Try our new research platform with insights from 80,000+ expert users

Fortinet FortiWeb vs NSFOCUS Web Application Firewall comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiWeb
Ranking in Web Application Firewall (WAF)
4th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
95
Ranking in other categories
No ranking in other categories
NSFOCUS Web Application Fir...
Ranking in Web Application Firewall (WAF)
46th
Average Rating
7.0
Reviews Sentiment
8.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2025, in the Web Application Firewall (WAF) category, the mindshare of Fortinet FortiWeb is 8.2%, up from 7.5% compared to the previous year. The mindshare of NSFOCUS Web Application Firewall is 0.3%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF)
 

Featured Reviews

Kacem CHAMMALI - PeerSpot reviewer
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.
it_user933945 - PeerSpot reviewer
Offers Application Protection Against Web Attacks
There is a need for expanded licensing terms and options. There's also a need for improved and more agile customization features. The user needs to be able to manage each policy as required; the functionality needs to empower the user. There should be a complete suite of desktop provider policies available to users. Overall, it needs to be more user-friendly.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The GUI is user-friendly and it's easy to understand how to manage it."
"The deployment was very easy."
"SSL Offloading simplifies the public certificate handling and brings additional protection features."
"It allows specific IP whitelisting or even regional whitelisting, ensuring only whitelisted traffic from certain geographical regions can access the environment."
"We find that it is quite stable and reliable."
"It is easy to install and to maintain."
"It's stable and works efficiently against OWASP Top 10 attacks."
"When it comes to blocking unknown threats and attacks, I would give it the highest score possible. We first started using AWS and its Web Application Firewalls. That was okay, but it was quite a manual process to keep it up to date, whereas Fortinet is always up to date, and the default rules or the modules that you can turn on are very easy to use."
"Since we are using this tool for protection purposes we really appreciate the hybrid security abilities; the main idea here is that we powerful protection our application needs."
 

Cons

"If the price was lower, it would be a bit more attractive, as an option, to the customers."
"FortiGate could be improved on the security end because we've had some incidents with the customer. Otherwise, there is no problem."
"In terms of performance, it needs to be more robust."
"Fortinet FortiWeb could improve in reference architecture for different deployment scenarios."
"Their documentation is fairly complete, but it's sometimes a little bit difficult to search for exactly what you're looking for to resolve an issue. There have been times when we've gone to try to search for areas that we needed to get information on, and it has not always been extremely clear exactly how a particular thing needs to be set up."
"The Layer 7 DDoS attacks need improvement, it could be better."
"We have had problems with deployments where we've had to contact technical support to resolve them."
"It costs too much."
"There is a need for expanded licensing terms and options. There's also a need for improved and more agile customization features. The user needs to be able to manage each policy as required; the functionality needs to empower the user. There should be a complete suite of desktop provider policies available to users. Overall, it needs to be more user-friendly."
 

Pricing and Cost Advice

"Fortinet FortiWeb's pricing is reasonable. Its licensing costs are yearly."
"If one is cheap and ten is expensive, I rate the tool an eight."
"The product is expensive. I rate the pricing a ten out of ten."
"The costs are standard. We pay around $1,600 yearly."
"The pricing is pretty good. We do pass a lot of traffic through our API servers. Something like 100 gigs of web traffic is a fair amount for reduced JSON API calls, but the cost is $50. For that peace of mind, we have thousands and thousands of customers that are protected by that $50, so it's a no-brainer."
"If one is very cheap and ten is very expensive, I rate the product price as three or four."
"It should be somewhere about 36,000 Euros. That's the cost for three years. It's moderately priced."
"The price is competitive."
Information not available
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
860,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
19%
Computer Software Company
11%
Financial Services Firm
10%
Government
6%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
Fortinet FortiWeb is cost-effective compared to solutions like F5. It offers strong performance for the price, providing substantial value for our customers.
What needs improvement with Fortinet FortiWeb?
The cloud-based security service of Fortinet FortiWeb could be enhanced to match the level of providers like Cloudflare ( /products/cloudflare-reviews ). Right now, it is more focused on on-prem so...
Ask a question
Earn 20 points
 

Also Known As

No data available
NSFOCUS WAF, NSFOCUS Web Application Security
 

Overview

 

Sample Customers

Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
2016 G20 Summit
Find out what your peers are saying about Amazon Web Services (AWS), F5, Microsoft and others in Web Application Firewall (WAF). Updated: June 2025.
860,592 professionals have used our research since 2012.