Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb vs Microsoft Azure Application Gateway comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
74
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Fortinet FortiWeb
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
95
Ranking in other categories
Web Application Firewall (WAF) (5th)
Microsoft Azure Application...
Average Rating
7.2
Reviews Sentiment
6.8
Number of Reviews
47
Ranking in other categories
Application Delivery Controllers (ADC) (4th), Web Application Firewall (WAF) (3rd)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Kacem CHAMMALI - PeerSpot reviewer
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.
Shehzad Ali - PeerSpot reviewer
Offers time and cost savings with integration, but user interface needs improvement
We are using it for our internal application development. We are testing those features of application gateways. We are integrating it with our solutions, application, Azure Application Gateway Microsoft has a vast variety of tools, and it blends very well. It provides a range of services, so it…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"Easier http to https redirect using page rules"
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"Cloudflare has many features."
"The most valuable features of the solution are performance and security."
"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"The solution provides good load balancing and protection against DDoS attacks."
"Smaller businesses have seen great ROI due to the low investment and strong performance."
"Some of the threat detection analytics and the filtering capabilities they give us for filtering a certain type of information that we don't want coming into the site are its valuable features. The analytics are pretty good in terms of being able to see what threats have been detected and mitigated, where they're coming from, and things like that."
"The initial setup is pretty straightforward."
"Fortinet FortiWeb has improved my organization by protecting our customer's web infrastructure environment."
"When we had Cisco we had around thirty thousand entries on our firewalls. Now we are down to three thousand. Fortinet has a mechanism to detect all of your entries which are not used, and it can clean it up."
"The GUI is user-friendly."
"When it comes to blocking unknown threats and attacks, I would give it the highest score possible. We first started using AWS and its Web Application Firewalls. That was okay, but it was quite a manual process to keep it up to date, whereas Fortinet is always up to date, and the default rules or the modules that you can turn on are very easy to use."
"The most valuable features of FortiWeb include its dashboard and out-of-the-box integrations with other Fortinet products, which enhance its effectiveness."
"FortiWeb is easy to operate with a reasonably high level of protection. FortiWeb provides multiple deployment options with a physical or virtual (FortiWeb-VM) appliance, and acts either as a reverse/transparent proxy or out-of-band. It is also available on AWS and Azure."
"This is a SaaS product, so it is always up to date."
"Good customization; able to report and take action on alerts."
"The solution was very easy to configure. It wasn't hard at all to adjust it to our needs."
"Application Gateway automatically redirects unwanted users and takes care of the security aspect. It also handles the performance side of things, which is why we use it."
"The tool is easy to use and quite flexible. It has policy management features as well. The solution screens all traffic to our web applications before passing it to the application. We recently tested it on one of our poorly developed applications, and the upgrade gave us a 100% result based on our tests. It's very effective as a security measure, and people can detect threats even through the web application."
"I find Application Gateway’s WAF module valuable because it helps prevent layer 7 attacks."
"I rate Microsoft Azure Application Gateway's scalability a ten out of ten. My company has more than 1000 users who use it daily."
"We chose this solution in the first place because it has access to Layer 7. I can control the requests and the content, which I can access on my network if I want to even if it's forbidden access to other external resources. If I want to monitor, for example, traffic, and apply this rule on Layer 7, I can do so. This was our main goal when implementing this application. We wanted to take advantage of the Gateway capabilities."
 

Cons

"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
"Cloudflare's console should be made more user-friendly."
"They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"The product needs to improve its automation."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"Even if I wanted to, I wouldn't be able to buy Cloudflare in my country."
"If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag."
"The solution could improve its ease of use and add more advanced WAF features in future releases."
"The solution is not very scalable, to scale up would require another deployment with a new appliance and a change to the network."
"The GUI could be better. It's limited."
"New releases and old releases have some bugs, some features do not work as good as we want but every new release the Fortinet team fixes up problems."
"Most of the deployment is done by our development team because they have some parameters that match the configuration. However, when we initially did the deployment we used a consultant company."
"The initial setup depends on familiarity with the product. It's manageable with the right expertise."
"When there is downtime at their data center, it becomes a transit point issue for us, causing downtime in our environment as well."
"The memory use in each of the appliances is problematic."
"Application Gateway’s limitation is that the private and the public endpoint cannot use the same port."
"The security of the product could be adjusted."
"One of the challenges we faced was the solution does not support any other PCP protocols apart from HTTP and HTTPS."
"The solution can sometimes feel a little cumbersome unless you're a professional infrastructure person."
"The tool is a pain to deal with when it comes to the area of configuration."
"The monitoring on the solution could be better."
"It is a bit tricky to configure. You've got to have a very specific format to configure it. They should make it a little bit easier to configure. Mapping the certificates into it isn't easy, and it could be better. Currently, you've to write a bit of automation to pull certificates directly to HTTPS."
"It could be more stable, and support could be better. It would also be better if they offered more features. For example, it lacks security features. Before we used another English solution, and we realized that some of the rules were not set up correctly and passed through the Application Gateway's English controllers. But the problem, in this case, is if you send ten rules, for example, six rules hit some issues. IP address blocking could be better. The rules, for example, don't work properly. If you have one issue, one rule or another rule will not work. This sounds like total madness to me."
 

Pricing and Cost Advice

"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"The cost primarily depends on the size of the organization."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"The price of the solution is expensive."
"A free version of the solution is available."
"There are no additional costs beyond the standard licensing fees."
"The product's pricing is cheap."
"The pricing is in the middle. I would rate the pricing a five out of ten. It feels like a justified cost for the features."
"The maintenance fee for this product could be improved."
"When I use any other firewall, I have to take a license. It could be a perpetual license or subscription-based. In both cases, we have to pay some amount in advance, whereas in the case of FortiWeb, when using it as a service, I am paying half a dollar only for the domain name, and then I am paying based on the traffic or the number of requests."
"​The pricing is reasonable."
"The cost isn't expensive."
"The pricing is pretty good. We do pass a lot of traffic through our API servers. Something like 100 gigs of web traffic is a fair amount for reduced JSON API calls, but the cost is $50. For that peace of mind, we have thousands and thousands of customers that are protected by that $50, so it's a no-brainer."
"The product is expensive. I rate the pricing a ten out of ten."
"It's an expensive solution, although there are no additional costs."
"The solution is reasonably priced."
"Between v1 and v2, there is a lot of change in the pricing. It is very costly compared to AWS."
"It is an expensive solution. We have an enterprise agreement, it is monthly."
"Microsoft Azure Application Gateway is a pretty affordable product. My company needs to make yearly payments towards the licensing costs of the solution. The additional costs apart from the licensing costs of the solution vary."
"The product is not expensive."
"I rate the price of Microsoft Azure Application Gateway an eight out of ten."
"The solution is reasonably priced compared to other solutions."
"Regarding pricing for Azure Application Gateway, I would rate it at seven."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
845,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
21%
Computer Software Company
13%
Comms Service Provider
9%
Financial Services Firm
8%
Educational Organization
41%
Computer Software Company
8%
Financial Services Firm
7%
Government
5%
Computer Software Company
16%
Financial Services Firm
12%
Government
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
I would rate the licensing cost as seven out of ten, considering it good value for money. The price is affordable and...
What needs improvement with Fortinet FortiWeb?
There is room for improvement in the portability on multi-cloud environments. Enhanced DDoS integration to make Forti...
What's the difference between Azure Front Door and Application Gateway?
We found Azure Front Door to be easily scaled and very stable. The implementation is very fast and Microsoft provides...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft...
What do you like most about Microsoft Azure Application Gateway?
Application Gateway automatically redirects unwanted users and takes care of the security aspect. It also handles the...
 

Also Known As

Cloudflare DNS
No data available
Azure Application Gateway, MS Azure Application Gateway
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Lilly, AccuWeather, AIRFRANCE, Honeywell
Find out what your peers are saying about Fortinet FortiWeb vs. Microsoft Azure Application Gateway and other solutions. Updated: March 2025.
845,406 professionals have used our research since 2012.