We performed a comparison between Citrix Web App and API Protection and Fortinet FortiWeb based on real PeerSpot user reviews.
Find out in this report how the two Web Application Firewall (WAF) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Citrix is good for application protection."
"Citrix Web App API Protection allows you to enable a blocking mode"
"We have good customer support."
"The work balancing applications are the most valuable feature."
"The web application firewall which protects our services on the internet, and then of course services like our ability to provide high availability for the services we are offering are the most valuable features."
"The stability is good. If there is a problem, the load will be shifted to other sites automatically, which has been a good experience for us."
"The solution's technical support is good."
"I like the solution's simplicity compared to Citrix's on-prem solutions."
"The deployment was very easy."
"It offers some feedback and suggestions that guide our system development while helping our vendors to update their applications and fix any issues or bugs."
"The GUI is user-friendly and it's easy to understand how to manage it."
"This product is very user-friendly."
"The solution is easy to configure and deploy."
"We were able to protect our web servers from outside attacks."
"The solution is stable."
"FortiWeb offers machine learning in the latest product. This fixed many problems. There are no false negatives."
"Security could be improved because then I can get rid of my Cisco firewalls. If they improve the security then I could run my security, my proxy, my firewalling and my SDN solution on one device instead of having to have multiple devices."
"The user interface could be more friendly. Some wizards and other documentation for administrators, as well as some use cases, helps us to understand the solution."
"The product could be improved by making it easier to use and easier to implement."
"The solution's pricing is a big concern and should be improved."
"An area for improvement in Citrix Web App and API Protection is for it to give real-time notifications and alerts. It would be practical if the solution warns you if there's an attack or if the load or traffic volume increases or decreases. An additional feature I'd like to see in Citrix Web App and API Protection is a prediction or artificial intelligence on what is happening, for example, attacks."
"The setup was not simple."
"I am not an expert in this solution, but simplicity and user-friendly interfaces are crucial for me. I would appreciate advice from Citrix, particularly in the form of an interactive guide for API protection. It would be helpful if they could provide specific points and recommendations for cybersecurity, indicating areas that need attention or improvement. I find such interactive guidance valuable."
"The configuration for its web application firewall is complicated."
"The solution could have more customization."
"They could improve their support a little bit for faster response time."
"I would like to have an antivirus option."
"The upgrade process could be a bit smoother."
"Lacks a VM demo to enable testing prior to purchase."
"When we look at the incident reports in the dashboard, they are available for a maximum duration of 24 hours. They should provide more time for the analysis and increase the duration of the availability of these reports. Currently, it gives the options for 5 minutes, 1 hour, and 24 hours. It would be excellent if there are more options for a longer time period. It may be configurable, but I don't know how to do it."
"Fortinet WAF came out recently, and there is not much feedback about customer experience. For each project, customers ask about the scenarios and references of the customers who have implemented this solution, which we don't have. They need to simplify the customer experience and provide more information so that we can propose Fortinet Fortiweb as a WAF solution to customers and convince them. They need to improve their service and training. We need good training to implement and use it properly and know more about it. We still don't know much about Fortinet WAF. We didn't get any proper training sessions. Other vendors like Cisco, Palo Alto, Check Point, and Barracuda provide such sessions. Whenever we receive a request from a customer for this solution, we just give the price. We don't propose this solution because we don't know much about it. We propose whatever we are familiar with and what is supported."
"Describing security rules should be improved. It's tricky to define new feature tools when you want to describe an attack pattern and want to block it."
More Citrix Web App and API Protection Pricing and Cost Advice →
Citrix Web App and API Protection is ranked 20th in Web Application Firewall (WAF) with 11 reviews while Fortinet FortiWeb is ranked 4th in Web Application Firewall (WAF) with 83 reviews. Citrix Web App and API Protection is rated 8.0, while Fortinet FortiWeb is rated 8.0. The top reviewer of Citrix Web App and API Protection writes "Affordable, provides advanced features, and protects applications". On the other hand, the top reviewer of Fortinet FortiWeb writes "Cost-effective, easy to configure, and works very well as a single solution for multiple environments". Citrix Web App and API Protection is most compared with F5 Advanced WAF, Azure Front Door, AWS WAF, Akamai App and API Protector and Imperva DDoS, whereas Fortinet FortiWeb is most compared with F5 Advanced WAF, Fortinet FortiADC, AWS WAF, Azure Web Application Firewall and Imperva Web Application Firewall. See our Citrix Web App and API Protection vs. Fortinet FortiWeb report.
See our list of best Web Application Firewall (WAF) vendors.
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
