WAF
NetScaler
Cloudflare Web Application Firewall
Imperva Web Application Firewall
Imperva DDoS
Akamai App and API Protector
Azure Web Application Firewall
Radware Alteon
NGINX App Protect
Barracuda Web Application Firewall
Buyer's Guide
Download our free Fortinet FortiWeb Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which lesser known firewall product has the best chance at unseating the market leaders?
- Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
- What do you recommend for a securing Web Application?
- Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
- Imperva WAF vs. Barracuda: Which One is Better?
- F5 vs. Imperva WAF?
- When should companies use SSL Inspection?
- NGFW with URL Filtering vs Web Proxy
- How does a WAF help to protect against DDoS attacks?
- What's right for me? Fortinet or Citrix?