Try our new research platform with insights from 80,000+ expert users

Barracuda Web Application Firewall vs Fortinet FortiWeb comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Barracuda Web Application F...
Ranking in Web Application Firewall (WAF)
17th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
45
Ranking in other categories
No ranking in other categories
Fortinet FortiWeb
Ranking in Web Application Firewall (WAF)
1st
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Web Application Firewall (WAF) category, the mindshare of Barracuda Web Application Firewall is 2.1%, up from 2.0% compared to the previous year. The mindshare of Fortinet FortiWeb is 8.1%, up from 7.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Market Share Distribution
ProductMarket Share (%)
Fortinet FortiWeb8.1%
Barracuda Web Application Firewall2.1%
Other89.8%
Web Application Firewall (WAF)
 

Featured Reviews

Shahzad Abid - PeerSpot reviewer
Director Information Technology at College of Physicians & Surgeons Pakistan
Has protected our legacy applications effectively but has required constant manual filtering due to false positives
I assess the effectiveness of the machine learning-driven threat detection in Barracuda Web Application Firewall as sometimes behaving abnormally, often showing me false positive attacks, so I have to fix these attacks from time to time. From a stability point of view, I would definitely rate Barracuda Web Application Firewall a seven out of ten. There is definitely some room for improvement; nothing is perfect in the world. I am not satisfied with the technical support from Barracuda. I am somewhat disappointed with the technical support that I have received so far. Whenever I generate a ticket for my problem, it goes to the Indian support team, and they all the time start with the most junior team member, consuming all my precious time. At the end, I have to close that ticket without any satisfactory solution. I have complained that they should shift my support to any other region because I don't need Indian support; they are simply pathetic and not up to mark. To improve Barracuda Web Application Firewall, customers should be given ongoing training opportunities regarding the product and its features. I am not familiar with many features that are available, only using those which are necessary for my applications. I believe Barracuda must provide clearer product information or training sessions to make it more user-friendly, as sometimes its interface can be rigid and lacking in helpful resources or user tutorials about its features. For it to get closer to a ten, I think advanced reporting is missing because, as I mentioned earlier, there are many false positive events being recorded. Often, when I analyze these attacks, they turn out to be genuine customers or users interacting with my product, but Barracuda tags them as attackers. Reducing false positives must be a priority.
HameedAhmed - PeerSpot reviewer
Joint Director at PAA
Security threats have been reduced through seamless deployment and strong integration with other tools
I have used Fortinet FortiWeb's integration features. We have easily integrated all of the applications with the product. Most of the applications we are using are in-house built. My technical team is looking after the best features. I have not used it extensively for maybe two and a half years. I have been involved in the installation, but I am not actually using the product. I work with it from time to time but not extensively. I would assess Fortinet FortiWeb's adaptive machine learning and artificial intelligence as having new patches installed regarding artificial intelligence, but when we bought it, I think the learning feature was there. Now they have installed artificial intelligence features through patches. We have a complete portfolio of Fortinet in our organization, including FortiMail, Fortinet FortiWeb, and FortiGate, along with multi-factor authentication. All of the products are from Fortinet. Fortinet tools integrate with each other and work in conjunction. I think Fortinet FortiWeb has helped us meet regulatory compliance because we are not a regulatory organization, but our sister organization is regulatory. We have regulatory compliance with the International Civil Aviation Authority, whose audit teams have checked our data center and these security products, and they are satisfied with us. The question about leveraging Fortinet FortiWeb's automated policy management does not pertain to my domain because I am not so technical, but I am in a management role now. My engineer is more technical than me. I would rate this product an eight point five out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Data leak prevention is very important and ensures protection against attacks."
"Has a good dashboard."
"Even when we were upgrading to a new OS, we didn't have any difficulties with the product. The stability is good."
"This product gives us visibility into what is going on in two servers, including connections and sessions, real-time alerts, very good reporting, and KPIs. It makes managing security of a critical server very easy, with a friendly GUI."
"The most valuable feature of this solution is the simplicity of configuration."
"Our customers value the solution's simplicity."
"The product's advanced bot and threat protection capabilities are valuable."
"The most valuable features are the client VPN and content filtering."
"Fortinet FortiWeb has positively impacted my organization because most of our servers and applications are secure from hackers and other security threats."
"The valuable feature of Fortinet FortiWeb vulnerability scanner"
"This product is very user-friendly."
"Some of the threat detection analytics and the filtering capabilities they give us for filtering a certain type of information that we don't want coming into the site are its valuable features. The analytics are pretty good in terms of being able to see what threats have been detected and mitigated, where they're coming from, and things like that."
"It's stable and works efficiently against OWASP Top 10 attacks."
"The most valuable feature of this solution is Fail-Open."
"The most valuable features of FortiWeb include its dashboard and out-of-the-box integrations with other Fortinet products, which enhance its effectiveness."
"It can scale well."
 

Cons

"I would like to see an improved capacity to store logs so that they will be available for a longer time."
"I faced an issue when Barracuda decided not to support Azure Stack Hub anymore, which was a significant issue as we had many customers using it on that platform."
"The reporting aspect of the solution needs improvement. I don't find that it's very good. They could do some work on it to make it much better. It's not that the reporting isn't secure. It's just that I would prefer to store my reports for an extended period of time. Right now, that's not possible and I'd prefer it if that could change. I also would say that the reports themselves are expensive."
"The platform's pricing needs improvement."
"The solution could use more reports."
"The solution needs to leverage some additional features to a broader scale of software-defined networks."
"An area for improvement in Barracuda Web Application Firewall is attack identification. Other banks identified attacks and tracked logs that the solution wasn't able to identify because of its ready-made rules pre-deployed by the vendor. My organization raised this issue with the technical support team. Another area to improve in Barracuda Web Application Firewall is its service desk. The team resorted to stonewalling because they couldn't accept that a feature was missing in the solution, and it was only after a lot of drilling down that the service desk team accepted that, and would be adding that feature in the future. My organization had to submit a report to the Reserve Bank of India with information on the logs identified and the attacks that happened, and that there was a failure on the part of the Barracuda Web Application Firewall. The Reserve Bank of India conducts a tri-monthly cyber risk audit in all Indian banks. Even smaller banks identified and caught attacks that my organization wasn't able to do, so I was looking into other solutions that competitor banks could be using because Barracuda Web Application Firewall failed to identify some of the attacks."
"There are false positives that I am receiving when compared to other WAFs."
"It would be good if the solution integrated with other solutions, like SAP."
"Fortinet FortiWeb needs to improve the way it's configured. Common services like publishing exchange should be done in one click only."
"Fine-tuning is a room for improvement in Fortinet FortiWeb."
"I had some small problems when I was upgrading firmware. After the upgrade, some of my certificates were deleted.​"
"The false positives are annoying.​"
"It can be better with web application firewalls."
"We have had problems with deployments where we've had to contact technical support to resolve them."
"The GUI could be better. It's limited."
 

Pricing and Cost Advice

"The price of this solution is okay."
"They have competitive pricing."
"The pricing is less compared to other web applications."
"The product is inexpensive."
"The price is reasonable, more so than other products."
"Barracuda costs us $8,000 per year. Barracuda costs $20,000 for a full subscription, when you try to protect multi-site infrastructure, in different geographical zones and for different data centers. If you have only one site, Barracuda will be cheaper."
"The price of the solution is a little expensive. There is a license for this solution and it can be purchased every one, two, or five years."
"The product pricing was competitive for the value it offers regarding security features."
"FortiWeb can be purchased in VM mode for a lower price and the same features."
"The costs are standard. We pay around $1,600 yearly."
"FortiWeb WAF is priced well for customers compared to other vendors' solutions."
"The solution is cheaper compared with other solutions. It has a yearly license."
"The license to use Fortinet FortiWeb is approximately $14,000."
"The cost isn't expensive."
"The solution is a bit expensive when compared to other products."
"We are on an annual license for this solution and the price is approximately €100."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Manufacturing Company
7%
University
6%
Financial Services Firm
10%
Computer Software Company
9%
Manufacturing Company
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business25
Midsize Enterprise7
Large Enterprise11
By reviewers
Company SizeCount
Small Business60
Midsize Enterprise27
Large Enterprise36
 

Questions from the Community

What do you like most about Barracuda Web Application Firewall?
It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs in our environment.
What is your primary use case for Barracuda Web Application Firewall?
I am not using the API protection feature right now because I don't host any APIs through Barracuda Web Application Firewall. I use a second procedure for API, which is point-to-point VPN connectiv...
What is your experience regarding pricing and costs for Barracuda Web Application Firewall?
At the time I was acquiring Barracuda Web Application Firewall, I found it costly compared to other products. To overcome that price factor, I excluded some features or subscriptions to align with ...
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
The pricing for Fortinet FortiWeb varies with different models having different prices. It depends on the requirement. For VM machines, the price increases based on CPU configurations of 2, 4, or 8...
What needs improvement with Fortinet FortiWeb?
There is room for improvement in Fortinet FortiWeb. The team was only from FortiGate itself. They are making new firmware versions and releasing them before checking, which leads to many bugs in th...
 

Also Known As

No data available
FortiWeb Web Application Firewall (WAF)
 

Overview

 

Sample Customers

Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Barracuda Web Application Firewall vs. Fortinet FortiWeb and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.