Linux/Unix, Other 7.6.1 - 64-bit Amazon Machine Image (AMI)
External reviews are not included in the AWS star rating for the product.
I have a multi-cloud environment. I have a production workload in Nigeria, with some data centers in Continental Europe and in the East US in multiple regions.
We have two different public clouds, AWS and Azure. Because of how Fortinet works, we connect to our customers via a remote access VPN.
The fact that I can log into the platform and see everybody, see logs, authentication failure, and see everything on one platform, is the most valuable feature.
Emails can be configured, and text messages can be sent via the mobile app.
It is a cheap solution.
The user interface can be improved. Also, there are authentication failures that need improvement in the next release.
The technical support team is bad.
Neutral
I would rate the overall solution a eight out of ten due to the support and user interface issues.
We use FortiWeb Web Application Firewall for security features while working in the financial area.
The product has good integration features.
The product's integration with Cisco needs improvement.
I have been using FortiWeb Web Application Firewall for 30 years.
The platform's stability is good, with good assessment and low-level design.
FortiWeb Web Application Firewall's scalability is good.
I have used Palo Alto and Check Point before.
The product is complicated to set up. The deployment time depends on the customer. Some customers have a deployment time of six to seven months, while others have a deployment time of two months. The process involves an assessment for a month, then a low-level design for another month.
FortiWeb has a good presence because of its price.
We are integrators with all the product certifications. We have a good team. We prefer assessment and low-level design before starting with the project.
I rate FortiWeb Web Application Firewall an eight out of ten.
In my company, we use FortiWeb Web Application Firewall (WAF) for security.
FortiWeb is a small tool that can be used by those of our customers who use Fortinet FortiGate as their firewall. I will use Barracuda Email Protection for any customer who uses a firewall from a solution provider other than Fortinet FortiGate.
The product lacks features offered by enterprise-level firewall tools. The solution needs to offer more enterprise features like other brands.
It would be great if FortiWeb Web Application Firewall (WAF) had something like a wizard to allow for more integrations with other popular firewall products like Fortinet, Palo Alto, and so on.
I have been using FortiWeb Web Application Firewall (WAF) for three years. I use the solution's latest version.
Stability-wise, I rate the solution a nine out of ten.
Scalability-wise, I rate the solution an eight out of ten.
There are 2,000 users of the solution in my company.
The solution's technical support was helpful and responsive. I rate the technical support an eight out of ten.
Positive
I have previously used SonicWall.
The initial setup was easy since it was possible to get remote support for the product.
The solution is deployed on-premises.
It is a cost-effective product. If you need an extra module in the product, there will be an extra cost in addition to the licensing fee.
There are five engineers needed for the maintenance of the solution.
If there is a requirement and one is already using a firewall from Fortinet, then it is easier to deploy FortiWeb Web Application Firewall (WAF). Overall, I rate the solution an eight out of ten.
In most cases, the customer uses WAF to protect web applications.
The machine learning on FortiWeb WAF is valuable. It is useful for new customers because it provides new signatures, and machine learning, which can help provide new information to customers about their websites.
WAF needs more signatures on FortiWeb and updates the database continuously to protect against new attacks. I hope the next release includes integration with the vulnerability scanner, a great feature of FortiWeb. If customers have vulnerability scanners, they can export the scan's result and post it to FortiWeb to patch completely.
I have been working with FortiWeb WAF for four years. We are working with the latest version.
The solution is stable.
The solution is not scalable. If you are running medium-sized hardware, you must upgrade and purchase new hardware. Fortinet has an issue with scalability at this point.
I have received fantastic support.
The initial setup and config are a piece of cake. The steps followed during deployment depend on the customer since not all customers have the same deployment phases. We guide deployment depending on the customer's needs. Most of the time I have deployed FortiWeb, it took one month. We needed to boot up vulnerability and configure security controls on each website. After that, the administrator on the customer's side will continue working with FortiWeb.
Maintenance is easy because WAF has a powerful view of logs.
Fortinet has a single license, and it's easy to deploy the license and doesn't take time to retrieve it. WAF is just plug-and-play, unlike other vendors. WAF wins this point. FortiWeb WAF is priced well for customers compared to other vendors' solutions.
I also work with F5 Networks. The comparison is a little bit complicated. Depending on the customer's needs, we do not recommend deploying F5 in a small environment. F5 needs a lot of administrators and an IT department. On the other hand, Fortinet will be better in this situation. We need a few people to support WAF. Otherwise, both vendors are perfect.
If you plan to deploy FortiWeb, you must have the right device to achieve high availability. I rate FortiWeb WAF a ten out of ten.
We use FortiWeb Web Application Firewall to protect websites from injection attacks.
FortiWeb Web Application Firewall blocks attacks from application layers and provides protection.
FortiWeb Web Application Firewall's signature database updates could be improved.
I have been using FortiWeb Web Application Firewall for one year.
I rate FortiWeb Web Application Firewall an eight out of ten for stability.
I rate FortiWeb Web Application Firewall a nine out of ten for scalability. Around 10 to 12 users use the solution in our organization.
The solution’s customer support is not good.
Positive
The solution’s initial setup is easier than other products.
It takes one week to deploy FortiWeb Web Application Firewall. As part of the deployment process, we create a FortiGate interface, connect FortiWeb to our website server, create virtual web servers in FortiWeb, and write some access control rules for protection purposes.
FortiWeb Web Application Firewall's pricing is suited for small or medium organizations.
FortiWeb Web Application Firewall is deployed on-cloud in our organization.
I recommend FortiWeb Web Application Firewall to other users because it helps block many attacks that come from the web and application layers. Using the solution to protect organizations from attacks is an easy process.
Overall, I rate FortiWeb Web Application Firewall a nine out of ten.