Fortinet Managed Rules for AWS WAF - Malicious Bots

What do you like best about the product?

I like that Fortinet Managed Rules for AWS WAF is very intuitive and that we can manage groups and users precisely thanks to its integration with Azure AD. Additionally, we are Fortinet partners and receive dedicated discounts, which is an added advantage.

What do you dislike about the product?

nothing in particular

What problems is the product solving and how is that benefiting you?

Fortinet Managed Rules for AWS WAF helps me manage user access integrated with Azure AD, keeping us compliant with NIS2 regulations, and it's intuitive, allowing precise group and user management.

What do you like best about the product?

1.Fast to deploy — subscribe on Marketplace, attach to the existing web ACL, running same day

2.No rule writing or tuning required to get OWASP Top 10 coverage FortiGuard Labs handles signature updates, so we're not chasing new CVEs

3.Stays native to AWS — same console, CloudWatch metrics, sampled logs, Terraform workflow

4.Rule groups are separable (OWASP, SQLi/XSS, bots, API), so we only pay for what we use

5.COUNT mode let us validate against real traffic before blocking Strong coverage-to-effort ratio for a small team with no dedicated WAF engineer

What do you dislike about the product?

1.False positives on legitimate traffic (file uploads, rich-text fields, complex query strings) take trial and error to isolate

2.Documentation is lighter than Fortinet's on-prem WAF products; limited guidance on which rule group to pick for a given workload

What problems is the product solving and how is that benefiting you?

1.Gave us real OWASP Top 10 coverage without anyone writing or maintaining rule logic — we simply didn't have the headcount for that

2.FortiGuard handles signature updates, so new CVEs get covered faster than we could virtual-patch ourselves

3.Satisfies the WAF control for compliance and customer security questionnaires with something documented and defensible

What do you like best about the product?

Because it allows creating custom rules and having better control of all processes. This makes it easier to manage the platform. It is a great differentiator of the product.

What do you dislike about the product?

It allows improving performance and minimizing impact, depending on the platform being used. However, it has a significant price and the return on investment of the product, the support

What problems is the product solving and how is that benefiting you?

With AI, we can solve various problems and, thanks to its support for integrations, it facilitates the optimization of all the integrations we need to implement for what is to come.

What do you like best about the product?

I like how Fortinet Managed Rules for AWS WAF helps me manage both my internal and public domain requests. It effectively stops unauthorized access and ensures only genuine requests reach the server. I appreciate its capability to monitor my payment system and protect my entire subdomains. The setup and configuration process is very easy, and I find the log analysis feature quite useful.

What do you dislike about the product?

Nothing

What problems is the product solving and how is that benefiting you?

I use Fortinet Managed Rules for AWS WAF to manage internal and public domain requests, stop unauthorized access, and protect subdomains. It monitors my payment system effectively. The setup and configuration are also very easy, making log analysis straightforward.

What do you like best about the product?

The biggest advantage is the combination of strong security coverage and ease of management. The preconfigured rules make it much easier to protect AWS workloads against common threats such as SQL injection, XSS, and known exploits without having to build and maintain everything from scratch. The integration with AWS WAF is straightforward, and the managed updates help keep protection aligned with new threats. Overall, it saves time while providing an additional layer of security for web applications and APIs.

What do you dislike about the product?

The main downside is that the rules can sometimes require tuning to avoid false positives, especially for applications with custom traffic patterns. It would also be helpful to have more detailed documentation and clearer guidance for fine-tuning rules for specific workloads. Pricing can also become a consideration as the number of protected resources grows.

What problems is the product solving and how is that benefiting you?

Fortinet Managed Rules for AWS WAF helps us protect our web applications and APIs from common attacks without having to create and maintain WAF rules ourselves. It provides consistent security coverage against threats like SQL injection, XSS, and other known exploits while reducing the time we spend on security rule management. This lets our team focus more on application and infrastructure work while still maintaining a strong security posture.