Our primary use case is protecting public facing web applications and APIs against OWASP Top 10 threats and automated attacks. Fortinet FortiWeb Cloud WAF-as-a-Service was used to protect a customer facing web application exposed to the internet. It helped detect and block malicious requests such as SQL injection and bot-driven traffic without impacting legitimate users.
Fortinet FortiWeb Cloud WAF-as-a-Service
Fortinet Inc.External reviews
4 reviews
from
External reviews are not included in the AWS star rating for the product.
Cloud security has reduced web attack incidents and protects our public applications and APIs
What is our primary use case?
What is most valuable?
The best features Fortinet FortiWeb Cloud WAF-as-a-Service offers include managed WAF rules, OWASP protection, bot mitigation, and Fortinet threat intelligence.
In day-to-day work, I use all of the features: managed WAF rules, OWASP protection, bot mitigation, and Fortinet threat intelligence. This provides a strong baseline security without requiring deep WAF expertise internally. The integration with the broader Fortinet security system is a plus regarding the features.
In terms of its impact on our organization, Fortinet FortiWeb Cloud WAF-as-a-Service has been positively protecting us from security threats and automated attacks. With this layered protection against common web and API attacks, we have noticed that the incidents and risks have been reduced to a greater extent.
What needs improvement?
Better visibility and more intuitive reporting would be helpful for Fortinet FortiWeb Cloud WAF-as-a-Service. Clearer insights from Fortinet FortiWeb Cloud WAF-as-a-Service will make it easier to demonstrate security value to our stakeholders.
For how long have I used the solution?
We have been using Fortinet FortiWeb Cloud WAF-as-a-Service for several months now.
What do I think about the stability of the solution?
Fortinet FortiWeb Cloud WAF-as-a-Service has been stable so far.
What do I think about the scalability of the solution?
Fortinet FortiWeb Cloud WAF-as-a-Service scales really well with traffic growth. Being a managed cloud service, it absorbs traffic spikes without manual intervention.
How are customer service and support?
The customer support for Fortinet FortiWeb Cloud WAF-as-a-Service is good. I would rate the customer support for Fortinet FortiWeb Cloud WAF-as-a-Service nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Previously, we relied on native cloud WAFs and basic security controls before choosing Fortinet FortiWeb Cloud WAF-as-a-Service.
What was our ROI?
I have seen a return on investment primarily through reduced security incidents and lower operational effort. We have significant reduction in the need for in-house WAF expertise and constant rule tuning that was required previously.
What's my experience with pricing, setup cost, and licensing?
In terms of pricing, setup cost, and licensing, my experience with Fortinet FortiWeb Cloud WAF-as-a-Service has been good. Pricing aligns well with enterprise-grade managed WAF offerings. While not the cheapest option, the managed nature offsets operational cost.
Which other solutions did I evaluate?
We evaluated cloud-native WAFs and other managed security services before choosing Fortinet FortiWeb Cloud WAF-as-a-Service.
What other advice do I have?
Fortinet FortiWeb Cloud WAF-as-a-Service is a good fit for organizations that want stronger WAF protection without managing the infrastructure. Fortinet FortiWeb Cloud WAF-as-a-Service provides a reliable, enterprise-grade web application protection. I would rate this review an eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Real-time threat intelligence has strengthened web protection and supports proactive reporting
What is our primary use case?
Fortinet FortiWeb Cloud WAF-as-a-Service is usually used for protecting web-facing applications.
What is most valuable?
The best features of Fortinet FortiWeb Cloud WAF-as-a-Service should embody top-notch elements because the company mainly sells cybersecurity solutions. On their experience, it should be at the top of their game, as it is Fortinet and they have been in the industry for a significant number of years already. The cybersecurity signatures should always be up to date.
Regular updates are one of the aspects I appreciate about Fortinet FortiWeb Cloud WAF-as-a-Service, and it is provided by a leading brand in cybersecurity.
The impact of FortiWeb's real-time threat intelligence on overall security strategies is that anything real-time could benefit an organization, especially if you are aiming to do proactive threat detection rather than just reactive. Having that feature is really advantageous from an organization's perspective.
I benefit from the comprehensive reporting capabilities with this product, especially when presenting it to high-level stakeholders.
What needs improvement?
Regarding what could be improved in Fortinet FortiWeb Cloud WAF-as-A-Service, the adoption of AI is an area that needs attention.
The utilization of AI in Fortinet FortiWeb Cloud WAF-as-a-Service still needs to be upgraded and improved. AI in terms of managing the platform and security policies are capabilities that were lacking from the last time I used it.
In the future, I would like to see a single platform for all their solutions in Fortinet FortiWeb.
For how long have I used the solution?
I have been familiar with this product for seven to eight years already.
How are customer service and support?
Fortinet's TAC is very good nowadays for technical support.
How would you rate customer service and support?
How was the initial setup?
In terms of deployment for Fortinet FortiWeb Cloud WAF-as-a-Service, it is very simple and straightforward. Comparing it to other solutions, FortiWeb does not have a steep learning curve that you need to learn before implementing the solution. There are lots of published guides online that you could refer to if you are deploying or administering it.
For deployment, it may take hours.
What other advice do I have?
I have some experience with FortiWeb. I probably know about Fortinet FortiWeb Cloud WAF-as-a-Service.
Regarding Fortinet FortiWeb Cloud WAF-as-a-Service, we are actually in the business of selling cybersecurity solutions, so I had experience with FortiWeb appliance-based solutions. Related to Fortinet FortiWeb Cloud specifically, I do not have any experience implementing or administering that solution.
For Fortinet FortiWeb Cloud WAF-as-a-Service, I am not really using it, as we are in the business of selling it.
FortiWeb's customizable security rules have not helped me much with the organization, as this is more on administering FortiWeb.
It will be difficult for me to answer questions about certain aspects of this product. I have given this product an overall rating of eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Protects high-risk financial and government websites from evolving threats while helping meet compliance requirements
What is our primary use case?
Fortinet FortiWeb Cloud WAF-as-a-Service protects our customers' websites, including e-commerce sites, normal websites, and web applications.
I can provide a quick example of a customer website where we protect an e-commerce site, especially in Kenya where WAFs are mostly used in banks to meet the PCI DSS standard. The service blocks attacks like cross-site scripting and DDoS, as well as all website-related attacks.
Fortinet FortiWeb Cloud WAF-as-a-Service helps protect against many attacks related to web applications, including SQL injection and misconfigurations from customers that lead to vulnerabilities like denial of service and attempts to exfiltrate sensitive data, particularly for banks.
What is most valuable?
The best features of Fortinet FortiWeb Cloud WAF-as-a-Service include PCI DSS compliance, which is a key tool for enabling banks to meet standards, DDoS protection, and zero-day attack protection that safeguards applications from unknown threats. The service also provides effective threat detection for SQL injection and cross-site scripting.
Since using Fortinet FortiWeb Cloud WAF-as-a-Service, I have positively impacted my organization due to a noticeable decrease in attacks, especially cross-site injections and DDoS attacks. It has significantly helped us meet PCI DSS standards while being cost-effective.
What needs improvement?
Fortinet FortiWeb Cloud WAF-as-a-Service could be improved with better logging capabilities, as many come with less spacing, necessitating a FortiSIM for enhanced functionality.
In addition to logging, I would suggest that Fortinet FortiWeb Cloud WAF-as-a-Service enhance the reporting interface to be more intuitive and user-friendly, with greater customization options tailored to customer needs.
For how long have I used the solution?
I have been using Fortinet FortiWeb Cloud WAF-as-a-Service for roughly less than four years.
What do I think about the stability of the solution?
Fortinet FortiWeb Cloud WAF-as-a-Service is definitely stable.
What do I think about the scalability of the solution?
In my experience, Fortinet FortiWeb Cloud WAF-as-a-Service's scalability is quite good, and I would rate it at eight point five out of ten.
How are customer service and support?
I have interacted with Fortinet customer support, and the experience has been lovely and straightforward, as they are easily approachable and work on issues until resolution within the SLA.
I would rate the customer support for Fortinet FortiWeb Cloud WAF-as-a-Service as nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Previously, I used F5, which is quite expensive and requires highly trained personnel for configuration, making Fortinet FortiWeb Cloud WAF-as-a-Service much easier to use.
What's my experience with pricing, setup cost, and licensing?
My experience with the pricing, setup cost, and licensing for Fortinet FortiWeb Cloud WAF-as-a-Service is good, and it is quite affordable compared to other WAFs.
Which other solutions did I evaluate?
Before choosing Fortinet FortiWeb Cloud WAF-as-a-Service, I evaluated other options, primarily comparing F5 and FortiWAF, as those were the only two we used.
What other advice do I have?
Fortinet FortiWeb Cloud WAF-as-a-Service meets all the basic capabilities expected of a WAF, offers numerous features, and is affordable compared to other WAFs in the market.
For others considering Fortinet FortiWeb Cloud WAF-as-a-Service, my advice is to focus on the cost-effectiveness, as it is relatively cheaper compared to other WAFs while still offering the necessary features for blocking attacks.
Fortinet has created a holistic product that integrates features including AI and API protection, with straightforward automation and articulate reporting that even less experienced engineers can use easily. There is something small or specific that could further improve Fortinet FortiWeb Cloud WAF-as-a-Service.
I give Fortinet FortiWeb Cloud WAF-as-a-Service a rating of nine out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Provides robust security with automatic feature updates and effective bot management
What is our primary use case?
We use Fortinet FortiWeb Cloud WAF-as-a-Service situated in front of our web-facing APIs. This includes everything that is customer-facing, business-to-business APIs, and things like that.
What is most valuable?
For us, the protection against the OWASP top ten is very valuable due to its excellent machine learning capabilities. The new features are automatically rolled out, and we can switch them on and off. Its usability is a key aspect as it is very easy to use and deploy in front of new APIs. Additional valuable features include bot management capabilities which are very effective for us.
What needs improvement?
While we find the solution to be really good overall, some improvements could be made to the alerting system, specifically around the health checks of endpoints. Enhancements to the X header forwarding capabilities would also be beneficial.
For how long have I used the solution?
We have been working with Fortinet FortiWeb Cloud WAF-as-a-Service for about four to five years now.
What do I think about the stability of the solution?
The stability of the solution is excellent. We have never had any problems with it.
What do I think about the scalability of the solution?
The scalability is excellent. It can scale quickly and is very adaptable.
How are customer service and support?
Technical support is very good. I would give them a nine out of ten. Sometimes it could be faster, but generally, their support is reliable.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
When we evaluated solutions, we compared Fortinet FortiWeb Cloud WAF-as-a-Service to AWS WAF and found it just as good, if not better, in terms of the features offered.
How was the initial setup?
The initial setup was very simple. We had a quick project turnaround time and implemented it across around twenty APIs in the space of a week.
What's my experience with pricing, setup cost, and licensing?
The price is not the cheapest, but it offers great value for money. I would rate it as an eight out of ten for pricing.
Which other solutions did I evaluate?
I compared Fortinet FortiWeb Cloud WAF-as-a-Service with AWS WAF during our evaluation.
What other advice do I have?
I rate Fortinet FortiWeb Cloud WAF-as-a-Service a nine out of ten. I can definitely recommend it to other users. The overall product rating is a nine.
Machine learning mitigates attacks with a straightforward setup and helpful support
What is our primary use case?
I have used Fortinet FortiWeb for the ID protection of a large government website with substantial web traffic. We have implemented the solution on-premises.
What is most valuable?
Fortinet FortiWeb offers a variety of protections, including machine learning that helps protect web applications. It effectively mitigates web attacks, provides virtual protections, and handles large traffic with minimal processing effort. The appliance exhibits good performance and offers features that are beneficial for web security.
What needs improvement?
The usability of the interface could be improved as it is not user-friendly.
For how long have I used the solution?
I have had experience with Fortinet solutions for about five years.
What do I think about the stability of the solution?
The product is very stable.
What do I think about the scalability of the solution?
The scalability of Fortinet FortiWeb is good. It handles large traffic with minimal impact on CPU usage and maintains various protections and filters efficiently.
How are customer service and support?
The technical support is really good. The technicians have extensive knowledge about their product, and the proximity of Fortinet with customers ensures quick issue resolution.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have used Cloudflare and Imperva solutions recently for personal projects and small companies. Cloudflare is extremely user-friendly and simple to operate, while Fortinet requires a little more work.
How was the initial setup?
Fortinet FortiWeb is simple to set up and not overly complex.
What was our ROI?
The product helps to mitigate web attacks effectively, providing a return with minimal investment.
Which other solutions did I evaluate?
Other solutions evaluated include Cloudflare and Imperva.
What other advice do I have?
I recommend Fortinet FortiWeb. The appliance offers very good performance and a reasonable price. In terms of overall rating, I give the solution a nine out of ten.
Efficiently identifies and addresses vulnerabilities while providing robust protection
What is our primary use case?
I use it for all the applications in my company that need external access. I route the traffic to FortiWeb first, and after this, I direct it to the cloud or on-premises solutions.
What is most valuable?
It is a secure tool. It is user-friendly and easy to work with. It is possible to easily find vulnerabilities with the WAF. I understand that the return is good since I haven't had any significant attacks. The vulnerabilities I found were easy to close. I think the return is good. It is a good tool.
What needs improvement?
I do not have any notes on improvement.
For how long have I used the solution?
I have used FortiWeb for two years in the cloud, and two more years before that on the on-premises solutions.
What do I think about the stability of the solution?
Stability is very stable.
What do I think about the scalability of the solution?
Scalability is good.
How are customer service and support?
All the time, when I needed support, they answered quickly and helped me solve the issues. It is good support.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
How was the initial setup?
The setup was easy. It was not difficult to integrate with our applications.
What about the implementation team?
Internally, it was me and one more person, along with the consultant from Fortinet, handling the implementation. This process was quick.
What was our ROI?
I understand that the return is good. I haven't had any significant attacks. The vulnerabilities I found were easy to close.
What's my experience with pricing, setup cost, and licensing?
It is not too expensive.
Which other solutions did I evaluate?
I use F5 more in an on-prem environment and FortiWeb in the cloud environment. Both tools are very good. I have worked with F5 for five or six years, and FortiWeb for two years. The solutions for both are similar. There's nothing to say that F5 is more secure than Fortinet. Both tools are very similar.
What other advice do I have?
Overall product rating: nine out of ten.
Security needs have been confidently met with seamless integration
What is our primary use case?
Mostly, we use it for institutional and government offices, probably for security purposes.
What is most valuable?
Currently, there are no valuable features that stand out. I haven't seen any clients or ones that have contacted me about any issue.
What needs improvement?
The only thing I encountered was related to integration, mostly concerning translation. However, things are good now. I learned from my mistake when I reached out, and now, everything is fine. I have no complaints about it.
For how long have I used the solution?
I work with the Fortinet firewall. I have been using it for more than three years now.
How are customer service and support?
At times of configuration, I usually contact customer care from Fortinet directly through chat. The company provides technical support, and they are mostly available 24/7.
How would you rate customer service and support?
Neutral
How was the initial setup?
Deploying usually takes me one day to complete.
What's my experience with pricing, setup cost, and licensing?
It is budget-friendly. In my opinion, Fortinet saves money and is cheaper from my perspective. It is twice cheaper.
What other advice do I have?
I rate the overall solution ten out of ten.
showing 1 - 7