I'm using FortiWeb as a web-based firewall.
Senior Sales Manager at Bluechip Technical Services Pvt Ltd
Affordable and stable high-end product
Pros and Cons
- "FortiWeb offers a good price for the marketplace. In the Sri Lankan market, it's hard to find high-end products that can match FortiWeb's pricing. For high-end solutions, the price is always extremely high."
- "FortiGate could be improved on the security end because we've had some incidents with the customer. Otherwise, there is no problem."
What is our primary use case?
What needs improvement?
FortiGate could be improved on the security end because we've had some incidents with the customer. Otherwise, there is no problem.
What do I think about the stability of the solution?
FortiWeb is stable.
What do I think about the scalability of the solution?
For scalability, I rate FortiWeb nine out of 10. There's a little room for improvement there.
Buyer's Guide
Fortinet FortiWeb
October 2026
Learn what your peers think about Fortinet FortiWeb. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
918,169 professionals have used our research since 2012.
How are customer service and support?
Fortinet customer support is good.
What's my experience with pricing, setup cost, and licensing?
FortiWeb offers a good price for the marketplace. In the Sri Lankan market, it's hard to find high-end products that can match FortiWeb's pricing. For high-end solutions, the price is always extremely high.
What other advice do I have?
I rate FortiWeb nine out of 10. I would recommend it.
Disclosure: My company has a business relationship with this vendor other than being a customer. reseller
Co-founder at Korunet
Excellent Fortinet family product integration, stable , and good support
Pros and Cons
- "One of the big advantages of using Fortinet FortiWeb is all the Fortinet family solutions use the same user interface and logic, which makes it easy to use, configure, manage, and understand if you have used one of their solutions before or are wanting to implement other Fortinet solutions in the future, and additionally, all Fortinet solutions can be managed with one application called FortiManager."
- "The solution could improve by providing more integration with solutions other than the Fortinet family."
What is our primary use case?
Fortinet FortiWeb can be used to protects business-critical web applications from attacks or vulnerabilities.
What is most valuable?
One of the big advantages of using Fortinet FortiWeb is all the Fortinet family solutions use the same user interface and logic. This makes it easy to use, configure, manage, and understand if you have used one of their solutions before or are wanting to implement other Fortinet solutions in the future. Additionally, all Fortinet solutions can be managed with one application called FortiManager.
What needs improvement?
The solution could improve by providing more integration with solutions other than the Fortinet family.
For how long have I used the solution?
I have been using Fortinet FortiWeb for approximately five years.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
Fortinet FortiWeb is scalable.
We have had approximately five customers using this solution.
How are customer service and support?
The technical support has been good in my experience.
How was the initial setup?
The installation of Fortinet FortiWeb is straightforward. The time it takes to do the installation depends on the environment of the customer and if there are any additional configurations needed. However, a typical basic installation takes approximately one hour.
What about the implementation team?
We use one engineer that does the maintenance of the solution.
What other advice do I have?
The solution can be deployed on-premise and on the cloud. We have been working with governments in Turkey and they tend not to trust their data on the cloud and choose on-premise deployments. However, many companies here are moving to the cloud.
I would recommend this solution to others.
I rate Fortinet FortiWeb a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Fortinet FortiWeb
October 2026
Learn what your peers think about Fortinet FortiWeb. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
918,169 professionals have used our research since 2012.
System Administrator at PT. Asuransi Jiwa InHealth Indonesia
Provides good feedback for development and is easy to scale up
Pros and Cons
- "It offers some feedback and suggestions that guide our system development while helping our vendors to update their applications and fix any issues or bugs."
- "The dashboard evaluating the performance of each application connected to the web app's firewall is quite helpful, but the tool is only available in application performance management. So I think if Fortinet could better integrate that particular feature, it would add a lot of value to the product."
What is our primary use case?
Generally, we are using it to protect our internet-facing web applications. So if there are any security vulnerabilities in our applications, the solution can provide protection.
How has it helped my organization?
It offers some feedback and suggestions that guide our system development while helping our vendors to update their applications and fix any issues or bugs.
What is most valuable?
They have a sort of table that defines the functions of certain applications, ex. which function has the slowest or fastest response. This enables our in-house development team or vendors to review our application and fix the functions if necessary.
What needs improvement?
The dashboard evaluating the performance of each application connected to the web app's firewall is quite helpful, but the tool is only available in application performance management. So I think if Fortinet could better integrate that particular feature, it would add a lot of value to the product.
For how long have I used the solution?
I have been using FortiWeb for three years.
What do I think about the stability of the solution?
I think it's quite reliable so long as it's configured.
What do I think about the scalability of the solution?
As long as we accurately scale our requirements from the start, I think the solution is quite scalable and quite easy to scale up later on.
How are customer service and technical support?
They are quite helpful. But I think because our department is quite stable and configured correctly, we are rarely using the support. Everything works perfectly.
How was the initial setup?
I think it's quite complex because we need to know how the application works.
What about the implementation team?
We are using local support to configure the solutions for us. We also purchase local maintenance and support on top of the routine product support and updates. Because it is a
very specialized product, we need a very skillful person with expertise in the product to configure the solution for us.
What's my experience with pricing, setup cost, and licensing?
In a high availability cluster configuration, where the primary FortiGate is working and the secondary is a backup, Fortinet requires us to buy two licenses instead of one whether we are actually using it or not. With other products, you only purchase one license because we only use one license per instance.
What other advice do I have?
You need to accurately calculate the requirements of your infrastructure before implementing FortiWeb or any other web application firewall. Accuracy is very critical when scaling the product or the model that will be deployed on your infrastructure.
I would rate FortiWeb an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Cyber Security Engineer at a tech services company with 201-500 employees
A competitively priced and stable solution
Pros and Cons
- "The deployment was very easy."
- "The solution is good; it has a preferable price, stability and security, all which recommend it to other users."
- "The documentation for the machine learning could be better. They do not provide proper documentation explaining how the solution works or how to configure it."
What is our primary use case?
The version we are using is not old, but neither is it up to date.
We implement FortiWeb to block incoming attacks to our network and web applications.
We use complex authentication rules and forms, in addition to the solution, for protection. We also do caching with static websites and compression.
What is most valuable?
I would say that machine learning is the most valuable upgrade from 5.8, both before and after 5.9.
What needs improvement?
The documentation for the machine learning could be better. They do not provide proper documentation explaining how the solution works or how to configure it. A good, valid KB article would be helpful.
It is difficult to configure the machine learning and get it up and running. We put in a week of learning mode and then place it in our production. The machine and data learning is a pain point. I work with different clients. The machine-learning algorithm doesn't learn all the URL patterns.
It would be nice to see certain software changes in order to add some kind of betterment with machine learning.
What do I think about the stability of the solution?
As a hardware device, the solution is very stable. This is true when compared with other web application firewalls.
What do I think about the scalability of the solution?
Hardware is not very shareable, as increasing capacity would require the use of a different one. But there is good scalability when it comes to WAF, SaaS and cloud solutions. The CPU cores and RAM memory capacity can always stand improvement.
How are customer service and technical support?
From the time a ticket is created, technical support takes a while to respond, especially when compared with Cisco. In this area it is not so great.
How was the initial setup?
The deployment was very easy. Since it concerns hardware, one only need plug in the firewall and bring it up by connecting the device. It is pretty easy and not time consuming. The deployment takes, perhaps, one hour. But, the configuration and machine learning are important.
What's my experience with pricing, setup cost, and licensing?
The license can be renewed on an annual or tri-annual basis. The price is competitive.
What other advice do I have?
The solution protects a web server with more than 1,000 users making use of the solution.
The solution is good. It has a preferable price, stability and security, all which recommend it to other users. My only issue is with the machine learning.
I rate Fortinet FortiWeb as an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Distributor
Commercial Manager at Natco Information technology
Simple to set up with good technical support and the ability to scale
Pros and Cons
- "We find that it is quite stable and reliable."
- "The product is very easy to use, quite stable and reliable, scales well, and the installation process is very simple with helpful technical support."
- "The solution could offer more integration opportunities."
What is our primary use case?
We are primarily using the solution for our security applications as well as email and internet protection.
What is most valuable?
The product is very easy to use.
We find that it is quite stable and reliable.
The solution can scale quite well.
The installation process is very simple.
The technical support on offer is helpful.
What needs improvement?
The solution could offer more integration opportunities.
For how long have I used the solution?
We started using the solution about five or so years ago. It's been a while at this point.
What do I think about the stability of the solution?
The stability has been good over the years. It does not crash or freeze. There are no bugs or glitches. The performance is reliable.
What do I think about the scalability of the solution?
The product does scale well. If a company needs to expand it, it can do so.
Some of our clients have over a hundred users. Others only have 50. the size of the setups varies.
How are customer service and technical support?
We've had a good experience with technical support. They are helpful and responsive. We're quite satisfied with the level of service they provide.
Which solution did I use previously and why did I switch?
We also currently use Cisco for some security and protection.
How was the initial setup?
We found the initial setup to be easy. It's straightforward. It's not complex or difficult at all. A company shouldn't have any issues with the setup at all.
The installation and deployment process is fast. It doesn't take more than a day.
We have two engineers on staff that can handle deployment and maintenance.
What about the implementation team?
We have a team in-house that can manage it. We don't need the assistance of outside integrators or consultants.
What's my experience with pricing, setup cost, and licensing?
We have a yearly subscription that we renew annually.
What other advice do I have?
We're using the latest version of the solution. I cannot speak to the exact version number, as I don't have it on hand.
We're a company that helps implement this product for clients.
At this time, I'd rate the product at an eight out of ten. We've largely been very satisfied with its capabilities.
I'd recommend the product to other users and companies.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Jefe de Venta Especialista de Seguridad Informatica at a tech services company with 51-200 employees
Stable and the support in Peru is good
Pros and Cons
- "FortiGate is a stable product."
- "I have a good relationship with the support teams in Peru, and we are well-supported."
- "We have had problems with deployments where we've had to contact technical support to resolve them."
What is our primary use case?
We are a solution provider and I work in the sales team. We resell the Fortinet brand, including the firewall and other solutions.
I have experience with both using and configuration of Fortinet products.
What needs improvement?
We have had problems with deployments where we've had to contact technical support to resolve them.
For how long have I used the solution?
I have been working with Fortinet FortiWeb for five or six years.
What do I think about the stability of the solution?
FortiGate is a stable product.
How are customer service and technical support?
I have a good relationship with the support teams in Peru, and we are well-supported.
We have not needed support to assist with deployment, but we have worked with them for troubleshooting problems.
Which solution did I use previously and why did I switch?
I am familiar with solutions from other vendors, but the majority of my knowledge is of Fortinet products.
How was the initial setup?
We have not had any problems with deployment.
What about the implementation team?
We have a network team that deploys this solution for different clients. We have three engineers in charge of deployment and maintenance.
What other advice do I have?
I would rate this solution a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Cyber Security Division Manager at 3SC Security Solutions Services and Consultant
Simple to use with a good user experience, and it provides complete security in a single product
Pros and Cons
- "The most valuable feature is that this product represents a whole solution, including a WAF, and even anti-defacements."
- "We have had a lot of web application attacks and this product has protected us, as once it was implemented most of our problems were solved, including a DDoS attack against the seventh layer that it successfully protected us from."
- "The initial setup in our data center was somewhat complex."
What is our primary use case?
We are using this product to protect something similar to an online banking network.
How has it helped my organization?
We have had a lot of web application attacks and this product has protected us. Once it was implemented, most of our problems were solved. For example, we had a DDoS attack against the seventh layer and it protected us.
What is most valuable?
The most valuable feature is that this product represents a whole solution, including a WAF, and even anti-defacements. It is not just a single feature.
Anti-defacement has an amazing feature whereby if something bypasses the WAF then they can rollback the website.
The user experience is very good and it is simple to use.
They have AI and machine learning capabilities, so if you are using the WAF then you don't need extra features.
What needs improvement?
The initial setup in our data center was somewhat complex.
For how long have I used the solution?
We have been using Fortinet FortiWeb since 2008.
What do I think about the stability of the solution?
FortiWeb is a stable product.
What do I think about the scalability of the solution?
We have been working with this solution for more than 12 years and it has scaled with our requirements. We upgraded a lot of hardware and applications, and things change from time to time. There is not just a single point where we changed something that tested the scalability.
How are customer service and technical support?
Technical support is amazing. We have 24x7 support and every time we have contacted them, it takes less than two hours before everything is solved. We are confident that if we have any issue then we can communicate with the vendor and they will help us to solve the problem.
How was the initial setup?
In our data center and with the complexity of it, it takes one or two days to implement and fine-tune.
What about the implementation team?
We deployed this product in-house. We started with the training and then we implemented the solution. In case we have any problem then we can communicate with the vendor.
We have three security specialists who work as a team for maintenance.
What's my experience with pricing, setup cost, and licensing?
We renew our contract and license every three years. There are no costs in addition to the standard licensing fees. There is just one cost.
Which other solutions did I evaluate?
Prior to implementing FortiWeb, we tested Barracuda, F5, Citrix, and Sophos.
What other advice do I have?
FortiWeb is a security product that I can recommend. My advice for anybody who is implementing this type of solution is not to simply believe the words of the vendors. Test the product in your environment and then you can select the best one for your needs. A lot of vendors nowadays will tell you that they are the best, but the best thing to do is test each of the products inside your network.
The roadmap that the vendor has for this product is good. They have a lot of extra features that they are developing for future releases. They have an amazing R&D team, they know the competition, and they know the market. In my department, we find that it is amazing and are not searching for additional functionality.
I would rate this solution a ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Solutions Architect at a computer software company with 5,001-10,000 employees
A reliable solution with good ability for configuring multiple policies for different requirements
Pros and Cons
- "The ability to configure multiple policies for different requirements is a strong feature of Fortinet FortiWeb."
- "I would recommend this solution to others if they can afford it."
- "They can introduce a scaled-down version for the SMB market. It would be very competitive in the environment."
What is our primary use case?
I am more on the design side. The use case depends on what a customer requires in terms of web protection. We mostly use it for reverse proxy and load balancing.
What is most valuable?
The ability to configure multiple policies for different requirements is a strong feature of Fortinet FortiWeb.
What needs improvement?
They can introduce a scaled-down version for the SMB market. It would be very competitive in the environment.
For how long have I used the solution?
I have been using Fortinet FortiWeb for two or three years.
What do I think about the stability of the solution?
It is stable. You obviously need to assign and write configurations correctly.
What do I think about the scalability of the solution?
It is scalable.
How are customer service and technical support?
Every response from Fortinet is quite good and according to their SLAs.
How was the initial setup?
I don't get involved in implementation and installation.
What's my experience with pricing, setup cost, and licensing?
It is not a cheap product. It is not like a Linux or a Genex that you can deploy. It is a hardware appliance, and it is built for a specific reason and reliability.
It is an enterprise-class solution. You wouldn't find an SMB investing in something like this.
What other advice do I have?
I would recommend this solution to others if they can afford it. We plan to continue using this solution. It is a good solution, and the customers are quite happy using it.
I would rate Fortinet FortiWeb a nine out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Senior solution architect at a comms service provider with 51-200 employees
Straightforward to set up, quick to deploy, and easy to maintain
Pros and Cons
- "The most valuable feature of this solution is Fail-Open."
- "The initial setup was straightforward, and it takes less time to deploy compared with other competitors."
- "The reporting could be optimized."
- "The stability is okay, sometimes. It could be more stable."
What is our primary use case?
The primary use case of this solution is to protect web applications, and stop attacks.
What is most valuable?
The most valuable feature of this solution is Fail-Open.
What needs improvement?
Troubleshooting features could be incorporated with this solution.
The reporting could be optimized.
For how long have I used the solution?
I have been using this solution for three years.
We are using the latest version.
What do I think about the stability of the solution?
The stability is okay, sometimes. It could be more stable.
What do I think about the scalability of the solution?
In terms of scalability, I have faced some challenges.
We have 50 users in our organization.
How are customer service and technical support?
Technical support is good.
Which solution did I use previously and why did I switch?
Previously, I did not use another solution.
How was the initial setup?
The initial setup was straightforward.
It takes less time to deploy compared with other competitors.
One person is enough to maintain this solution.
What about the implementation team?
We did not use an integrator or reseller. I completed the deployment and implementation.
What other advice do I have?
I would recommend this solution to others who are interested in using it.
I plan to continue with my usage of this solution in the future. It's a good product, but if they could better the stability, it would be great.
I would rate Fortinet FortiWeb an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
Senior Information Security Consultant at Future Telecom
Integrates very well and easy to use, configure, and manage
Pros and Cons
- "The customers are very happy with this solution because of two things. First, the IPS integration with a web application is very tightly done on Fortinet. Second, the ease of use is there. The management interface or the GUI interface is very easy to use, configure, and manage. These are the two main valuable features. It supports integration with other Fortinet products. It also integrates very well with the firewall and sandboxing technology. They already have enough integration with different technologies. They have got a complete tech intelligence view of the whole product."
- "Our customers find Fortinet FortiWeb much better than other solutions."
- "They could improve their support a little bit for faster response time."
What is our primary use case?
We have deployed a couple of projects for our customers to protect their online e-commerce systems. They have web-based applications for online ordering, for example, for online ordering from a hypermarket. It seems to be a very good solution. We have replaced the existing Barracuda devices of a customer. We deal with the latest version of Fortinet FortiWeb.
What is most valuable?
The customers are very happy with this solution because of two things. First, the IPS integration with a web application is very tightly done on Fortinet. Second, the ease of use is there. The management interface or the GUI interface is very easy to use, configure, and manage. These are the two main valuable features.
It supports integration with other Fortinet products. It also integrates very well with the firewall and sandboxing technology. They already have enough integration with different technologies. They have got a complete tech intelligence view of the whole product.
What needs improvement?
They could improve their support a little bit for faster response time.
For how long have I used the solution?
I have been using Fortinet FortiWeb for two years.
What do I think about the stability of the solution?
It is very stable.
What do I think about the scalability of the solution?
It is very scalable. The web application firewall is protecting the web servers in an organization from outside to inside. It probably has more than 1,000 users.
How are customer service and technical support?
Their technical support needs a little bit of improvement in terms of faster response time.
How was the initial setup?
The initial setup is very straightforward. It took about 30 to 40 minutes for one web application for default settings. If you want to go with complex settings, then it would probably take three to four days to understand the application backend and everything else.
What about the implementation team?
We used a system integrator. One Admin is more than enough to deploy and maintain it. It is very stable and easy to configure and deploy.
What's my experience with pricing, setup cost, and licensing?
Its subscription prices are cheaper, and it is not very expensive. From a price perspective, Fortinet is a very well-known security vendor.
Subscriptions are very simple. They have a couple of licenses on an appliance, and that's it. The cost is not that big. One license is 40K, which they give with all the products. Another one includes the subscriptions for threat prevention, IPS, sandboxing, etc, which is more than enough.
What other advice do I have?
Fortinet FortiWeb is rated as one of the top WAF devices in many of the independent research reports. Our customers find Fortinet FortiWeb much better than other solutions.
We plan to continue using this solution if an opportunity is there. It depends on the customer's requirements. If a customer is going for an online e-commerce website, we would always recommend going with Fortinet FortiWeb.
I would rate Fortinet FortiWeb an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Download our free Fortinet FortiWeb Report and get advice and tips from experienced pros
sharing their opinions.
Updated: October 2026
Product Categories
Web Application Firewall (WAF)Popular Comparisons
Cloudflare
Prisma Cloud by Palo Alto Networks
Imperva Application Security Platform
Cloudflare Web Application Firewall
NetScaler
Gigamon Deep Observability Pipeline
Akamai App and API Protector
Azure Front Door
Check Point WAF (formerly CloudGuard WAF)
HAProxy
AWS WAF
Microsoft Azure Application Gateway
F5 Advanced WAF
F5 Distributed Cloud Services
Buyer's Guide
Download our free Fortinet FortiWeb Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which lesser known firewall product has the best chance at unseating the market leaders?
- Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
- What do you recommend for a securing Web Application?
- Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
- Imperva WAF vs. Barracuda: Which One is Better?
- F5 vs. Imperva WAF?
- When should companies use SSL Inspection?
- How does a WAF help to protect against DDoS attacks?
- NGFW with URL Filtering vs Web Proxy
- What's right for me? Fortinet or Citrix?
















