Fortinet FortiWeb Reviews

I am more on the design side. The use case depends on what a customer requires in terms of web protection. We mostly use it for reverse proxy and load balancing.

The ability to configure multiple policies for different requirements is a strong feature of Fortinet FortiWeb.

They can introduce a scaled-down version for the SMB market. It would be very competitive in the environment.

I have been using Fortinet FortiWeb for two or three years.

It is stable. You obviously need to assign and write configurations correctly.

It is scalable.

Every response from Fortinet is quite good and according to their SLAs.

I don't get involved in implementation and installation.

It is not a cheap product. It is not like a Linux or a Genex that you can deploy. It is a hardware appliance, and it is built for a specific reason and reliability.

It is an enterprise-class solution. You wouldn't find an SMB investing in something like this.

I would recommend this solution to others if they can afford it. We plan to continue using this solution. It is a good solution, and the customers are quite happy using it. 

I would rate Fortinet FortiWeb a nine out of ten.

The primary use case of this solution is to protect web applications, and stop attacks.

The most valuable feature of this solution is Fail-Open.

Troubleshooting features could be incorporated with this solution.

The reporting could be optimized.

I have been using this solution for three years.

We are using the latest version.

The stability is okay, sometimes. It could be more stable.

In terms of scalability, I have faced some challenges.

We have 50 users in our organization.

Technical support is good.

Previously, I did not use another solution.

The initial setup was straightforward.

It takes less time to deploy compared with other competitors.

One person is enough to maintain this solution.

We did not use an integrator or reseller. I completed the deployment and implementation.

I would recommend this solution to others who are interested in using it.

I plan to continue with my usage of this solution in the future. It's a good product, but if they could better the stability, it would be great.

I would rate Fortinet FortiWeb an eight out of ten.

We primarily use the solution for configuration and structuring policy.

The solution has a very simple deployment.

There are lots of great features within the product. Even though I don't personally use too many of them, it's nice to have them available.

It may be better if it were easier to create roles.

The interface could be a bit better.

Everything is pretty manual. We do need to improvise a bit. Automation might make it easier.

The pricing is a little bit high for us.

I've been using the solution for about one year.

The solution is stable. I don't recall dealing with bugs or glitches. It doesn't crash or freeze. It's pretty reliable.

The solution is scalable. We always check our information before we hit any limitations. I just need to assess my servers and the amount of traffic. I believe it to be scalable enough.

We have about five users on the solution currently. They're engineers. We have one box. Many users just need one box. If you want a firewall, or you want various applications on a firewall, you need another box.

We don't have direct experience with their technical support team. If we need technical support, we get it from the distributor. If we do reach out to them, it's typically for diagnostics. So far, we've been satisfied with the level of support we've received.

The initial setup isn't too complex. It's pretty straightforward. The product has a model deployment. You just need one port. After that, access is simple.

The deployment and installation took about one day. It is pretty fast because the setup is pretty easy to execute on.

For deployment, you just need two people. You don't need a bunch of staff to handle it.

We're an integrator. We just appraise the distributor behind us in order to help us in the deployment. It's a really simple deployment though. An organization most likely wouldn't need assistance. A solution like Cisco may require assistance as there would need to be adjustments done on it. It's a bit more complex.

The solution can be a bit expensive. It's not a product line. We use other devices as well as it's not a one-stop-shop. If you need a firewall, for example, you need to buy another product, like Fortinet. FortiWeb doesn't cover things like firewalls. 

The license itself is also quite expensive.

We're using the latest version of the solution.

Usually, for our security programs, I'm using on-prem. For now, in my experience, the typical Indonesian customer is using on-prem, as they worry about using the cloud, as the data cannot be stored in HR and it's actually often stored in another country. 

It's my understanding that we'll continue to use the solution for a while to come.

Overall, I would recommend the product. On a scale from one to ten, I'd rate it at an eight. If it had a better interface and/or better pricing, I might rate it a bit higher.

It is a stable product. 

Fortinet WAF came out recently, and there is not much feedback about customer experience. For each project, customers ask about the scenarios and references of the customers who have implemented this solution, which we don't have. They need to simplify the customer experience and provide more information so that we can propose Fortinet Fortiweb as a WAF solution to customers and convince them.

They need to improve their service and training. We need good training to implement and use it properly and know more about it. We still don't know much about Fortinet WAF. We didn't get any proper training sessions. Other vendors like Cisco, Palo Alto, Check Point, and Barracuda provide such sessions. Whenever we receive a request from a customer for this solution, we just give the price. We don't propose this solution because we don't know much about it. We propose whatever we are familiar with and what is supported.

We have been using Fortinet FortiWeb for four years. 

Its stability is fine wherever we have implemented it.

Its support is a bit difficult to get. They need to improve the service. 

It is straightforward, but we still need good training.

It is fine now. We had to earlier negotiate the price.

We are a solution provider and system integrator company. We work for DCC countries. We deal with Fortinet, Meraki, Sophos, Check Point, Barracuda, and Juniper SRX solutions.

Fortinet FortiWeb is comparable to Barracuda. We don't have many customers for Fortinet WAF, and we couldn't get that much good feedback. We mostly use Barracuda WAF. We use it even in the cloud environment. 

Fortinet is fine on the firewall side. We haven't sold many Barracuda firewalls, but for WAF, we mostly use Barracuda. We prefer Barracuda because they provide good training, and they always follow up. Customers also prefer Barracuda or any other WAF service. Customers receive good support from Barracuda. Fortinet WAF is rare. 

I would recommend this product only based on customer requirements. At the end of the day, how you install, configure, and meet customer requirements are more valuable. I never place a product ahead of a customer. Fortinet WAF might not be suitable for certain customers. Similarly, Barracuda WAF might not be suitable for certain customers. I always get customer requirements and then supply the product according to their requirements.

I would rate Fortinet Fortiweb a five out of ten. It is neither good nor bad.

The primary use case of this solution is for security, on the periphery for the VPN.

It is easy to install and to maintain.

We are considering an upgrade to our firewall because our current version is not compatible with our FortiAnalyzer. As there is an incompatibility, we have been advised by Fortinet that an upgrade is necessary to avoid issues.

We believe this product will become obsolete.

It needs to better integrate with other platforms.

In terms of performance, it needs to be more robust. During the lockdown, we are connecting to a VPN and the connection should be faster, there should be RAM or more hardware. Also, it should include security features.

I have been using Fortinet FortiWeb for two years.

This solution is stable and w have had no issues with its stability.

It's a scalable product and we have plans to use it in the future.

We have approximately 1000 users in our organization.

We are satisfied with technical support, we have not had any issues.

The initial setup was straightforward, it was easy.

There were no issues and it was deployed in six months.

We have a team of 20 providing the IT infrastructure, including switching, firewalls, and maintenance.

We have been using Fortinet for four years and internally we are using Cisco.

We would certainly recommend this product.

I would rate this solution a nine out of ten.

We are a product reseller and this is one of the solutions that we provide for our customers. At this point, we have only implemented it for one customer.

The GUI is user-friendly.

It is easy to configure compared to solutions by other vendors, such as F5.

The integration with other products should be improved.

This product does not come with bare metal protection, so we need more network features. We don't want to be as dependent on a separate next-generation firewall.

The pricing could be made more competitive.

So far, the stability has been okay.

We have not had a problem with scalability but we have only deployed it for one project.

The technical support is very good and they are fast to respond.

I have also worked with similar solutions by F5 and Barracuda. FortiWeb is easier to configure because the F5 product requires more technical knowledge. The Barracuda solution has the advantage that DDoS support is built-in and there is no need to integrate with other products.

The initial setup is straightforward, although integration is more difficult. For example, if you want to have DDoS attack support then you need to integrate with the firewall. With the solution from Barracuda, the DDoS capability is already included.

FortiWeb is more expensive than some competing products.

We have a lot of requests for Barracuda solutions from our customers. One of the reasons for this is that the pricing is cheaper by quite a lot.

While I have not done comprehensive testing with FortiWeb, I have no complaints so far.

My advice for anybody who is considering this product is that if they are not very advanced in terms of technical training, this product is a good choice because it is very simple to implement.

I would rate this solution an eight out of ten.

We use it mostly to secure our web platform for things like Internet banking, email, and SMTP. It is for anything that is external coming into our internal network.

We were having a lot of probe attacks coming through from our external networks. Now, the traffic has to come through our firewall, then FortiWeb. Basically, FortiWeb acts like a second firewall for all our applications.

We have been using all the features and everything is nice. 

I have recently been looking at the SSL certificate features and the learning mode of the appliance. This appliance learns from the pattern of SSL attacks. 

We would like the interface to be easier to use and more user-friendly. The interface needs to be enhanced. 

We had trouble understanding it at first, but we got used to using it after six months. Then, it was simple to use.

We have been using it for five years (since 2015). 

We haven't had any issues with it so far. 

The scalability is okay. There hasn't been a need to upgrade. We have found something that can adapt to our environment and that we can use for a long period of time.

We plan to use the product for the next two years. There are no major upgrades planned anytime soon.

There are four users for the product (with two being from the security team).

We have needed minimal support for the solution. The support has been okay.

We did not have a solution that we previously used.

It is complex to set up in learning mode. It takes a lot of time to learn the pattern of the web application before we put in the rule. The rule itself is a bit complex. We had to go by trial and error because there is nothing standard on the device.

The deployment took almost six hours to get up and running.

We used a reseller. They helped us implement the device. 

The reseller also does deployment and maintenance. For this, it takes about two of their staff and one or two of our staff internally. The staff will generally have experience in networking and firewalls with a background in security and port mapping.

All our Fortinet pricing is bundled together for different products, like FortiGate, FortiAnalyzer, and FortiWeb. FortiWeb, by itself, is probably around $2,500 to $3,500.

Since we were using FortiGate firewall, we decided to look at FortiWeb. We also looked into several solutions, like Check Point and Palo Alto.

The type of product you get depends on what you want to protect, how you want to protect it, and how many people will be accessing FortiWeb.

What we have now is working fine.

I would rate FortiWeb as an eight (out of 10).

Our primary use case is to protect an integral application against vulnerabilities. It's a WAF. It protects against vulnerabilities. We have run tests against it. We also use it for two-factor authentication before authorizing anybody to access the critical application.

We required security to access critical applications. We otherwise would not have been able to use the end notifications. We wanted to use the application and it's critical to us, Fortiweb enabled us to have that ability. 

We are able to have an application layer different from the application itself that is protected by the FortiWeb Portal authentication feature. 

Describing security rules should be improved. It's tricky to define new feature tools when you want to describe an attack pattern and want to block it. 

It's very stable. I've never had any issues. 

The scalability is quite good. It's a virtual machine so we know the exact resource so if we would have to increase it would be easily scalable. 

We have around 15 users in our company. The users are end-users and technicians. 

Fortinet support is very good. 

The initial setup was quite straightforward. The GUI is user-friendly and it's easy to understand how to manage it. We used an expert to finalize the last 10% of the configuration because we wanted specific settings regarding the security. We knew what we wanted to block and we needed an expert for the specific rules. Otherwise, 90% of the setup was done in-house. 

The deployment only took two to three days. We only needed one employee to install it. 

The costs are standard. We pay around $1,600 yearly. 

We also looked at Software CTM. It was impossible to use compared to FortiWeb. 

Be sure that the security is correctly configured and all the attack patterns are covered. Make sure to do an independent assessment of the security. 

I would rate it a nine out of ten. We are very satisfied with it. 

We have an issue when the underlying web protected generates a logout and we want the authentication portal to recognize that the application has been logged out. When the underlying application generates a logout, the portal does not recognize the logout. I would like a way for the FortiWeb portal to easily recognize the portal.