In most cases, the customer uses WAF to protect web applications.
Fortinet FortiWeb Web Application Firewall WAF (PAYG)
Fortinet Inc. | 7.6.1Linux/Unix, Other 7.6.1 - 64-bit Amazon Machine Image (AMI)
External reviews
External reviews are not included in the AWS star rating for the product.
A low-maintenance software with machine learning features aiding small-enterprise users
What is our primary use case?
What is most valuable?
The machine learning on FortiWeb WAF is valuable. It is useful for new customers because it provides new signatures, and machine learning, which can help provide new information to customers about their websites.
What needs improvement?
WAF needs more signatures on FortiWeb and updates the database continuously to protect against new attacks. I hope the next release includes integration with the vulnerability scanner, a great feature of FortiWeb. If customers have vulnerability scanners, they can export the scan's result and post it to FortiWeb to patch completely.
For how long have I used the solution?
I have been working with FortiWeb WAF for four years. We are working with the latest version.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
The solution is not scalable. If you are running medium-sized hardware, you must upgrade and purchase new hardware. Fortinet has an issue with scalability at this point.
How are customer service and support?
I have received fantastic support.
How was the initial setup?
The initial setup and config are a piece of cake. The steps followed during deployment depend on the customer since not all customers have the same deployment phases. We guide deployment depending on the customer's needs. Most of the time I have deployed FortiWeb, it took one month. We needed to boot up vulnerability and configure security controls on each website. After that, the administrator on the customer's side will continue working with FortiWeb.
Maintenance is easy because WAF has a powerful view of logs.
What's my experience with pricing, setup cost, and licensing?
Fortinet has a single license, and it's easy to deploy the license and doesn't take time to retrieve it. WAF is just plug-and-play, unlike other vendors. WAF wins this point. FortiWeb WAF is priced well for customers compared to other vendors' solutions.
Which other solutions did I evaluate?
I also work with F5 Networks. The comparison is a little bit complicated. Depending on the customer's needs, we do not recommend deploying F5 in a small environment. F5 needs a lot of administrators and an IT department. On the other hand, Fortinet will be better in this situation. We need a few people to support WAF. Otherwise, both vendors are perfect.
What other advice do I have?
If you plan to deploy FortiWeb, you must have the right device to achieve high availability. I rate FortiWeb WAF a ten out of ten.
FortiWeb web application firewall (WAF)
Fortiweb solutions , I found it quite easy to use and user friendly
Wonderful tool
Easy to configure, like the ML and AI auto-learning
Found it straightforward to launch and initialize. The Machine Learning and AI features saved a lot of time by allowing the WAF to "learn" my environment and start protecting it. Haven't had to touch the rules since
Good one !!
Easy to Use, Effective Security
This is pretty straightforward to deploy, and the fact that it can handle the load balancing really simplifies deployment for my relatively small website. Very easy to configure, was performing SSL offloading and hosting my website in a day