Citrix NetScaler vs Fortinet FortiADC vs HAProxy comparison

Cancel
You must select at least 2 products to compare!
Citrix Logo
8,953 views|6,844 comparisons
91% willing to recommend
Fortinet Logo
4,717 views|3,759 comparisons
83% willing to recommend
HAProxy Logo
10,621 views|7,206 comparisons
91% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Citrix NetScaler, Fortinet FortiADC, and HAProxy based on real PeerSpot user reviews.

Find out what your peers are saying about F5, Citrix, HAProxy and others in Application Delivery Controllers (ADC).
To learn more, read our detailed Application Delivery Controllers (ADC) Report (Updated: April 2024).
767,847 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"Its flexibility, agility, and robustness are the most valuable. Its management and implementation are also quite easy.""The maintenance of the solution is not complex.""One feature that works really well is the SSL VPN. It's very easy to set up and you can go very granular with it. You can define what user groups get what kind of access and the management overhead is very low.""The best feature of Citrix is its track record of stability in its features.""The load balancing feature and the fact that you can do context switching in the WAF are the most valuable. We majorly use it for load balancing, but we also use it for context switching in the WAF. It is also robust and very easy to work with and manage.""Enables a Web service that offers persistent client-server connections, IP restriction, URL rewrite (such as remove "/assets/" path from client-side URL path), and cache for CSS or JS files... You can easily use the GUI to set up all these requirements on the same network device within 20-30 minutes. (If you do the same steps on CLI, it might take less time.)""For desktop application management, I recommend the NetScaler edition. This product is like a Swiss army knife. Citrix NetScaler ADC supports the education front-end.""The solution is very stable. We don't have any downtime or issues of that nature."

More Citrix NetScaler Pros →

"The solution provides high-level services such as availability, redundancy, and load balancing between servers.""Fortinet FortiADC is a good product because each and every piece of content is monitored by it.""The most valuable feature is the SSL offloading capacity.""The main feature that we use is GSLB (Global Server Load Balancing). GSLB makes the customer's network more reliable by scaling applications across multiple datacenters. GSLB as a disaster recovery solution can direct traffic based on site availability.""It's a good product because it supports all the features that ADC solutions in the market can support, like F5 solutions, for example, such as the LTM of F5.""The user interface is very easy and integrates with Sandbox easily.""I am impressed with the product's load-balancing feature.""The product has flexible and interesting licensing options."

More Fortinet FortiADC Pros →

"The ability to handle a sequence of front- and back-ends gives the user the opportunity to send traffic through different services.""The VRRP redundancy is also a mission-critical feature that works seamlessly. I can bring down a server live with minimal downtime because of this.""The solution is effective in managing our traffic.""The most valuable thing for me is TCP/IP Layer 4 stuff you can do with HAProxy. You can go down to the protocol level and make decisions on something.""Advanced traffic rules, including stick tables and ACLs, which allow me to shape traffic while it's load balanced.""It is stable. Period. Will not fail unless you do something wrong.""The most important features would be the load-balancing of HTTP and TCP requests, according to multiple LB-algorithms (busyness, weighted-busyness, round robin, traffic, etc). Another important feature that we cannot live without is the username/passwd authentication for legacy systems that had none.""We don't have a problem with the user interface. it's good."

More HAProxy Pros →

Cons
"Integration with other third party providers and third party applications could be better because it can be a bit complex at present.""The tool needs to add a feature where we can access the network policy access manager.""I feel that Citrix NetScaler's customer support needs to improve.""The technical support could be improved. They do not respond or assist customers in a timely manner.""Development team's response time could be better.""The solution should be able to scale more effectively than it does.""Should offer more flexible cost-effective licensing for small to medium sized organizations.""Maybe creating policies with simple regular expressions."

More Citrix NetScaler Cons →

"There is a mismatch between the number of features they are offering and the device capacity on how much it can handle.""The product's stability for VMs could be better.""Issues with SSL and encrypted traffic.""It would be good if they built in a fully functional web application firewall.""Setup could be easier. The company's homework is to redesign those menus to configure with the smallest number of steps.""Fortinet has some drawbacks, and it can be a bit challenging to scale.""I had a terrible experience with Fortinet support. I only used support once when I bought the solution. I got no response for two days. However, I believe that it's no longer the case. Fortinet solutions have problems when they're launched. For example, we had issues with Fortinet's authenticator when it came out. We also had trouble with FortiNAC in the beginning.""Technical support and documentation could both be improved."

More Fortinet FortiADC Cons →

"The product does not have any new technologies.""Pricing, monitoring, and reports can be improved.""​It needs proper HTTP/2 support.​""The only area that I can see needing improvement is the management interface, since it is pretty much all through the CLI or configuration. A GUI/web interface could be helpful for users who are not as experienced in the Linux shell. However, HAProxy does have another product that we evaluated called ALOHA, which has a web front-end, but we found it did not meet our needs.""We need to handle new connections by dropping, or queuing them while the HAProxy restarts, and because HAProxy does not handle split config files.""HAProxy is very weak in the logging and monitoring part and requires improvement.""The logging functionality could use improvement, as it is a little cryptic.""Sometimes it's challenging to get through the log, and you need a log to understand what is going on. It isn't easy to map the logging with the documentation, and every time I read the log, I have to pull out the documentation to understand what I'm reading."

More HAProxy Cons →

Pricing and Cost Advice
  • "It's not for startups or SOHO."
  • "Costly product and complicated licensing."
  • "It all depends on the features that will be used and the number of accesses."
  • "It is true that it is a bit pricey compared to newer technologies coming to the market. For example, A10 is a load balancer that does everything that Citrix can and it does a lot more than what NetScaler does when it comes to the security space, and their prices are so cheap. Every box comes with its own license and support built into it. When you compare that with NetScaler, you have to buy licenses separately, you have to buy a support agreement that is going to be separate. A small NetScaler, even if it is a VPX which is a virtual server, could cost you close to $150,000 to $200,000 dollars. So the pricing is really high."
  • "We have been evaluating F5, Citrix, and other ADC products. Citrix is the most expense of all of them."
  • "We are quite happy with price. It's not too high."
  • "I do not have any experience with the pricing of the product."
  • "You get the value for your money. There aren't any hidden fees."
  • More Citrix NetScaler Pricing and Cost Advice →

  • "The price is competitive"
  • "Compared to F5, FortiADC pricing is better."
  • "The solution could be more cost-effective."
  • "They offer a perpetual license."
  • "The solution is less expensive than F5 or Imperva and is the most reasonably priced option available."
  • "I believe the price is good. It's fair. There are no extra costs."
  • "The product has affordable pricing."
  • "The solution's pricing is an issue and should be improved."
  • More Fortinet FortiADC Pricing and Cost Advice →

  • "HAProxy is free software. There are optional paid products (support/appliances)."
  • "The price is well worth it. HAProxy Enterprise Edition paid for itself within months, simply due to the resiliency it brings. It was a bit more expensive than we were originally interested in paying, but we are thankful we chose to go with HAProxy."
  • "Very good value for the money. One of the simplest licensing schemes in this category of products."
  • "Test/lab virtual machines can be installed without a licence. They can't be used for performance testing but otherwise behave like production nodes."
  • "If you don't have expertise then go with the licensed version. Otherwise, open-source is the best solution."
  • "We use NGINX as well. However, because the health checks are a paid feature, I like to avoid it whenever possible​."
  • "I think that the pricing is very fair, I would definitely recommend buying the Enterprise license."
  • "The only cost is for the image manager, who is responsible for uploading the image, and that is trivial."
  • More HAProxy Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Application Delivery Controllers (ADC) solutions are best for your needs.
    767,847 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The most valuable feature for us is the application firewalling in Citrix NetScaler, ensuring only valid traffic enters… more »
    Top Answer:After deployment, Citrix Netscaler shifted to a subscription-based license scheme for support, which is slightly more… more »
    Top Answer:Citrix NetScaler is a robust product, but mastering it requires significant learning and training due to its complexity… more »
    Top Answer:For ADC, any ADC can do a good job. But in case if you want to add WAF functionality to the same ADC hardware you have… more »
    Top Answer:I recommend Fortinet FortiADC. My experience with Fortinet has been very positive. Our company has been using it for… more »
    Top Answer:The user interface is very easy and integrates with Sandbox easily.
    Top Answer:I do recommend HAProxy for more simple applications or for companies with a low budget, since HAProxy is a free… more »
    Top Answer:HAProxy's TCP load balancer is excellent and super stable.
    Top Answer:I use the open-source version of the product. I don't have experience with the licensed version of the solution.
    Ranking
    Views
    8,953
    Comparisons
    6,844
    Reviews
    26
    Average Words per Review
    384
    Rating
    8.3
    Views
    4,717
    Comparisons
    3,759
    Reviews
    10
    Average Words per Review
    507
    Rating
    7.9
    Views
    10,621
    Comparisons
    7,206
    Reviews
    13
    Average Words per Review
    436
    Rating
    7.4
    Comparisons
    Also Known As
    Citrix ADC, NetScaler, Citrix NetScaler VPX
    FortiADC Application Delivery Controller, FortiADC
    HAProxy Community Edition, HAProxy Enterprise Edition, HAPEE
    Learn More
    HAProxy
    Video Not Available
    Overview

    Citrix NetScaler is an application delivery controller (ADC) and load-balancing solution for multi-cloud environments. Because its software and hardware form factors are all built on a single code base, Citrix NetScaler provides operational and feature consistency with comprehensive security for monolithic and microservices-based applications on-premises and in the cloud. The solution is designed to optimize, manage, and secure network traffic. Switching features, security and protection features, and network integration efficiency capabilities are all part of its feature set.

    Citrix NetScaler Features

    Citrix NetScaler has many valuable key features. Some of the most useful ones include:

    • Citrix Gateway
    • Secure Access
    • Layer 7 content switching
    • Database load balancing
    • Triscale clustering
    • E-based policy enforcement
    • Surge protection and priority queuing
    • Application acceleration
    • Application security, including DoS attack defense, content rewriting and response control, SSL encryption, and more.
    • Network Integration

    Citrix NetScaler Benefits

    There are many benefits to implementing Citrix NetScaler. Some of the biggest advantages the solution offers include:

    • Improved Application Performance: Citrix NetScaler optimizes the delivery of applications, reducing latency and improving the user experience.
    • Scalability: The solution can scale to handle large amounts of traffic, ensuring that applications are available even during periods of high demand.
    • Advanced Security: Citrix NetScaler includes a range of security features, such as SSL offloading, to help secure applications and protect against threats.
    • Availability: Load balancing and failover capabilities ensure that applications are always available, even in the event of a failure.
    • Good user experience: The solution’s Global Server Load Balancing (GSLB) ensures that users are directed to the nearest available application, reducing latency and improving the user experience.
    • Reduced costs: By improving application performance and reducing downtime, Citrix NetScaler can help organizations reduce costs associated with application delivery.
    • Agility: Citrix NetScaler makes it easier for organizations to deploy and manage applications, helping to increase the speed and efficiency of IT operations.
    • Analytics and monitoring: Provides insight into network and application performance, helping organizations to identify and resolve issues quickly.

    Reviews from Real Users

    Citrix NetScaler is a solution that stands out when compared to many of its competitors. Some of its major advantages are that it is easy to use, is robust, and has good load balancing.

    A Senior Citrix Engineer at Troye, says, “The web application firewalling component is probably the most powerful feature as it can identify attacks on the network at an application level which is quite important. There is also good functionality where we use IP reputation and geofencing to mitigate threats from the outside world.”

    “The feature that I have found most valuable is its load balancing,” explains a Security Consultant at a tech services company.

    Timur G., Team Head of Network Security at DOM.RF, writes, “The most valuable feature of Citrix ADC is its ease of use.” 

    Another PeerSpot reviewer, Nirav S., Technical Solutions Architect at MindTree, mentions, "Compared to other solutions, Citrix ADC is much more robust in terms of the native integration to cloud platforms. It is far more robust from an operational point of view as well."

    Fortinet FortiADC is a robust application delivery controller (ADC) that delivers application optimization, application security, and application availability. FortiADC is a valued offering from Fortinet, which is widely recognized as a trusted supplier of dynamic security solutions worldwide. FortiADC offers dynamic security functions (AV, DDoS, and WAF) in addition to advanced application connectors for a simplified deployment and complete transparency to an organization's networks and applications. FortiADC offers three primary deployment options: physical machine, virtual machine, (VM) and cloud solution options.

    Fortinet FortiADC Benefits

    • FortiADC security protocol: FortiADC integrates with FortiSandbox to improve the overall antivirus security protections where every file is scanned for known and unknown malicious risks. If a file is identified as malicious or problematic, it will be blocked in the future.

    • SSL protocol: FortiADC securely uses the most up-to-date cryptography to provide exceptional encryption and decryption using a hardware-based SSL ASIC. FortiADC offers complete transparency to inspect all traffic for threats, improves server response time, and reduces backend server load, SSL inspection and SSL offloading. FortiADC integrates seamlessly with Gemalto’s SafeNet Hardware Security Module (HSM).

    • FortiADC connectors: FortiADC Fabric Connectors offer open API-based integration and coordination with numerous software-defined networks (SDNs), third-party partners, and cloud management providers. Fortinet Fabric Connectors provide deep open and turnkey integration with recognized third-party vendors such as AWS, K8s, OCI, and SAP, in multi-vendor solutions, improving scalability, simplified management, and automation.

    • Business stability: FortiADC load balancing for on-premise global server load balancing (GSBL) and in the cloud (FortiGSBL Cloud) will ensure users can maintain a reliable and available network by improving the ability of scaling applications throughout numerous data centers to reduce application response times and enhance disaster recovery. Users are able to define protocols based on network latency concerns, overall data performance, and site availability.

    Fortinet FortiADC Features

    • Application availability

      • 4-7 application load balancing: DNS, HTTPS, RTMP, RADIUS, MySQL and more

      • External fabric connectors: Splunk Integration, AWS/OCI Connector, Kubernetes Service.

      • Security fabric connectors: FortiSIEM, Fortigate BanIP Integration, FortiAnalyzer, and more.

      • Deployment modes: High availability (AA/AP Failover), Router mode, transparent mode (switch), one-arm mode (proxy with X-forwarded for support.

    • Web application firewall (WAF)

      • Security services: Captcha support, cookie support, HTTP header security, XML/SOAP/JSON validation, CSRF protection, API gateway, and more.

      • Application security: Web attack signature, bot detection, web vulnerability scanner, OWASP Top-10 Wizard, API protection and more.
    • Application enhancement

      • HTTP and TCP improvement: TCP buffering, HTTP compressions/decompression, HTTP caching (dynamic and static objects), Bandwidth monitoring using quality of service (QoS), TCP buffering, and more.

      • Authentication offloading: Two-factor authentication (Fortitoken/Fortitoken Cloud and Google Authentication), NTLM, AUTH2.0, SAML 2.0 (SP and Idp) RADIUS, LDAP, Kerbos, and local.

      • Networking: Integration with Ansible, Cisco ACI, OpenStack and Nutanix, NVGRE and VXLAN support, VLAN and port trunking support, IPv6 Support (SLB, firewall, routing and interfaces), Dynamic NAT, Hide NAT, Static NAT for added scalability and flexibility.

      • Management: Syslog support, SNMP using private MIBs with threshold-based traps. REST APIs, VDOMS, data analytics, real-time monitoring graphs, role-based monitoring, intuitive reporting, FortiView integration, and more.

    HAProxy is considered by many in the industry to be one of the fastest and most popular and trusted software load balancer products in the marketplace today. Organizations are able to immediately deploy HAProxy solutions to enable websites and applications to optimize performance, security, and observability. HAProxy solutions are available to scale to any environment.

    HAProxy is an open-source product and has a robust, active, reliable community. The solutions are continually tested and improved on by the community. HAProxy offers a dynamic design to support the most modern architectures, microservices, and deployment environments (appliances, containers, virtual, and cloud).

    HAProxy utilizes a cloud-native protocol, which makes it a complete solution for cloud services such as Red Hat OpenShift, OVH, Rackspace, Digital Ocean, Amazon Web Services (AWS), and more. It also can be used as the reference load balancer in OpenStack.

    HAProxy Products

    • HAProxy One: This is a next-gen end-to-end application delivery platform created to secure and streamline modern application architectures. It offers a complete suite of solutions, such as application delivery software, turnkey, and appliance services observed and administered through a central control plane. The product supplies application acceleration, CDN, DDoS, bot management, WAF capabilities, and load balancing.
    • HAProxy Fusion Control Plane: This product enables organizations to streamline workflows, arrange traffic routing and security protocols, enhance the speed of delivery, and scale out of the organization’s applications. HAProxy Fusion Control Plane offers an intuitive user interface to observe and control the complete product lineup and API for administering numerous fleets of HAProxy Enterprise servers, either in the cloud or on premises.
    • HAProxy Edge: This product offering is an application delivery network (ADN) that provides a broad array of turnkey application services with amazing scale and complete visibility. Services include application and content acceleration, advanced security, and load balancing.
    • HAProxy ALOHA Hardware or Virtual Load Balancer: This product is a virtual load balancer or plug-and-play hardware constructed upon HAProxy Enterprise that is designed to support proxying at Layer 4 and Layer 7. It has a user-friendly GUI, simple deployment, and no limit on backend servers, making it a complete product for organizations desiring a reliable system to provide high-end load distribution for critical services.
    • HAProxy Enterprise Kubernetes Ingress Controller: This product is designed to facilitate smooth traffic flow into a Kubernetes cluster. It is able to automatically discover anomalies and changes in an organization's Kubernetes infrastructure and provide precise distribution of traffic to healthy pods, with no downtime caused by poor pod health or scaling changes. The product comes with an embedded WAF to optimize the security of an organization’s applications running in Kubernetes.
    • HAProxy Enterprise: This product is the enterprise-class edition of HAProxy offering a dynamic and sturdy code base with next-generation features, an enterprise suite of add-ons, professional services, and trusted support. 

      • Cluster-wide tracking and rate limiting
      • Advanced DDoS and bot management
      • Web application firewall
      • Reliable expert support
      • High performance modules
      • Device detection and geolocation
      • Real-time dashboard

    Reviews from Real Users

    Having the right load balancing solution – which is what HAProxy is – and protection in place gives organizations peace of mind.” - Nathanel S., Platform Architect at SES

    “I use HAProxy for individuals who can not buy low balancers. I built NFV in a box and send individuals a pathway into an HAProxy VM. The setup was not difficult; it usually takes a day to complete for a VPC. When it comes to pricing, HAProxy is free.” - Nasir O., Network & Cloud Architect at Koala Compute Inc.

    Sample Customers
    ABB Schweiz, Aer Lingus, AIDS Healthcare Foundation, Amnet Technology Solutions, Aramex International, Ascenty, Atos, Autodesk
    Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
    Booking.com, GitHub, Reddit, StackOverflow, Tumblr, Vimeo, Yelp
    Top Industries
    REVIEWERS
    Computer Software Company26%
    Financial Services Firm15%
    Manufacturing Company11%
    Healthcare Company8%
    VISITORS READING REVIEWS
    Computer Software Company15%
    Financial Services Firm13%
    Government9%
    Healthcare Company6%
    REVIEWERS
    Retailer14%
    Consumer Goods Company14%
    Computer Software Company14%
    Educational Organization14%
    VISITORS READING REVIEWS
    Computer Software Company20%
    Financial Services Firm9%
    Government9%
    Comms Service Provider8%
    REVIEWERS
    Financial Services Firm35%
    Retailer13%
    Computer Software Company13%
    Manufacturing Company13%
    VISITORS READING REVIEWS
    Computer Software Company19%
    Financial Services Firm11%
    Government9%
    Comms Service Provider8%
    Company Size
    REVIEWERS
    Small Business36%
    Midsize Enterprise18%
    Large Enterprise45%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise15%
    Large Enterprise63%
    REVIEWERS
    Small Business47%
    Midsize Enterprise24%
    Large Enterprise29%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise18%
    Large Enterprise54%
    REVIEWERS
    Small Business34%
    Midsize Enterprise32%
    Large Enterprise34%
    VISITORS READING REVIEWS
    Small Business24%
    Midsize Enterprise17%
    Large Enterprise59%
    Buyer's Guide
    Application Delivery Controllers (ADC)
    April 2024
    Find out what your peers are saying about F5, Citrix, HAProxy and others in Application Delivery Controllers (ADC). Updated: April 2024.
    767,847 professionals have used our research since 2012.