Try our new research platform with insights from 80,000+ expert users

Fortinet FortiDDoS vs Fortinet FortiWeb comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiDDoS
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (11th)
Fortinet FortiWeb
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
95
Ranking in other categories
Web Application Firewall (WAF) (4th)
 

Mindshare comparison

While both are Security Services solutions, they serve different purposes. Fortinet FortiDDoS is designed for Distributed Denial-of-Service (DDoS) Protection and holds a mindshare of 2.8%, down 3.0% compared to last year.
Fortinet FortiWeb, on the other hand, focuses on Web Application Firewall (WAF), holds 8.4% mindshare, up 7.3% since last year.
Distributed Denial-of-Service (DDoS) Protection
Web Application Firewall (WAF)
 

Featured Reviews

Yazan Omar - PeerSpot reviewer
An easy-to-use tool with great GUI
The product's initial setup phase was really easy. There is a lot of time involved in the testing phase and other processes related to the area of deployment, so it may take up to two weeks to deploy the solution. The solution is deployed on an on-premises model. One person is enough to take care of the deployment phase of the product. The person involved in the deployment phase needs to better understand topologies when dealing with Fortinet.
Kacem CHAMMALI - PeerSpot reviewer
Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb
The xFF, or X-Forwarded-For feature, IP reputation, and protected hostname. We can block access using the IP address, so no one can connect to our web server or website using the real IP. They need to use the FQDN instead. Even if an attacker detects the IP address, they can't connect directly to the server due to FortiWeb and the option to protect the hostname. All traffic passes through FortiWeb. Machine learning capabilities in FortiWeb: I don't use machine learning all the time. In the initial phase of FortiWeb deployment, we use the learning process to detect the traffic passing through FortiGate to our website.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We have researched them all, and it's a good solution all around."
"The product allows the users to adjust the thresholds."
"I find the interface easy to use."
"Among its key features: Detects and mitigates DDoS attacks at L3 to L7; negligible to zero false-positives; Generates and sends reports without the need for an expensive third-party solution."
"The equipment works very well, and I have not encountered any issues with it. It is a good solution for my company."
"The most valuable feature is the cloud DDoS scrubbing capability."
"Packet inspection has been effective for mitigating DDoS attacks."
"The equipment works very well, and I have not encountered any issues with it."
"High-performance and detection engines, provide a high rate of exposure of web attacks."
"Fortinet FortiWeb is priced well."
"All the features that FortiGate contains are very suitable for our business. We work with other products in Fortinet, FortiWeb, FortiSandbox, FortiMail, and FortiCache. We use all UTM features like self-encryption, encryption, all UTM features."
"It offers some feedback and suggestions that guide our system development while helping our vendors to update their applications and fix any issues or bugs."
"It is easy to install and to maintain."
"The GUI is user-friendly."
"The reporting and token system is good."
"The most important feature of this solution is protection from attack."
 

Cons

"The primary area for improvement is the on-premises capacity limit, currently fixed at 10 GB."
"I find that there have been issues in the past year with the solution hanging. It freezes often."
"The only thing they need to do is to automate it. Today, you must create tools that do not require the use of an expert or anyone with special skills."
"The challenge lies within the customer environment, particularly in Brazil, where companies have stringent security requirements for implementing solutions."
"The product’s pricing needs improvement."
"All the thresholds that need to be configured should be included in the default so that user will not forget or misconfigure."
"The solution can be a little more user-friendly and it can be more affordable."
"There aren't really any aspects of the solution we are unhappy with. It's been a positive experience overall."
"The dashboard evaluating the performance of each application connected to the web app's firewall is quite helpful, but the tool is only available in application performance management. So I think if Fortinet could better integrate that particular feature, it would add a lot of value to the product."
"Describing security rules should be improved. It's tricky to define new feature tools when you want to describe an attack pattern and want to block it."
"The integration with other products should be improved."
"I see no room for improvement at the moment."
"Fortinet FortiWeb could improve data integration."
"It would also be helpful if they could introduce easier reporting. It's good to have those reports that go to C-level management, and Fortinet does provide some graphs, but if they went into some more detail, that would be great."
"The memory use in each of the appliances is problematic."
"The GUI could be better. It's limited."
 

Pricing and Cost Advice

"The product’s pricing needs improvement."
"The solution is reasonably priced."
"It's quite pricey."
"Its subscription prices are cheaper, and it is not very expensive. From a price perspective, Fortinet is a very well-known security vendor. Subscriptions are very simple. They have a couple of licenses on an appliance, and that's it. The cost is not that big. One license is 40K, which they give with all the products. Another one includes the subscriptions for threat prevention, IPS, sandboxing, etc, which is more than enough."
"The price is competitive."
"There are no licensing costs."
"The pricing is in the middle. I would rate the pricing a five out of ten. It feels like a justified cost for the features."
"The solution is very inexpensive when compared to F5 Advanced WAF and Avi Networks but offers the same benefits."
"Fortinet FortiWeb's pricing is reasonable. Its licensing costs are yearly."
"The maintenance fee for this product could be improved."
"The solution is cheaper compared with other solutions. It has a yearly license."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
858,327 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Manufacturing Company
10%
Financial Services Firm
9%
University
7%
Educational Organization
29%
Computer Software Company
10%
Financial Services Firm
9%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would prefer Arbor.
What do you like most about Fortinet FortiDDoS?
The product's initial setup phase was really easy.
What is your experience regarding pricing and costs for Fortinet FortiDDoS?
Fortinet FortiDDoS offers lower costs compared to other solutions. The licensing costs are annually renewed.
What do you like most about Fortinet FortiWeb?
The WAF profiles has been effective at mitigating web-based threats.
What is your experience regarding pricing and costs for Fortinet FortiWeb?
Fortinet FortiWeb is cost-effective compared to solutions like F5. It offers strong performance for the price, providing substantial value for our customers.
What needs improvement with Fortinet FortiWeb?
The cloud-based security service of Fortinet FortiWeb could be enhanced to match the level of providers like Cloudflare ( /products/cloudflare-reviews ). Right now, it is more focused on on-prem so...
 

Also Known As

Fortinet DDoS, FortiDDos
No data available
 

Overview

 

Sample Customers

Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Cloudflare, Radware, NETSCOUT and others in Distributed Denial-of-Service (DDoS) Protection. Updated: June 2025.
858,327 professionals have used our research since 2012.