I use Fortinet products for security projects. When it comes to middle-sized enterprises, SD-WAN firewalls are the appropriate solution, FortiGate products being more geared towards larger, enterprise organizations. This is not for a data center, for which Check Point and Palo Alto are better suited. Fortinet FortiWeb is best suited for medium and enterprise data center environments.
Full support analyst at Gruppen
A great SD-WAN product with good security features with a host of models for varied environments
Pros and Cons
- "Fortinet is a great SD-WAN player when it comes to security capabilities."
- "The memory use in each of the appliances is problematic."
What is our primary use case?
What is most valuable?
My experience with the solution has been very positive. Fortinet is a great SD-WAN player when it comes to security capabilities. Also, it offers many models for a host of environments. I like the solution's SD-WAN features.
What needs improvement?
The memory use in each of the appliances is problematic.
For how long have I used the solution?
I believe that I have been working with FortiGate products for five years.
Buyer's Guide
Fortinet FortiWeb
May 2025

Learn what your peers think about Fortinet FortiWeb. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
851,823 professionals have used our research since 2012.
What other advice do I have?
As I am a Fortinet partner, I make use of many of its products.
I like the FortiWeb products.
I rate Fortinet FortiWeb as a nine out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.

Solutions Architect at a computer software company with 5,001-10,000 employees
A reliable solution with good ability for configuring multiple policies for different requirements
Pros and Cons
- "The ability to configure multiple policies for different requirements is a strong feature of Fortinet FortiWeb."
- "They can introduce a scaled-down version for the SMB market. It would be very competitive in the environment."
What is our primary use case?
I am more on the design side. The use case depends on what a customer requires in terms of web protection. We mostly use it for reverse proxy and load balancing.
What is most valuable?
The ability to configure multiple policies for different requirements is a strong feature of Fortinet FortiWeb.
What needs improvement?
They can introduce a scaled-down version for the SMB market. It would be very competitive in the environment.
For how long have I used the solution?
I have been using Fortinet FortiWeb for two or three years.
What do I think about the stability of the solution?
It is stable. You obviously need to assign and write configurations correctly.
What do I think about the scalability of the solution?
It is scalable.
How are customer service and technical support?
Every response from Fortinet is quite good and according to their SLAs.
How was the initial setup?
I don't get involved in implementation and installation.
What's my experience with pricing, setup cost, and licensing?
It is not a cheap product. It is not like a Linux or a Genex that you can deploy. It is a hardware appliance, and it is built for a specific reason and reliability.
It is an enterprise-class solution. You wouldn't find an SMB investing in something like this.
What other advice do I have?
I would recommend this solution to others if they can afford it. We plan to continue using this solution. It is a good solution, and the customers are quite happy using it.
I would rate Fortinet FortiWeb a nine out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Buyer's Guide
Fortinet FortiWeb
May 2025

Learn what your peers think about Fortinet FortiWeb. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
851,823 professionals have used our research since 2012.
Manager at a government with 201-500 employees
Good security and technical support, but more report templates should be available
Pros and Cons
- "The most valuable features are support and security."
- "I would like to see more improvements with respect to threat intelligence."
What is most valuable?
The most valuable features are support and security.
What needs improvement?
More templates should be made available for reporting.
I would like to see more improvements with respect to threat intelligence.
For how long have I used the solution?
I have been using Fortinet FortiWeb for a few years.
What do I think about the stability of the solution?
This is a stable solution.
What do I think about the scalability of the solution?
Scalability is good. We have more than 1,000 users.
How are customer service and technical support?
The technical support is okay and I am satisfied with it.
How was the initial setup?
The initial setup is straightforward and the deployment can be completed within a couple of hours.
What other advice do I have?
I would rate this solution a seven out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
CEO at a tech services company with 1-10 employees
Protects our customers' web infrastructure environment
Pros and Cons
- "The most valuable feature is the web application firewall (WAF)."
- "Fortinet FortiWeb has improved my organization by protecting our customer's web infrastructure environment."
- "Their support needs improvement."
How has it helped my organization?
Fortinet FortiWeb has improved my organization by protecting our customers' web infrastructure environment.
What is most valuable?
The most valuable feature is the web application firewall (WAF).
What needs improvement?
Their support needs improvement.
For how long have I used the solution?
More than five years.
What do I think about the stability of the solution?
No stability issues.
What do I think about the scalability of the solution?
No scalability issues.
How are customer service and technical support?
I would rate their technical support as a nine out of 10.
Which solution did I use previously and why did I switch?
We previously used NetScaler.
How was the initial setup?
The initial setup was straightforward.
What's my experience with pricing, setup cost, and licensing?
The pricing is reasonable.
Which other solutions did I evaluate?
Not applicable.
What other advice do I have?
Evaluate this product against other vendors out there.
We were previously a partner.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior Information Security Engineer with 1,001-5,000 employees
With Layer 7 server load balancing, it makes decisions based on the content of messages. It also can offload slow connections from the upstream servers.
What is most valuable?
- Web services signature: Helped us on secure key exchange, authentication and integrity of the transmissions.
- Virtual patching: We publish many web services through FortiWeb. We are able to quickly resolve vulnerabilities.
- Layer 7 server load balancing: The device made smart decisions based on the content of messages. Also, with compression and encryption, it can offload slow connections from the upstream servers. That greatly improved performance.
- Zero-day protection
- Advance correlation
- URL rewriting and content rewriting
How has it helped my organization?
Before FortiWeb deployment, we were using a combination of commercial and open-source products. It was a hassle for the administrators, due to which some areas were unintentionally overlooked and caused many problems. With FortiWeb, we got a one-box solution for internet and internet security, which reduced the time required of the administrators and improved visibility at the larger scale.
What needs improvement?
Usually patches and version upgrades are really buggy, so we usually wait about one month for a stable release to upgrade. They need to improve the new version/patch delivery mechanism. For example, if a patch fixes one functionality for web services but also causes some other functionality failure.
For how long have I used the solution?
I have been using it since 2014.
What do I think about the stability of the solution?
In the first few months, we had some issues but with a custom patch, we are good.
What do I think about the scalability of the solution?
No scalability problems so far.
How are customer service and technical support?
I rate technical support 8.5/10.
Which solution did I use previously and why did I switch?
We were using combination of solutions, due to our organisation's policies. Due to lack of visibility, administrative issues and response times, we shifted.
How was the initial setup?
We had a complex environment, with multiple offices across the globe with all the data in and out from our HQ.
What's my experience with pricing, setup cost, and licensing?
At the time of deployment, and still now, the price was considerable less than other solutions and varies according to license type.
Which other solutions did I evaluate?
What other advice do I have?
It is a great product, but be careful with version upgrades.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Security Engineer at a tech consulting company with 51-200 employees
Regular attack signature updates, responsive support, and blocks unknown attack
Pros and Cons
- "The most valuable feature is the attack signature and machine learning."
- "No solution is 100% secure and the security could always be worked on."
What is our primary use case?
I use Fortinet FortiWeb to protect my web application. It works to protect my applications from attack signatures. It allows me to create a URL profile and HTTP content routing when I have many web servers working on the same virtual server.
How has it helped my organization?
Fortinet FortiWeb has helped our organization by protecting the web application from any attack, known and unknown. The unknown protection is done by effective machine learning that is working on many unknown attacks. It operates on the probability of attacks.
What is most valuable?
The most valuable feature is the attack signature and machine learning.
What needs improvement?
The machine learning feature of the solution could be improved.
No solution is 100% secure and the security could always be worked on.
For how long have I used the solution?
I have been using Fortinet FortiWeb for a year and a half.
What do I think about the stability of the solution?
Fortinet FortiWeb is stable. It is able to detect the latest vulnerability from Log4j that happened on The Verge.
The solution's attack signature receives its update from Fortinet Developer Network, and many of the updates are immediate. The attack signatures are updated regularly due to the connection to Fortinet Developer Network.
What do I think about the scalability of the solution?
The solution is highly scalable.
How are customer service and support?
The technical support was good, they were very fast. They were able to resolve my issues.
I have used the support in many solutions, such as FortiClient, FortiWeb, for Sandbox integration with FortiMail, and other products in Fortinet.
How was the initial setup?
The installation is easy. It takes one day for the implementation, and after 14 days one day for tuning.
Some customer needs to go to production fast, it can take me one day for the installation, and after seven days I can do the tuning quickly.
What about the implementation team?
I do the implementation and support the solution.
What's my experience with pricing, setup cost, and licensing?
There is a subscription to use this solution. There are some additional features that can be added for an extra fee. The use of the features depends on the client's needs, such as full machine learning and signatures.
What other advice do I have?
I would recommend this solution to others. Additionally, I would recommend F5.
I rate Fortinet FortiWeb a nine out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Security Technical Manager at a tech services company with 51-200 employees
Stable, simple to install, but more advanced features needed
Pros and Cons
- "The solution is stable."
- "The F5 solution has more features than Fortinet FortiWeb, such as multiple load balancing."
What is our primary use case?
We use Fortinet FortiWeb to protect our exchange terminal for mail security.
What needs improvement?
The F5 solution has more features than Fortinet FortiWeb, such as multiple load balancing.
For how long have I used the solution?
I have been using Fortinet FortiWeb for approximately four years.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
I have approximately four clients using this solution.
How was the initial setup?
The installation is easy and straightforward, and the timeframe depends on the application
What about the implementation team?
We have one engineer that does the support of this solution.
Which other solutions did I evaluate?
I have evaluated F5 and Citrix.
What other advice do I have?
I would recommend this solution. I hope they are able to make some changes to compete with other solutions, such as F5 and Citrix.
I rate Fortinet FortiWeb a seven out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator
Senior solution architect at a comms service provider with 51-200 employees
Straightforward to set up, quick to deploy, and easy to maintain
Pros and Cons
- "The most valuable feature of this solution is Fail-Open."
- "The reporting could be optimized."
What is our primary use case?
The primary use case of this solution is to protect web applications, and stop attacks.
What is most valuable?
The most valuable feature of this solution is Fail-Open.
What needs improvement?
Troubleshooting features could be incorporated with this solution.
The reporting could be optimized.
For how long have I used the solution?
I have been using this solution for three years.
We are using the latest version.
What do I think about the stability of the solution?
The stability is okay, sometimes. It could be more stable.
What do I think about the scalability of the solution?
In terms of scalability, I have faced some challenges.
We have 50 users in our organization.
How are customer service and technical support?
Technical support is good.
Which solution did I use previously and why did I switch?
Previously, I did not use another solution.
How was the initial setup?
The initial setup was straightforward.
It takes less time to deploy compared with other competitors.
One person is enough to maintain this solution.
What about the implementation team?
We did not use an integrator or reseller. I completed the deployment and implementation.
What other advice do I have?
I would recommend this solution to others who are interested in using it.
I plan to continue with my usage of this solution in the future. It's a good product, but if they could better the stability, it would be great.
I would rate Fortinet FortiWeb an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator

Buyer's Guide
Download our free Fortinet FortiWeb Report and get advice and tips from experienced pros
sharing their opinions.
Updated: May 2025
Product Categories
Web Application Firewall (WAF)Popular Comparisons
Prisma Cloud by Palo Alto Networks
Microsoft Azure Application Gateway
Azure Front Door
AWS WAF
F5 Advanced WAF
NetScaler
Cloudflare Web Application Firewall
Imperva Web Application Firewall
Imperva DDoS
Akamai App and API Protector
Azure Web Application Firewall
Radware Alteon
NGINX App Protect
Barracuda Web Application Firewall
Buyer's Guide
Download our free Fortinet FortiWeb Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which lesser known firewall product has the best chance at unseating the market leaders?
- Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
- What do you recommend for a securing Web Application?
- Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
- Imperva WAF vs. Barracuda: Which One is Better?
- F5 vs. Imperva WAF?
- When should companies use SSL Inspection?
- NGFW with URL Filtering vs Web Proxy
- How does a WAF help to protect against DDoS attacks?
- What's right for me? Fortinet or Citrix?