Fortinet FortiWeb Cloud WAF-as-a-Service Reviews

When discussing Fortinet FortiWeb Cloud WAF-as-a-Service, I always recommend it. Either I can recommend F5. Most users require security via SSL, so I recommend Fortinet FortiWeb Cloud WAF-as-a-Service because you can get bot security, DOS protection, signature-based technology, and certification. You will receive all Layer 7 security. That is why I recommended Fortinet FortiWeb Cloud WAF-as-a-Service.

Whatever publicly accessible applications exist, they should use the WAF solution. People in banking, marketing, and finance are only using the WAF solution. If it is a mid or small company, they do not require a WAF solution because they do not have a public platform and are not publishing that application. For enterprise level, I can recommend a WAF solution or a firewall.

Fortinet FortiWeb Cloud WAF-as-a-Service has multiple valuable aspects. The WAF solution secures whatever public domains have been published by the public platform or internal servers exposed to public users. Firewalls have limitations, which is why I suggest using a WAF solution. The firewall provides the same features but in a limited edition. When discussing the SaaS platform or Layer 7 layer of security, you will receive multiple benefits.

Firewalls have limitations with signatures, bot protection, and DOS protection. Fortinet FortiWeb Cloud WAF-as-a-Service is a dedicated WAF product that handles all DOS protection, bot protection, API security, endpoint connectivity, signature-based support, and top 10 OWASP support. Multiple features are available.

AI and ML-based technology is available in almost every tool today. When discussing troubleshooting, there are AI models that will solve your problem and provide information. AI is helpful because it will give you proper information regarding errors and troubleshooting.

Currently, I want to add that Fortinet FortiWeb Cloud WAF-as-a-Service is offering only two-factor authentication. I want them to provide SAML authentication. If it gets SAML authentication or something similar, that would be good for us.

I have started using it in 2023.

I would rate the stability as eight to nine.

Currently, I have found some issues, but otherwise it is a good product.

It is easily deployed. You need to do a next, next step. Either you can put the domain name and IP and proceed to the next step. It auto checks everything, and you need to install the certificate. That is all.

Sometimes it is difficult to connect with FortiGate teams because there are rotational shifts. Sometimes in the morning I am connected to someone, and in the evening, I do not get support from them because they start in the next stage. There are some challenges, but not significant ones.

Positive

When discussing customizable security rules in Fortinet FortiWeb Cloud WAF-as-a-Service, it is definitely helpful for finance or banking sectors because for audit purposes, whatever points will be opening from the other side, in the WAF solution, I can fix and fulfill that concern raised by the audit team.

It is expensive. Actually, it is expensive. When discussing small organizations, I would not recommend it to them. I always choose the enterprise because it is expensive.

I just recommend Fortinet FortiWeb Cloud WAF-as-a-Service because it is very expensive. In the SaaS platform, I can pay monthly, and if it is required, I can enable it. If it is not required, I can disable it.

Regarding my preference for Fortinet compared to other vendors, I should give preference to the WAF solution. My first preference is F5. My second preference is Akamai. My third preference is Imperva. My fourth preference is Fortinet FortiWeb Cloud WAF-as-a-Service.

I am speaking about the technical capabilities and not price. When discussing the WAF solution, the price will be the same or matchable. Some may be higher or lower.

When discussing real-time threat intelligence impact, there is no comparison with Palo Alto because Palo Alto is giving a lot of real-time visibility. There is no comparison between the other products.

I have not tested the automated threat detection feature. However, I will get the information from your side, and I will definitely test and update you in the next call. I would rate this review as eight out of ten.

Fortinet FortiWeb Cloud WAF-as-a-Service protects our customers' websites, including e-commerce sites, normal websites, and web applications.

I can provide a quick example of a customer website where we protect an e-commerce site, especially in Kenya where WAFs are mostly used in banks to meet the PCI DSS standard. The service blocks attacks like cross-site scripting and DDoS, as well as all website-related attacks.

Fortinet FortiWeb Cloud WAF-as-a-Service helps protect against many attacks related to web applications, including SQL injection and misconfigurations from customers that lead to vulnerabilities like denial of service and attempts to exfiltrate sensitive data, particularly for banks.

The best features of Fortinet FortiWeb Cloud WAF-as-a-Service include PCI DSS compliance, which is a key tool for enabling banks to meet standards, DDoS protection, and zero-day attack protection that safeguards applications from unknown threats. The service also provides effective threat detection for SQL injection and cross-site scripting.

Since using Fortinet FortiWeb Cloud WAF-as-a-Service, I have positively impacted my organization due to a noticeable decrease in attacks, especially cross-site injections and DDoS attacks. It has significantly helped us meet PCI DSS standards while being cost-effective.

Fortinet FortiWeb Cloud WAF-as-a-Service could be improved with better logging capabilities, as many come with less spacing, necessitating a FortiSIM for enhanced functionality.

In addition to logging, I would suggest that Fortinet FortiWeb Cloud WAF-as-a-Service enhance the reporting interface to be more intuitive and user-friendly, with greater customization options tailored to customer needs.

I have been using Fortinet FortiWeb Cloud WAF-as-a-Service for roughly less than four years.

Fortinet FortiWeb Cloud WAF-as-a-Service is definitely stable.

In my experience, Fortinet FortiWeb Cloud WAF-as-a-Service's scalability is quite good, and I would rate it at eight point five out of ten.

I have interacted with Fortinet customer support, and the experience has been lovely and straightforward, as they are easily approachable and work on issues until resolution within the SLA.

I would rate the customer support for Fortinet FortiWeb Cloud WAF-as-a-Service as nine out of ten.

Positive

Previously, I used F5, which is quite expensive and requires highly trained personnel for configuration, making Fortinet FortiWeb Cloud WAF-as-a-Service much easier to use.

My experience with the pricing, setup cost, and licensing for Fortinet FortiWeb Cloud WAF-as-a-Service is good, and it is quite affordable compared to other WAFs.

Before choosing Fortinet FortiWeb Cloud WAF-as-a-Service, I evaluated other options, primarily comparing F5 and FortiWAF, as those were the only two we used.

Fortinet FortiWeb Cloud WAF-as-a-Service meets all the basic capabilities expected of a WAF, offers numerous features, and is affordable compared to other WAFs in the market.

For others considering Fortinet FortiWeb Cloud WAF-as-a-Service, my advice is to focus on the cost-effectiveness, as it is relatively cheaper compared to other WAFs while still offering the necessary features for blocking attacks.

Fortinet has created a holistic product that integrates features including AI and API protection, with straightforward automation and articulate reporting that even less experienced engineers can use easily. There is something small or specific that could further improve Fortinet FortiWeb Cloud WAF-as-a-Service.

I give Fortinet FortiWeb Cloud WAF-as-a-Service a rating of nine out of ten.

The features I have found most valuable include that onboarding is very easy compared to on-premises solutions. For the web cloud, website onboarding is very easy. There is no need to create anything; we just need to point it to the website. Automatically, it will take all IP addresses and everything in the background.

I would describe the impact of Fortinet FortiWeb Cloud WAF-as-a-Service's real-time threat intelligence as being beneficial, since if any issues are updating, or if a website is having any vulnerabilities, we can monitor it using threat intelligence.

The customizable security rules of Fortinet FortiWeb Cloud WAF-as-a-Service help customers maintain compliance because there are predefined rules. If you want, you can utilize the predefined rule, or we can customize the existing rules based on the environment. For example, if there is an SQL Injection, we can define which signatures we need to scan and which signatures we don't want to scan in the customization column. Based on the environment and the applications, we need to fine-tune the policies.

Regarding the automated threat detection feature, I don't have enough information.

To measure the success of Fortinet FortiWeb Cloud WAF-as-a-Service's services and reporting capability, there is one drawback. We can only see the denied traffic in the cloud WAF. The allowed traffic is not showing anything.

There is room for improvement when it comes to reporting and monitoring. I would like to improve only the reporting in Fortinet FortiWeb Cloud WAF-as-a-Service because most of the features they introduced are good nowadays. They only have to improve the reporting.

I would rate the technical support by Fortinet from one to ten as a ten.

There is no room for improvement when it comes to response time or first-level support quality. Generally, if you raise a ticket, they are transferring it to the dev teams, and that may take some time. It is based on the SLA only. It is acceptable, but we are expecting some quicker responses.

Positive

The initial setup is pretty easy, and it is easier than for the on-premises solution. Onboarding is quick. If you want to onboard any new website, with on-premises Fortinet FortiWeb Cloud WAF-as-a-Service, we need to onboard it and do the settings such as what is the LAN, what is the WAN, and we need to create the virtual IPs to expose it to the internet. Here, you just need to onboard the website, add the CNAMEs that are there in the public domain, and then all the traffic is passing through the WAF.

Onboarding usually takes a quick time; we can complete it within five minutes. Only the DNS records will take one or two minutes, but we can do the onboarding quickly.

My assessment of Fortinet FortiWeb Cloud WAF-as-a-Service's AI-driven analytics is that I'm not certain enough to provide a thorough evaluation.

If any issues are there or if any vulnerabilities are found in the website, we can easily identify them in the logs.

I did benefit from the comprehensive reporting capabilities.

Regarding the pricing, I find it reasonable and competitive from what I understand, though I am not aware of all the price details. The sales team is handling the pricing. I am from the technical side.

I am dealing only with Fortinet FortiWeb Cloud WAF-as-a-Service, not any of their competitors.

I would rate this product an eight out of ten overall.

I am currently working with Fortinet FortiWeb Cloud WAF-as-a-Service. I had heard about Perception Point Advanced Email Security and recently received a call from the vendor for a demo or implementation call, but I need confirmation from the client before proceeding. Once the demo is completed, I will provide more details.

I am currently working with Fortinet FortiWeb Cloud WAF-as-a-Service. Regarding endpoint solutions, I am using Fortinet FortiWeb Cloud WAF-as-a-Service particularly for users in remote locations. The customer required this kind of solution.

Fortinet FortiWeb Cloud WAF-as-a-Service could be cloud or on-premises. The implementation is easy to manage from the cloud because remote users are easily handled and configured on the client side.

It is more efficient and very helpful to everyone regarding future updates of Fortinet FortiWeb Cloud WAF-as-a-Service. Price is a main concern because everyone seeks cheaper solutions compared to others, but security is the primary concern for everyone. I do not currently face any issues and have good experience with the product.

I utilize Fortinet FortiWeb Cloud WAF-as-a-Service's AI-driven analytics. This is very helpful for detecting solutions and informing us against threats regarding the impact of Fortinet FortiWeb Cloud WAF-as-a-Service's real-time threat intelligence on my security strategies.

I have used the automated threat detection feature. It has been effective in minimizing false positives and will be helpful for us. Some concepts will also be deployed from our end, and there is more security compared to any other product, which will be very helpful to inform others.

Data security or preventing data access is the main concern at the company side because data leakage, DLP, and all related solutions are needed from every company, so it will be very helpful in that case.

I benefit from comprehensive reporting, which will be another option that every company or every manager will require.

Concerning the price of Fortinet FortiWeb Cloud WAF-as-a-Service, it is on the higher side. The price is quite high.

I have been working with this particular product for about ten years.

I do not currently face any issues. I have good experience with the product, so I do not have any experience to provide feedback on that.

We are purchasing Fortinet FortiWeb Cloud WAF-as-a-Service from the distributor side, who have provided support and a price discount. Definitely, we compare this with purchasing directly from the company, but it is more helpful for us purchasing through the vendor.

I do not face any issues with the technical support of Fortinet, particularly when it comes to supporting Fortinet FortiWeb Cloud WAF-as-a-Service. Compared to other products, they respond very quickly, so it is fine for it.

We are purchasing Fortinet FortiWeb Cloud WAF-as-a-Service from the distributor side, who have provided support and a price discount.

The setup can be done based on complexity. Some companies have a large number of users, such as one hundred to two hundred users. It can be completed by one or two employees within a week, or it depends on the availability of the client.

One or two persons can handle it, hardly more.

It is beneficial in terms of finance to use this solution, and there are returns on investments.

We are purchasing Fortinet FortiWeb Cloud WAF-as-a-Service from the distributor side, who have provided support and a price discount.

Regarding endpoint solutions, I am using Fortinet FortiWeb Cloud WAF-as-a-Service particularly for users in remote locations. The customer required this kind of solution. My overall review rating for Fortinet FortiWeb Cloud WAF-as-a-Service is nine out of ten.

Fortinet FortiWeb Cloud WAF-as-a-Service is deployed for our organization, and we also deploy it for our customers as part of the managed services we provide, so it is being deployed and managed as a service. I work with Fortinet products, including firewalls and WAF services, which are part of what we work with.

I have been dealing with Fortinet FortiWeb Cloud WAF-as-a-Service for three years. I utilize Fortinet FortiWeb Cloud WAF-as-a-Service's AI-driven analytics, which is in the sixth generation of AI, and this is helping us protect against AI-based attacks, API-based attacks, and bot attacks. This AI analytics is helping very effectively.

I would describe the impact of Fortinet FortiWeb Cloud WAF-as-a-Service's real-time threat intelligence on our security strategies as significant. We deploy and manage it for multiple customers along with a variety of applications distributed across the globe. Both CDN-enabled and with inbuilt GSLB as part of the service, it is handling traffic and attacks effectively. We are getting regular alerts on what kind of threats are coming in and from where, and whether it is similar to a previous threat, which is helping us.

The automated threat detection feature is being handled by our SecOps team, and they have the SOAR platform integrated with it. From there, we get automation into it, along with approvals as part of our change management process and procedure. We have pre-built rules with AI-enabled rules, so if something suspicious or unwanted traffic comes in, it gets blocked. If we need to correlate through our SIEM and SOAR, then SIEM does the correlation while the SOAR handles the attack in an automated way. We are not using the inbuilt automated part but rather using it through our SecOps.

We benefit from the comprehensive reporting capabilities. We use them within the system but mainly with our SIEM, which is integrated with it. We get reports from the SIEM console based on our requirements.

What I think could be improved in the future is the inclusion of runtime application self-protection, as RASP is currently not part of the program, but it would be beneficial if that could be added into the FortiAP-S Cloud product.

I have been dealing with this tool for three years.

I worked with Algosec before, and their story is also getting diluted because most of the OEMs are coming up with their own platform story. They want to create a unified platform and unified ecosystems. The players who want to have a consolidated platform to do policy review, policy management, or misconfiguration management are facing challenges, so that is not going well.

Regarding improvements for Fortinet FortiWeb Cloud WAF-as-a-Service, the migration from a previous tool and adding a new application into the platform is quite easy. Just a record change and certificate mapping makes it simple. In terms of adapting application security for applications or migrating from one tool to another, this process is also helpful and straightforward. We have pre-built templates configured in it, which have been useful for security administrators looking for simple deployment and onboarding.

I have shifted to Fortinet now.

I have experience with Fortinet FortiWeb Cloud WAF-as-a-Service, as I worked in Pawa and also with FortiAP-S Cloud, which is Fortinet FortiWeb Cloud WAF-as-a-Service providing API protection as a service. I would rate this product an 8.5 out of 10.

Fortinet FortiWeb Cloud WAF-as-a-Service is usually used for protecting web-facing applications.

The best features of Fortinet FortiWeb Cloud WAF-as-a-Service should embody top-notch elements because the company mainly sells cybersecurity solutions. On their experience, it should be at the top of their game, as it is Fortinet and they have been in the industry for a significant number of years already. The cybersecurity signatures should always be up to date.

Regular updates are one of the aspects I appreciate about Fortinet FortiWeb Cloud WAF-as-a-Service, and it is provided by a leading brand in cybersecurity.

The impact of FortiWeb's real-time threat intelligence on overall security strategies is that anything real-time could benefit an organization, especially if you are aiming to do proactive threat detection rather than just reactive. Having that feature is really advantageous from an organization's perspective.

I benefit from the comprehensive reporting capabilities with this product, especially when presenting it to high-level stakeholders.

Regarding what could be improved in Fortinet FortiWeb Cloud WAF-as-A-Service, the adoption of AI is an area that needs attention.

The utilization of AI in Fortinet FortiWeb Cloud WAF-as-a-Service still needs to be upgraded and improved. AI in terms of managing the platform and security policies are capabilities that were lacking from the last time I used it.

In the future, I would like to see a single platform for all their solutions in Fortinet FortiWeb.

I have been familiar with this product for seven to eight years already.

Fortinet's TAC is very good nowadays for technical support.

In terms of deployment for Fortinet FortiWeb Cloud WAF-as-a-Service, it is very simple and straightforward. Comparing it to other solutions, FortiWeb does not have a steep learning curve that you need to learn before implementing the solution. There are lots of published guides online that you could refer to if you are deploying or administering it.

For deployment, it may take hours.

I have some experience with FortiWeb. I probably know about Fortinet FortiWeb Cloud WAF-as-a-Service.

Regarding Fortinet FortiWeb Cloud WAF-as-a-Service, we are actually in the business of selling cybersecurity solutions, so I had experience with FortiWeb appliance-based solutions. Related to Fortinet FortiWeb Cloud specifically, I do not have any experience implementing or administering that solution.

For Fortinet FortiWeb Cloud WAF-as-a-Service, I am not really using it, as we are in the business of selling it.

FortiWeb's customizable security rules have not helped me much with the organization, as this is more on administering FortiWeb.

It will be difficult for me to answer questions about certain aspects of this product. I have given this product an overall rating of eight out of ten.

We use Fortinet FortiWeb Cloud WAF-as-a-Service situated in front of our web-facing APIs. This includes everything that is customer-facing, business-to-business APIs, and things like that.

For us, the protection against the OWASP top ten is very valuable due to its excellent machine learning capabilities. The new features are automatically rolled out, and we can switch them on and off. Its usability is a key aspect as it is very easy to use and deploy in front of new APIs. Additional valuable features include bot management capabilities which are very effective for us.

While we find the solution to be really good overall, some improvements could be made to the alerting system, specifically around the health checks of endpoints. Enhancements to the X header forwarding capabilities would also be beneficial.

We have been working with Fortinet FortiWeb Cloud WAF-as-a-Service for about four to five years now.

The stability of the solution is excellent. We have never had any problems with it.

The scalability is excellent. It can scale quickly and is very adaptable.

Technical support is very good. I would give them a nine out of ten. Sometimes it could be faster, but generally, their support is reliable.

Positive

When we evaluated solutions, we compared Fortinet FortiWeb Cloud WAF-as-a-Service to AWS WAF and found it just as good, if not better, in terms of the features offered.

The initial setup was very simple. We had a quick project turnaround time and implemented it across around twenty APIs in the space of a week.

The price is not the cheapest, but it offers great value for money. I would rate it as an eight out of ten for pricing.

I compared Fortinet FortiWeb Cloud WAF-as-a-Service with AWS WAF during our evaluation.

I rate Fortinet FortiWeb Cloud WAF-as-a-Service a nine out of ten. I can definitely recommend it to other users. The overall product rating is a nine.

I use it for all the applications in my company that need external access. I route the traffic to FortiWeb first, and after this, I direct it to the cloud or on-premises solutions.

It is a secure tool. It is user-friendly and easy to work with. It is possible to easily find vulnerabilities with the WAF. I understand that the return is good since I haven't had any significant attacks. The vulnerabilities I found were easy to close. I think the return is good. It is a good tool.

I do not have any notes on improvement.

I have used FortiWeb for two years in the cloud, and two more years before that on the on-premises solutions.

Stability is very stable.

Scalability is good.

All the time, when I needed support, they answered quickly and helped me solve the issues. It is good support.

Neutral

I used Orca in the past and changed to Wiz in the middle of last year. These are the tools where I have a little bit of knowledge. I didn't work directly with Orca. I just supported it since I started working with CSPM while we were deactivating Orca and starting with Wiz.

The setup was easy. It was not difficult to integrate with our applications.

Internally, it was me and one more person, along with the consultant from Fortinet, handling the implementation. This process was quick.

I understand that the return is good. I haven't had any significant attacks. The vulnerabilities I found were easy to close. 

It is not too expensive. 

I use F5 more in an on-prem environment and FortiWeb in the cloud environment. Both tools are very good. I have worked with F5 for five or six years, and FortiWeb for two years. The solutions for both are similar. There's nothing to say that F5 is more secure than Fortinet. Both tools are very similar.

Overall product rating: nine out of ten.

I have used Fortinet FortiWeb for the ID protection of a large government website with substantial web traffic. We have implemented the solution on-premises.

Fortinet FortiWeb offers a variety of protections, including machine learning that helps protect web applications. It effectively mitigates web attacks, provides virtual protections, and handles large traffic with minimal processing effort. The appliance exhibits good performance and offers features that are beneficial for web security.

The usability of the interface could be improved as it is not user-friendly.

I have had experience with Fortinet solutions for about five years.

The product is very stable.

The scalability of Fortinet FortiWeb is good. It handles large traffic with minimal impact on CPU usage and maintains various protections and filters efficiently.

The technical support is really good. The technicians have extensive knowledge about their product, and the proximity of Fortinet with customers ensures quick issue resolution.

Positive

I have used Cloudflare and Imperva solutions recently for personal projects and small companies. Cloudflare is extremely user-friendly and simple to operate, while Fortinet requires a little more work.

Fortinet FortiWeb is simple to set up and not overly complex.

The product helps to mitigate web attacks effectively, providing a return with minimal investment.

Other solutions evaluated include Cloudflare and Imperva.

I recommend Fortinet FortiWeb. The appliance offers very good performance and a reasonable price. In terms of overall rating, I give the solution a nine out of ten.

Mostly, we use it for institutional and government offices, probably for security purposes.

Currently, there are no valuable features that stand out. I haven't seen any clients or ones that have contacted me about any issue.

The only thing I encountered was related to integration, mostly concerning translation. However, things are good now. I learned from my mistake when I reached out, and now, everything is fine. I have no complaints about it.

I work with the Fortinet firewall. I have been using it for more than three years now.

At times of configuration, I usually contact customer care from Fortinet directly through chat. The company provides technical support, and they are mostly available 24/7. 

Neutral

Deploying usually takes me one day to complete.

It is budget-friendly. In my opinion, Fortinet saves money and is cheaper from my perspective. It is twice cheaper.

I rate the overall solution ten out of ten.