We have been testing FortiWeb in our environment. We have it on virtual machines. We used it to block requests from some geographical locations or certain countries. It is very important for us because many attack attempts, logs, and events were generated from those geographical locations. Our country has some political difficulties in the region with other countries.
Information Security Officer at State Audit Office
Flexible, easy to learn and configure, and has almost everything that a web application firewall needs
Pros and Cons
- "It is a good product. We have just blocked everything coming from some geographical locations or certain countries, and it has been working very efficiently when I look at logs, events, and incidents generated from the system. It is generating very good analytic reports about it. This is the most valuable thing about this solution. It has load balancing and almost everything that a web application firewall needs. It is very flexible and easy to learn and configure. It can be easily learned and configured by using the information available on different channels such as YouTube."
- "When we look at the incident reports in the dashboard, they are available for a maximum duration of 24 hours. They should provide more time for the analysis and increase the duration of the availability of these reports. Currently, it gives the options for 5 minutes, 1 hour, and 24 hours. It would be excellent if there are more options for a longer time period. It may be configurable, but I don't know how to do it."
What is our primary use case?
What is most valuable?
It is a good product. We have just blocked everything coming from some geographical locations or certain countries, and it has been working very efficiently when I look at logs, events, and incidents generated from the system. It is generating very good analytic reports about it. This is the most valuable thing about this solution.
It has load balancing and almost everything that a web application firewall needs. It is very flexible and easy to learn and configure. It can be easily learned and configured by using the information available on different channels such as YouTube.
What needs improvement?
When we look at the incident reports in the dashboard, they are available for a maximum duration of 24 hours. They should provide more time for the analysis and increase the duration of the availability of these reports. Currently, it gives the options for 5 minutes, 1 hour, and 24 hours. It would be excellent if there are more options for a longer time period. It may be configurable, but I don't know how to do it.
For how long have I used the solution?
I have been using this solution for three months.
Buyer's Guide
Fortinet FortiWeb
October 2026
Learn what your peers think about Fortinet FortiWeb. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
918,169 professionals have used our research since 2012.
What do I think about the stability of the solution?
Based on what I know and see during the testing mode, it is stable. There has been no major incident. It has not stopped during this time.
What do I think about the scalability of the solution?
It is flexible and scalable. We have about 400 employees, and all of them are using this solution.
How are customer service and support?
We don't have any experience with international support. The local guys from our partner High Tech Solutions are so educated and professionals that we didn't have any need to use international support. They are doing well and are available all the time. They are always ready to help and support whether it is a working hour or not.
What about the implementation team?
We have one System Admin who works on the configuration and an InfoSec officer who looks into events, incidents, and logs and analyzes them. So, we have two people. We also have our head of the department, and we are responsible and accountable to him.
Which other solutions did I evaluate?
We have also tested other products such as Imperva and F5, and the most number of likes were for F5 and FortiWeb.
What other advice do I have?
We like the product, but we haven't yet decided to purchase it because we don't have the budget for now. We will express our preferences towards FortiWeb to our top management, and it will be decided by them. We will suggest to them that it is a good product.
I would rate Fortinet FortiWeb a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Network & Telecom Manager at a retailer with 1,001-5,000 employees
Easy to use, and the all-in-license covers all of the features
Pros and Cons
- "The most valuable feature is ease of use."
- "With FortiWeb, the all-in-one license is one of the most beneficial features."
- "I would like to see the Application Delivery Control (ADC) and Web Application Firewall (WAF) combined in one device."
What is our primary use case?
I am using FortiWeb as a web application firewall and as a load balancer for HTTP applications.
What is most valuable?
The most valuable feature is ease of use.
It has an all-in-one license, unlike F5 where you need separate licenses for the antivirus, IP reputation, denial of service attacks, etc. With FortiWeb, the all-in-one license is one of the most beneficial features.
What needs improvement?
I would like to see the Application Delivery Control (ADC) and Web Application Firewall (WAF) combined in one device. For example, if I have one device that costs $2,600 USD then it can have two licenses, where it can operate as a load balancer as well as a WAF.
For how long have I used the solution?
We have been using FortiWeb for three years.
What do I think about the stability of the solution?
This is a good solution, stability-wise.
What do I think about the scalability of the solution?
FortiWeb is a scalable product and we have about 3,000 users.
That said, we need to purchase a model with more capacity because this is a small one, and our business has expanded in the past three years.
How are customer service and technical support?
We have been in contact with technical support and we are satisfied with them.
Which solution did I use previously and why did I switch?
We did not use another similar solution before choosing FortiWeb.
How was the initial setup?
The initial setup is straightforward.
Any FortiWeb deployment needs about two weeks because when it is first implemented, in phase one, machine learning takes place. It is needed because every application needs some customization. FortiWeb needs approximately two weeks to build this profile. After that, an expert will do some fine-tuning on the profile and the appliance will start to work.
What about the implementation team?
During the deployment, we used a system integrator, but after that, we can manage it by ourselves. Our network team has seven people including one technician, one manager, and five administrators.
What's my experience with pricing, setup cost, and licensing?
There are no licensing costs.
What other advice do I have?
In summary, this is a good product and I can recommend it for others.
I would rate this solution an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Fortinet FortiWeb
October 2026
Learn what your peers think about Fortinet FortiWeb. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
918,169 professionals have used our research since 2012.
Network Security Engineer at a computer software company with 5,001-10,000 employees
User-friendly, stable and efficiently secure VMs and applications
Pros and Cons
- "We use it to secure VMs and applications. It protects against DDoS attacks. It's very user-friendly."
- "There is room for improvement in the support. The response time could be faster. Plus, they ask for a lot of information. It is not easy to get support."
What is our primary use case?
I initially deployed it for my company, but now I administrate it for a client.
What is most valuable?
We use it to secure VMs and applications in Azure. It protects against DDoS attacks.
It's very user-friendly.
What needs improvement?
There is room for improvement in the support. The response time could be faster. Plus, they ask for a lot of information. It is not easy to get support.
In future releases, I would like to see added antivirus features that provide user-based activity indicators. For example, if a user downloads a large number of files or connects frequently, the WAF could flag this activity for investigation.
For how long have I used the solution?
I have been using it for three months now.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
It is a scalable product.
How are customer service and support?
For some initial issues. It's good, but not during the first year. FortiWeb could improve response time and first-level support clarity.
How would you rate customer service and support?
Positive
What about the implementation team?
The first implementation with an expert took two hours. My solo attempt took three weeks.
What other advice do I have?
Take time to test it thoroughly. Consider buying an existing solution if needed.
Overall, I would rate the solution an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Cyber Security Engineer at Mudra Electronics limited
Has a user-friendly dashboard, but its technical support services need improvement
Pros and Cons
- "The product has a very user-friendly dashboard."
- "The product's scalability could be better."
What is our primary use case?
We use FortiWeb for protecting web applications.
What is most valuable?
The product has a very user-friendly dashboard.
What needs improvement?
The software's support services could be better compared to Sophos.
What do I think about the scalability of the solution?
The product's scalability could be better compared to Sophos.
How are customer service and support?
It is challenging to communicate with the FortiWeb's support team.
Which solution did I use previously and why did I switch?
We use Sophos as well.
How was the initial setup?
FortiWeb's configuration process is more difficult than Sophos. I rate the process a one out of ten.
What's my experience with pricing, setup cost, and licensing?
The product is expensive. I rate the pricing a ten out of ten.
What other advice do I have?
I rate FortiWeb a five out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Cyber Security Analyst at Link3 Technologies
An useer-friendly solution with easy configuration
Pros and Cons
- "The tool's HTTP traffic, website fixing, and blocking are fantastic. It is user-friendly with easy configuration."
- "FortiWeb Web Application Firewall needs to improve its performance."
What is most valuable?
The tool's HTTP traffic, website fixing, and blocking are fantastic. It is user-friendly with easy configuration.
What needs improvement?
FortiWeb Web Application Firewall needs to improve its performance.
What do I think about the scalability of the solution?
FortiWeb Web Application Firewall is scalable.
How are customer service and support?
The tool's tech support is good.
How was the initial setup?
The tool's installation is straightforward.
What's my experience with pricing, setup cost, and licensing?
FortiWeb Web Application Firewall is not expensive.
What other advice do I have?
I rate the solution an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Senior Client Manager at Warpcom
Provides efficient integration features and has good scalability
Pros and Cons
- "The platform's stability is good."
- "The product is complicated to set up."
What is our primary use case?
We use FortiWeb Web Application Firewall for security features while working in the financial area.
What is most valuable?
The product has good integration features.
What needs improvement?
The product's integration with Cisco needs improvement.
For how long have I used the solution?
I have been using FortiWeb Web Application Firewall for 30 years.
What do I think about the stability of the solution?
The platform's stability is good, with good assessment and low-level design.
What do I think about the scalability of the solution?
FortiWeb Web Application Firewall's scalability is good.
Which solution did I use previously and why did I switch?
I have used Palo Alto and Check Point before.
How was the initial setup?
The product is complicated to set up. The deployment time depends on the customer. Some customers have a deployment time of six to seven months, while others have a deployment time of two months. The process involves an assessment for a month, then a low-level design for another month.
What's my experience with pricing, setup cost, and licensing?
FortiWeb has a good presence because of its price.
What other advice do I have?
We are integrators with all the product certifications. We have a good team. We prefer assessment and low-level design before starting with the project.
I rate FortiWeb Web Application Firewall an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Information Security Engineer at R.I.S.K. Company
The solution blocks attacks from application layers and protects websites from injection attacks
Pros and Cons
- "FortiWeb Web Application Firewall blocks attacks from application layers and provides protection."
- "FortiWeb Web Application Firewall's signature database updates could be improved."
What is our primary use case?
We use FortiWeb Web Application Firewall to protect websites from injection attacks.
What is most valuable?
FortiWeb Web Application Firewall blocks attacks from application layers and provides protection.
What needs improvement?
FortiWeb Web Application Firewall's signature database updates could be improved.
For how long have I used the solution?
I have been using FortiWeb Web Application Firewall for one year.
What do I think about the stability of the solution?
I rate FortiWeb Web Application Firewall an eight out of ten for stability.
What do I think about the scalability of the solution?
I rate FortiWeb Web Application Firewall a nine out of ten for scalability. Around 10 to 12 users use the solution in our organization.
How are customer service and support?
The solution’s customer support is not good.
How would you rate customer service and support?
Positive
How was the initial setup?
The solution’s initial setup is easier than other products.
What about the implementation team?
It takes one week to deploy FortiWeb Web Application Firewall. As part of the deployment process, we create a FortiGate interface, connect FortiWeb to our website server, create virtual web servers in FortiWeb, and write some access control rules for protection purposes.
What's my experience with pricing, setup cost, and licensing?
FortiWeb Web Application Firewall's pricing is suited for small or medium organizations.
What other advice do I have?
FortiWeb Web Application Firewall is deployed on-cloud in our organization.
I recommend FortiWeb Web Application Firewall to other users because it helps block many attacks that come from the web and application layers. Using the solution to protect organizations from attacks is an easy process.
Overall, I rate FortiWeb Web Application Firewall a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer.
Network security engineer at freelancer
Great machine learning, artificial intelligence and behaviour detection
Pros and Cons
- "It helps us prevent attacks on servers."
- "There are many valuable features; it has machine learning, artificial intelligence, behaviour detection, and many other features capable of detecting web attacks."
- "The initial setup is complex."
- "The initial setup is complex and takes between three to six months."
What is our primary use case?
It helps us prevent attacks on servers, and we deploy it on-premises.
What is most valuable?
There are many valuable features. It has machine learning, artificial intelligence, behaviour detection, and many other features capable of detecting web attacks.
What needs improvement?
The initial setup could be simplified.
For how long have I used the solution?
We have been using the solution for approximately ten years.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
The solution is scalable.
How are customer service and support?
We do not have experience with customer service and support.
How was the initial setup?
The initial setup is complex and takes between three to six months.
What about the implementation team?
We implemented the solution in-house.
What's my experience with pricing, setup cost, and licensing?
Fortinet FortiWeb has some types of licenses, and the main licenses refer to updating a signature and a pattern.
Which other solutions did I evaluate?
We evaluated machine learning and the main signatures about known attack signatures.
What other advice do I have?
I rate the solution a ten out of ten, and I recommend it for every organization with web services.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
General Manager at Ip4u
Good reporting and a nice user interface but can be a bit expensive
Pros and Cons
- "It can scale well."
- "The reporting available is pretty great."
- "The upgrade process could be a bit smoother."
- "The product can be costly."
What is most valuable?
The reporting available is pretty great.
We find the configuration capabilities to be very good.
Technical support is helpful.
It's stable.
It can scale well.
I like the user interface.
What needs improvement?
It's not the most popular option. Many clients prefer instead Citrix or Proxy Blue Coat. It might be a bit difficult to configure.
The upgrade process could be a bit smoother.
Sometimes the integration doesn't work on the first or second try.
The solution is a bit expensive.
For how long have I used the solution?
We first installed the solution eight or nine years ago. We've used it for almost a decade.
What do I think about the stability of the solution?
The solution is pretty stable. I'd rate it a three out of five in terms of stability. Sometimes the upgrades don't go as smoothly as we would like.
What do I think about the scalability of the solution?
The solution is scalable. I'd rate it four out of five in terms of how easy it is to expand the product.
How are customer service and support?
I can't complain about the technical support. They are pretty good. I found them to be helpful. However, it may depend on the engineer you get on the line.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup has a moderate level of difficulty.
We only need one person to deploy and maintain the product.
It takes about a week to have the entire solution set up.
What about the implementation team?
We install the solution for our clients.
What was our ROI?
It's always difficult to measure ROI when it comes to security. It's always just a smart investment for a company.
What's my experience with pricing, setup cost, and licensing?
The product can be costly.
The licenses are paid annually. You do have several licensing choices. They don't have too much choice. However, their options are good.
What other advice do I have?
We are not an end user. We are resellers.
I'd rate the solution seven out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Network and Security Engineer at ONB
Effective vulnerability scanner, highly stable, and low maintenance
Pros and Cons
- "The valuable feature of Fortinet FortiWeb vulnerability scanner"
- "If someone wants to use the internet with an application website or any other internet application, content filtering is very useful to filter all the requests that are coming to the server so that no one can hack or harm the system."
- "Most of the deployment is done by our development team because they have some parameters that match the configuration. However, when we initially did the deployment we used a consultant company."
What is our primary use case?
We are using Fortinet FortiWeb to deliver service to our customers.
What is most valuable?
The valuable feature of Fortinet FortiWeb vulnerability scanner.
For how long have I used the solution?
I have been using Fortinet FortiWeb for approximately 14 years.
What do I think about the stability of the solution?
The Fortinet FortiWeb is very stable.
What do I think about the scalability of the solution?
We did not have any problems with the scalability of Fortinet FortiWeb.
We have the development and network teams using the solution. It is approximately seven people in total.
How are customer service and support?
I did not use the support from Fortinet FortiWeb.
How was the initial setup?
The initial setup We Fortinet FortiWeb is straightforward. The full process of the deployment took approximately two weeks to 16 days.
What about the implementation team?
Most of the deployment is done by our development team because they have some parameters that match the configuration. However, when we initially did the deployment we used a consultant company.
What's my experience with pricing, setup cost, and licensing?
The license to use Fortinet FortiWeb is approximately $14,000.
I rate the price of Fortinet FortiWeb a four out of five.
What other advice do I have?
The solution does not require a lot of maintenance.
I would recommend this solution to others. If someone wants to use the internet with an application website or any other internet application, content filtering is very useful to filter all the requests that are coming to the server so that no one can hack or harm the system.
I rate Fortinet FortiWeb a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Fortinet FortiWeb Report and get advice and tips from experienced pros
sharing their opinions.
Updated: October 2026
Product Categories
Web Application Firewall (WAF)Popular Comparisons
Cloudflare
Prisma Cloud by Palo Alto Networks
Imperva Application Security Platform
Cloudflare Web Application Firewall
NetScaler
Gigamon Deep Observability Pipeline
Akamai App and API Protector
Azure Front Door
Check Point WAF (formerly CloudGuard WAF)
HAProxy
AWS WAF
Microsoft Azure Application Gateway
F5 Advanced WAF
F5 Distributed Cloud Services
Buyer's Guide
Download our free Fortinet FortiWeb Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which lesser known firewall product has the best chance at unseating the market leaders?
- Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
- What do you recommend for a securing Web Application?
- Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
- Imperva WAF vs. Barracuda: Which One is Better?
- F5 vs. Imperva WAF?
- When should companies use SSL Inspection?
- How does a WAF help to protect against DDoS attacks?
- NGFW with URL Filtering vs Web Proxy
- What's right for me? Fortinet or Citrix?


















