Try our new research platform with insights from 80,000+ expert users

Barracuda Web Application Firewall vs Fortinet FortiWeb comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Barracuda Web Application F...
Average Rating
8.2
Reviews Sentiment
7.5
Number of Reviews
44
Ranking in other categories
Web Application Firewall (WAF) (17th)
Fortinet FortiWeb
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
96
Ranking in other categories
Web Application Firewall (WAF) (4th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Anne-Aimee Wollerich - PeerSpot reviewer
Managing bot traffic effectively enhances usability for non-technical users
Barracuda Web Application Firewall ( /products/barracuda-web-application-firewall-reviews ) lacks some of the more specified and structured features offered by solutions like Tenable. Although Tenable is more expensive and less easily deployable, its features are more deepened and chiseled, particularly for IT personnel. For example, Tenable provides more comprehensive dark web scanning capabilities, which Barracuda could improve upon.
OcheEluma - PeerSpot reviewer
Enhanced security with comprehensive traffic inspection and some downtime automation needs
One area that needs improvement is the handling of SaaS downtime. When there is downtime at their data center, it becomes a transit point issue for us, causing downtime in our environment as well. Although measures like built-in redundancy and manual switching between data centers exist, there is room for improvement in making these transitions automatic without impacting the customer. Automating the migration without manual intervention would significantly enhance user experience during downtime. Additionally, being able to read non-flagged traffic for operational purposes could also be an area to improve.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is its usability."
"I like Cloudflare's application gateway and DDoS protection."
"It is a stable solution. I rate the stability a ten out of ten...I rate the scalability a ten out of ten."
"The overall experience with Cloudflare is positive, with a rating of eight out of ten."
"It is a fast and secure DNS."
"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"Its ease of integration with Office 365 and the fact that it's a good product compared to what I had before"
"From what I've seen so far, there are no negatives to report as of yet"
"The most valuable features are the client VPN and content filtering."
"We run it with no downtime, because it has good support."
"It is stable and the performance is good."
"The stability of the solution is good. I don't think we've experienced bugs, crashes, or glitches."
"The most valuable features of Barracuda Web Application Firewall include advanced bot protection, DDoS protection, and addressing the top ten vulnerabilities."
"The product has fantastic support services."
"The initial setup is easy."
"The installation is straightforward."
"Provides good vulnerability scanning, IPS, and geolocalization."
"Even though most products have the same functionality nowadays, FortiWeb is easy to integrate."
"The ability to configure multiple policies for different requirements is a strong feature of Fortinet FortiWeb."
"The reporting and token system is good."
"One main feature we are very happy about is file security and upload functionality."
"Other than the additional security with exploit protection, we have simpler certificate handling, as we can keep internal servers using internal certificates continuously distributed and updated by Active Directory Group Policy, while the public certificates become updated only in a single place, FortiWeb itself."
"The solution's most valuable feature is its security profile."
"Security Fabric integration. This is really a value-added feature as FortiWeb can interact with the rest of the client’s Fortinet pack to provide an intelligent security layer like (FortiSIEM for central log management and correlation, FortiGate, FortiSandbox for malware analysis, etc.)."
 

Cons

"Cloudflare does not have an on-premise solution. If they had different approaches they could be better suited to accommodate more customers, such as on-premise and hybrid deployments. For example, hybrid deployments would be useful where you could move the traffic from the enterprise to the cloud."
"The product needs to improve its automation."
"The solution could be more user-friendly."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"There should be a specific price list for enterprise-level customers."
"Eventually, things go sideways and require fixes when it would have been easier to prevent the issue initially."
"If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag."
"Cloudflare could be improved by introducing a mid-tier pricing option."
"I would suggest that someone implementing this product is knowledgeable in the IT field, and with the network needs. It is complex."
"There's potential for improvement in the platform's CMS integration."
"Barracuda Web Application Firewall’s scalability needs improvement."
"The GUI needs to be improved because it sometimes hangs and needs to be restarted."
"We get false positives about phishing emails."
"I would like to see an improved capacity to store logs so that they will be available for a longer time."
"I would like to see better controlling of the traffic."
"The solution needs to leverage some additional features to a broader scale of software-defined networks."
"Their documentation is fairly complete, but it's sometimes a little bit difficult to search for exactly what you're looking for to resolve an issue. There have been times when we've gone to try to search for areas that we needed to get information on, and it has not always been extremely clear exactly how a particular thing needs to be set up."
"Its threat intelligence capabilities may not be as advanced as some competitors."
"The initial setup process could be improved."
"Fortinet's customer support needs improvement. The expertise of engineers varies across different time zones, affecting the effectiveness of the support provided, especially during our daytime."
"A user interface or dashboard for troubleshooting is needed."
"No solution is 100% secure and the security could always be worked on."
"If the price was lower, it would be a bit more attractive, as an option, to the customers."
"The reporting could be optimized."
 

Pricing and Cost Advice

"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"I give the price a five out of ten."
"The price is reasonable."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The tool is a premium product, so it is very expensive."
"The cost primarily depends on the size of the organization."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"The product pricing was competitive for the value it offers regarding security features."
"The price of this solution is okay."
"The Barracuda Web Application Firewall is quite expensive."
"Cost is a bit on the higher side. Big companies can afford it."
"For small companies, the price is very expensive because the WAF is an enterprise-level application, not intended for smaller businesses. In my opinion, the price is right for enterprise-level use."
"The product is expensive."
"The product is inexpensive."
"While I would have to check on the price of the solution, I feel it to be okay and it matches the market price."
"Previously, for each project, the cost was $800 to $1,000 per application. Now, it's $100 to $120. For some of the applications, there is a 90% reduction, and for some of the applications, there is a 50% reduction. We're paying only $500 to $600."
"FortiWeb can be purchased in VM mode for a lower price and the same features."
"Cheaper than others."
"All our Fortinet pricing is bundled together for different products, like FortiGate, FortiAnalyzer, and FortiWeb. FortiWeb, by itself, is probably around $2,500 to $3,500."
"The price is competitive."
"It's an expensive solution, although there are no additional costs."
"Due to the situation in Iran with the sanctions, the price of this solution is very expensive."
"If one is cheap and ten is expensive, I rate the tool an eight."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
861,490 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
10%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
19%
Financial Services Firm
10%
Educational Organization
7%
Manufacturing Company
6%
Computer Software Company
13%
Financial Services Firm
12%
Government
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Barracuda Web Application Firewall?
It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs...
What is your primary use case for Barracuda Web Application Firewall?
Our primary use case was to track the traffic on websites or webshops to identify potential malicious actors, such as...
What is your experience regarding pricing and costs for Barracuda Web Application Firewall?
The pricing for Barracuda is quite high compared to other OEMs. Each transaction requires my purchase team to negotia...
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
Fortinet FortiWeb is cost-effective compared to solutions like F5. It offers strong performance for the price, provid...
What needs improvement with Fortinet FortiWeb?
The cloud-based security service of Fortinet FortiWeb could be enhanced to match the level of providers like Cloudfla...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Barracuda Web Application Firewall vs. Fortinet FortiWeb and other solutions. Updated: July 2025.
861,490 professionals have used our research since 2012.