Try our new research platform with insights from 80,000+ expert users

Cloudflare Web Application Firewall vs Fortinet FortiWeb comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
74
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Cloudflare Web Application ...
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
23
Ranking in other categories
Web Application Firewall (WAF) (7th)
Fortinet FortiWeb
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
95
Ranking in other categories
Web Application Firewall (WAF) (5th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
SachidDoshi - PeerSpot reviewer
Offers a huge signature repository and is superiorly effective in mitigating DDoS attacks
The solution's learning curve can still be further reduced, which presently stands at two or three months. The product has a custom rule set that users can modify and manifest as needed. The vendor can probably shorten the learning curve using cutting-edge technologies like AI. The solution provider can also work around the web applications and identify the toolset that needs to be implemented to deploy the solution in less time. The vendor has launched a SASE product that can function with Cloudflare Web Application Firewall, but many improvements are needed in terms of features, such as the web filtering feature, and CASB has not yet been added.
Kacem CHAMMALI - PeerSpot reviewer
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs."
"The most valuable features of the solution are performance and security."
"The solution provides good load balancing and protection against DDoS attacks."
"The solution is very good at mitigating threats."
"Its ease of integration with Office 365 and the fact that it's a good product compared to what I had before"
"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"The solution is stable, and the DNS servers are simple to use."
"The product has a valuable security control functionality."
"It protects web applications efficiently."
"Caching is the most valuable feature of Cloudflare Web Application Firewall."
"Cloudflare is cheaper compared to Azure WAF, which I have considered before."
"I'm highly satisfied. It's remarkably user-friendly, enabling me to quickly identify issues, and deploy solutions, and it offers the necessary features."
"We extensively use the solution every day. The solution is very stable; we haven’t seen any glitches."
"Some of the most valuable features of Cloudflare Web Application Firewall include its DNS zone setup and the zero trust policy."
"It is configurable via API."
"The ability to configure multiple policies for different requirements is a strong feature of Fortinet FortiWeb."
"FortiWeb provides the level of security we need at an excellent price point. It's easy to deploy and operationally efficient."
"The most valuable feature is that this product represents a whole solution, including a WAF, and even anti-defacements."
"I have recently been looking at the SSL certificate features and the learning mode of the appliance. This appliance learns from the pattern of SSL attacks."
"The deployment was very easy."
"We find that it is quite stable and reliable."
"Technical support is very good."
"Auto Learn feature: Makes policy additions or deletions for my customers very simple​"
 

Cons

"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"Cloudflare's console should be made more user-friendly."
"The reporting can definitely be improved to offer a lot more explanation on something that may have happened or has actually happened."
"I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us."
"The product needs to improve its automation."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"The product support needs to be accessible from more places, a wider area of coverage."
"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
"A key challenge arises when dealing with numerous integrations with HVAC systems. Depending on the specifics, there might be some configuration mismatches, which necessitate specific support."
"The solution's learning curve can still be further reduced"
"There could be an option to duplicate the cluster to maintain the consistency of rules."
"Cloudflare Web Application Firewall should include port forwarding features."
"They have some limitations with third-party integrations."
"The blocked logs are difficult to read at times."
"I have experienced some difficulties with Cloudflare's support as a customer based in India."
"Cloudflare Web Application Firewall should improve visibility for a customer."
"Another area for improvement is logging. When troubleshooting, the logs sometimes take a while to update. We've had people report that some things aren't logged if they're successful. It's a bit hit-and-miss. For example, sometimes people access one of our services, and it's successful, but we don't see that in the logs."
"If the price was lower, it would be a bit more attractive, as an option, to the customers."
"The solution could improve by providing more integration with solutions other than the Fortinet family."
"We would like to know more about the integration with the hardware or security products, such as Gemalto, because we need to move to that point."
"We want to see more detailed logging, such as audit logging, as this would significantly enhance the solution's reporting. We currently get some information from logs, but more would be better."
"I see no room for improvement at the moment."
"It is not entirely user-friendly."
"The dashboards are not that configurable. Application-specific dashboards can be improved. If we have 50 applications, there should be something to see what's happening with these 50 applications. There could be a graph or a consolidated alert page where all alerts are inbuilt. They have other products that I can use, but this feature should be built into FortiWeb."
 

Pricing and Cost Advice

"I give the price a five out of ten."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The price is reasonable."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"We are using the free tier of the solution."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"Cloudflare Web Application Firewall is more affordable than other solutions."
"What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."
"We pay $210 per month for CloudFlare WAF."
"It starts at $20 and can easily go up to $200 monthly"
"The annual licensing fee is $10,000 USD."
"The solution's pricing option needs to be more transparent for enterprise clients."
"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."
"It is not too pricey."
"The pricing is in the middle. I would rate the pricing a five out of ten. It feels like a justified cost for the features."
"We are on an annual license for this solution and the price is approximately €100."
"The solution gives us the best price to performance ratio."
"All our Fortinet pricing is bundled together for different products, like FortiGate, FortiAnalyzer, and FortiWeb. FortiWeb, by itself, is probably around $2,500 to $3,500."
"FortiWeb is more expensive than some competing products."
"It is not a cheap product. It is not like a Linux or a Genex that you can deploy. It is a hardware appliance, and it is built for a specific reason and reliability. It is an enterprise-class solution. You wouldn't find an SMB investing in something like this."
"If one is very cheap and ten is very expensive, I rate the product price as three or four."
"It keeps changing, but it's based on the size of the VM you buy and also the traffic throughput you want from it, whereas what we have on Azure is just the traffic throughput. You can also pay on a monthly basis from Azure. During each part of the project, it's okay to get Azure-based licensing or AWS-based licensing for FortiWeb, but over time, you would want to go with the perpetual license. You should go to Fortinet and buy the license from them. So, there is a two-step process there."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
845,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
21%
Computer Software Company
13%
Comms Service Provider
9%
Financial Services Firm
8%
Educational Organization
25%
Computer Software Company
14%
Financial Services Firm
7%
Manufacturing Company
5%
Educational Organization
41%
Computer Software Company
8%
Financial Services Firm
7%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Cloudflare Web Application Firewall?
The product has a valuable security control functionality.
What is your experience regarding pricing and costs for Cloudflare Web Application Firewall?
Cloudflare is cheaper compared to Azure WAF, which I have considered before.
What needs improvement with Cloudflare Web Application Firewall?
The product can improve by having more multitenancy capability, which is currently not available. This improvement wo...
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
I would rate the licensing cost as seven out of ten, considering it good value for money. The price is affordable and...
What needs improvement with Fortinet FortiWeb?
There is room for improvement in the portability on multi-cloud environments. Enhanced DDoS integration to make Forti...
 

Also Known As

Cloudflare DNS
Cloudflare WAF
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
crunchbase, udacity, marketo, okcupid, zendesk
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Cloudflare Web Application Firewall vs. Fortinet FortiWeb and other solutions. Updated: March 2025.
845,406 professionals have used our research since 2012.