FortiWeb Web Application Firewall (WAF) Reviews

Name: FortiWeb Web Application Firewall (WAF)
Brand: Fortinet
Rating: 4.1 (24 reviews)

4.1 out of 5

24 reviews
91% willing to recommend

What is FortiWeb Web Application Firewall (WAF)?

FortiWeb Web Application Firewall uses machine learning to reduce false positives, detects zero-day threats, and blocks DDoS attacks. It integrates with existing security infrastructure and provides SD-WAN capabilities, offering protection for websites and mobile applications.

Get the FortiWeb Web Application Firewall (WAF) Buyer's Guide and find out what your peers are saying about FortiWeb Web Application Firewall (WAF), Prisma Cloud by Palo Alto Networks, Azure Front Door and more!

FortiWeb Web Application Firewall (WAF) is the #15 ranked solution in top Web Application Firewalls. PeerSpot users give FortiWeb Web Application Firewall (WAF) an average rating of 8.2 out of 10. FortiWeb Web Application Firewall (WAF) is most commonly compared to Prisma Cloud by Palo Alto Networks: FortiWeb Web Application Firewall (WAF) vs Prisma Cloud by Palo Alto Networks. FortiWeb Web Application Firewall (WAF) is popular among the large enterprise segment, accounting for 40% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 12% of all views.

Buyer's Guide

FortiWeb Web Application Firewall (WAF)

June 2025

Get the report

Helped 860,592 peers since 2012

Featured FortiWeb Web Application Firewall (WAF) reviews

Martin Ellmann

Chief Executive Officer at EE Solutions GmbH

The solution helps protect our company's web applications against common threats up to 99 percent. We feel very safe with the tool. Speaking about how the tool has effectively mitigated web security threats for an application, I would say that it is an application behind the web portal, so there are about a hundred or thousand people who can access a website. If it is a sensitive application, and we have to watch every access to it to make it really safe, that is the reason why we need WAF on the application. My company doesn't use AI with the tool. I recommend the product to others. I would say that others need to have it if they have a shopping website or something similar. I know it is hard to sell because we find it quite hard whenever my company tries to do so. The solution offers 100 percent integration with other Fortinet security products. The ease of policy configuration in the tool is okay. I rate the tool a nine to ten out of ten.

Read full review

Nitith Unarat

Pre-Sales at PPLUS VISION

In my experience, we put my customer's website in monitor mode, not protect mode. So, we initially set up FortiWeb in monitor mode to avoid disruptions to the customer's website. While in monitor mode, machine learning observed the web application. Once machine learning had enough data to analyze, we discussed unusual traffic patterns with the customer. FortiWeb identified potential DDoS attacks and suspicious domain activity, showcasing the value of its machine-learning capabilities.

Read full review

IgnitiusMolepo

Senior IP Network Defense at MTN

The tool secures our critical applications, especially the mobile money application, which is often targeted by attacks. The solution provides rapid protection and has proven reliable against various threats. It blocks malicious traffic, including dormant and DDoS attacks, and offers integrated Web Application Firewall features to safeguard against compromises. You can set it up for customer-facing web applications because customers don't necessarily know all the IP addresses. It uses a source-based approach where any source accessing the application is defined by its IP. When accessing the application, it checks if they are using HTTP or HTTPS and blocks them if necessary. The tool's performance and security reporting capabilities contribute positively to IT security management. Consolidating management within the solution makes it easier for IT to handle the solutions. All functionalities managed on a single box reduce the number of boxes needed for management.

Read full review

FortiWeb Web Application Firewall (WAF) mindshare

As of July 2025, the mindshare of FortiWeb Web Application Firewall (WAF) in the Web Application Firewall (WAF) category stands at 1.1%, up from 0.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Web Application Firewall (WAF)

PeerResearch reports based on FortiWeb Web Application Firewall (WAF) reviews

Type	Title	Date
Category	Web Application Firewall (WAF)	Jul 4, 2025	Download
Product	Reviews, tips, and advice from real users	Jul 4, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs AWS WAF	Jul 4, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs F5 Advanced WAF	Jul 4, 2025	Download
Comparison	FortiWeb Web Application Firewall (WAF) vs Microsoft Azure Application Gateway	Jul 4, 2025	Download

Title	Rating	Mindshare	Recommending
Prisma Cloud by Palo Alto Networks	4.2	2.0%	98%	110 interviews Add to research
Azure Front Door	4.4	4.5%	100%	15 interviews Add to research

Valuable Features

FortiWeb WAF's most valuable features include machine learning, extensive attack signature library, integrated antivirus, zero-day attack detection, and user-friendly interface. It offers logging, monitoring, threat blocking, and compliance with GDPR and KVKK standards. Users highlight effective DDoS protection, web filtering, SD-WAN capabilities, and load-balancing integration. Its SaaS model, cost-effectiveness, false positive reduction, and easy integration with existing security infrastructure are highly rated, meeting diverse customer requirements.

"I believe it is the best option on the market."
"The features of FortiWeb Web Application Firewall (WAF) that have proven most effective in protecting web applications include web filtering, DDoS protection, geo-location blocking, and blocking SQL injection attacks."
"Their support is truly exceptional when I compare it with similar large-sized companies."

Room for Improvement

FortiWeb Web Application Firewall (WAF) requires advancements in signature database updates, enterprise features, integration capabilities, user interface, and database protection. Performance, support speed, and documentation need enhancement, as does the pricing structure. Users face issues with configuration complexity, lack of significant advanced features compared to competitors, and migration difficulties. Improved analytics, scalability, and logging capabilities along with enhanced threat protection and easier integration with other systems are desired by users.

"The improvement needed is in their response time. Now it takes longer, and they talk about SLA and 48-hour response times."
"We also need configuration settings that indicate the advantages or disadvantages of enabled features."
"If some of my customers want to migrate from F5 to Fortinet Firewall, or the Fortinet WAF solution, there are some migration issues since I cannot migrate all the elements quickly using Fortinet Firewall."

ROI

Users report a 70% ROI from FortiWeb Web Application Firewall (WAF), benefiting from a 20% reduction in operational costs through bandwidth and infrastructure savings. It enhances security, reducing application downtime and using cross-site scripting. Its affordability and low false positive rates make it attractive compared to alternatives. Deploying FortiWeb WAF can save organizations 20% to 30% of resources, emphasizing its effectiveness in providing actual protection.

Pricing

FortiWeb Web Application Firewall (WAF) offers competitive pricing, particularly suited for small to medium organizations. Users find it cost-effective, although some perceive it as slightly pricey compared to other OEMs. The solution provides both standard and advanced packages, with a subscription-based licensing model and optional perpetual license. Pricing adjusts based on website protection needs, offering potential savings for multiple websites. Licensing is straightforward and easy to deploy, adding to its appeal for enterprise buyers.

"The product provides very good prices to customers. The price is set well and offers great value for money."
"The tool is really expensive."
"I rate the tool's pricing an eight out of ten."

Popular Use Cases

FortiWeb Web Application Firewall (WAF) is primarily used to secure websites and web applications against injection and malware attacks, ensuring compliance with security standards like PCI DSS. Organizations utilize it for web application protection, API security, bot mitigation, web filtering, and enhancing security across multi-cloud environments. Through features such as load balancing, anomaly input validation, and XML protection, it helps protect Internet-facing servers and internal applications, contributing to secure network infrastructure.

Service and Support

Customer service and support for FortiWeb Web Application Firewall (WAF) have mixed experiences. Some users report excellent, responsive support, rating it eight out of ten, while others face delays, especially in complex cases. Inconsistencies in service are noted, with support sometimes unresponsive, particularly in the Middle East. Comparisons highlight improvements in Fortinet support services, yet challenges remain with response times and first-level assistance clarity. Users managing support find processes manageable, with some partners assisting effectively.

Deployment

FortiWeb Web Application Firewall’s initial setup is generally straightforward and user-friendly, often requiring minimal time. Many users find deployment can be completed within days, though this can vary based on complexity and customer requirements. Availability of remote support and online training assists in mitigating challenges. While some report it as easy, others note complexity when additional features or advanced configurations are needed. Users appreciate the support provided during implementation, helping ensure successful deployment.

Scalability

FortiWeb Web Application Firewall (WAF) is generally viewed as scalable, with some users rating its scalability highly. It supports different organizational sizes, offering virtual and hardware options with high availability features. Some users have noted scalability issues, particularly with medium-sized hardware, needing upgrades. Flex licensing is a solution for licensing-related scalability challenges. While some users experience no issues with current setups, others highlight scalability improvements as necessary.

Stability

Users consistently rate FortiWeb Web Application Firewall's stability between seven and ten, indicating high stability with occasional problems. Despite updates being essential to address critical vulnerabilities like zero-day attacks, the system remains robust, allowing updates 24/7. Stability does not introduce network latency, and users appreciate its reliability. However, some report challenges, especially without FortiAnalyzer. Overall, it is considered very stable with periodic necessary updates.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our FortiWeb Web Application Firewall (WAF) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

12%

Financial Services Firm

10%

Manufacturing Company

Comms Service Provider

Government

Educational Organization

Outsourcing Company

Non Profit

Healthcare Company

Media Company

Logistics Company

Transportation Company

Recreational Facilities/Services Company

Retailer

Construction Company

Energy/Utilities Company

Hospitality Company

Legal Firm

Consumer Goods Company

Marketing Services Firm

Non Tech Company

Performing Arts

Real Estate/Law Firm

University

Insurance Company

Compare FortiWeb Web Application Firewall (WAF) with alternative products

Learn more about FortiWeb Web Application Firewall (WAF)

FortiWeb WAF secures web applications with features like machine learning-based threat detection, DDoS attack mitigation, and robust integration capabilities. Additionally, it manages HTTP traffic and offers SD-WAN functionalities. Built for GDPR compliance, it supports API protection and bot mitigation while enabling secure mobile and cloud application access. Users implement it across multi-cloud environments and in data centers offering advanced security and compliance, including PCI DSS. Despite feature-rich abilities, users seek enhanced database updates, better enterprise integration, and more accessible analytics. Improvements in support response, documentation, and scalability are desired to strengthen its robust security offering.

What are the key features of FortiWeb WAF?

Machine Learning: Reduces false positives and detects zero-day attacks.
DDoS Protection: Blocks distributed denial of service attacks.
Integration: Seamlessly fits with existing infrastructure.
GDPR Compliance: Ensures data privacy and protection standards.
SD-WAN Capabilities: Manages network distribution effectively.
Mobile and API Security: Protects applications and APIs efficiently.

What benefits and ROI can users expect?

Cost-Effectiveness: Offers a balance between features and pricing.
User-Friendly: Easy to navigate and manage deployments.
Global Deployment: Supports multi-cloud and cross-data center usage.
Security Compliance: Meets standards like PCI DSS for secure operations.
Enhanced Application Security: Provides comprehensive protection for apps.

FortiWeb WAF is widely implemented in data centers and financial industries, ensuring robust protection for web applications and sites. It supports multi-cloud environments on platforms like AWS and Azure, providing secure access while meeting compliance standards. Users benefit from enhanced application security and load balancing capabilities, making it a preferred choice in financial sectors that require VPN and SD-WAN consistency.