Most Helpful Review
Find out what your peers are saying about Barracuda Web Application Firewall vs. Fortinet FortiWeb and other solutions. Updated: September 2019.
372,185 professionals have used our research since 2012.
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
It's very simple and predictable, because Barracuda provides a vision of the current state of your application. It gives you an understanding of what is happening on your site and any attempts against you at your source. This is the main value that Web Application Firewall provides our company. These aspects are also the main reason for this documentation process.
The most valuable feature is the automatic content filtering.
The most valuable feature of this solution is the simplicity of configuration.
I find the solution very stable.
The volumetric DDoS defense is very good because I had a problem with a lot of volumetric DDoS attacks on my servers. After using Barracuda, those attacks have stopped and all the traffic is going smoothly to my servers and the system is working really well.
The updating and signature features are my primary use case for the solution. These features are beneficial to my organization.
It allows us to scale out to multiple phase servers.
We run it with no downtime, because it has good support.
FortiWeb offers machine learning in the latest product. This fixed many problems. There are no false negatives.
It's the extra security that is the most valuable feature. You have insight into your traffic. There are some great insights into what utilities hackers are trying to exploit. It blocks a lot of stuff from the internet.
The most valuable feature in this solution is the ability to disseminate between the user entering some wrong value to the field, and a suspicious actor trying to exploit some known vulnerability.
What we like about Fortinet FortiWeb is it has all the features. We use all of them, so we have to turn on all the options.
All the features that FortiGate contains are very suitable for our business. We work with other products in Fortinet, FortiWeb, FortiSandbox, FortiMail, and FortiCache. We use all UTM features like self-encryption, encryption, all UTM features.
When we had Cisco we had around thirty thousand entries on our firewalls. Now we are down to three thousand. Fortinet has a mechanism to detect all of your entries which are not used, and it can clean it up.
Security Fabric integration. This is really a value-added feature as FortiWeb can interact with the rest of the client’s Fortinet pack to provide an intelligent security layer like (FortiSIEM for central log management and correlation, FortiGate, FortiSandbox for malware analysis, etc.).
The most valuable feature is the web application firewall (WAF).
I think the main area for improvement in this product is learning it, as can be seen when comparing it to the F5 web application firewall. F5 has a very powerful learning phase when you start using your web application firewall against your site. Barracuda has something like this, but not with the same functionality from my point of view.
The usability of the interface could be improved.
I would like to see an improved capacity to store logs so that they will be available for a longer time.
The solution could use more reports.
I would like to see better controlling of the traffic.
I would suggest that someone implementing this product is knowledgeable in the IT field, and with the network needs. It is complex.
If you know nothing about networks, then you can't set it up.
It is not stable nor mature.
Fortinet FortiWeb is not scalable. You'll need more budget to change the hardware.
The solution is rather complicated. If you know what to do, it's not bad, but it's complicated for a first time user to configure the solution. What I'd like to improve are the custom signatures.
We would like to know more about the integration with the hardware or security products, such as Gemalto, because we need to move to that point.
Fortinet FortiWeb needs to improve the way it's configured. Common services like publishing exchange should be done in one click only.
New releases and old releases have some bugs, some features do not work as good as we want but every new release the Fortinet team fixes up problems.
I would like to have an antivirus option.
FortiWeb does not exist in a cloud-based form. Its only available for deployment as a virtual appliance on AWS and Azure IaaS platforms. Because of the trend to WAF environments, it would be good to have it as a SaaS. Also, FortiWeb would be more competitive if it combined WAF and DDoS protection.
Their support needs improvement.
Pricing and Cost Advice
Barracuda costs us $8,000 per year. Barracuda costs $20,000 for a full subscription, when you try to protect multi-site infrastructure, in different geographical zones and for different data centers. If you have only one site, Barracuda will be cheaper.
Our licensing fees are paid annually and the cost is between €600 and €800 (approximately $665.00 to $885.00 USD).
They have competitive pricing.
The pricing is less compared to other web applications.
The solution gives us the best price to performance ratio.
The license cost depends on the size of the box or the size of the solution. It can go from €200 Euros to a few hundred thousand Euros a year depending on your size.
The pricing is reasonable.
It really pays off to buy licences for multiple years.
Keep a loose margin between your actual bandwidth and the product sizing when using hardware appliances. Only virtual machines are upgradable to larger sizes.
Cheaper than others.
FortiWeb can be purchased in VM mode for a lower price and the same features.
out of 38 in Web Application Firewall (WAF)
Average Words per Review
out of 38 in Web Application Firewall (WAF)
Average Words per Review
Compared 24% of the time.
Compared 12% of the time.
Compared 11% of the time.
Compared 26% of the time.
Compared 21% of the time.
Compared 6% of the time.
Barracuda Web Application Firewall is the ideal solution for organizations looking to protect web applications from data breaches and defacement. With the Barracuda Web Application Firewall, administrators do not need to wait for clean code or even know how an application works to secure their applications. Organizations can ensure robust security with a Barracuda Web Application Firewall hardware or virtual appliance, deployed either on-premises or in the cloud.
FortiWeb is a web application firewall (WAF) that protects hosted web applications from attacks that target known and unknown exploits. Using multi-layered and correlated detection methods, FortiWeb defends applications from known vulnerabilities and from zero-day threats.
Learn more about Barracuda Web Application Firewall
Learn more about Fortinet FortiWeb
|Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar||Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG|
No Data Available
Financial Services Firm30%
Comms Service Provider20%
Mining And Metals Company10%
Software R&D Company37%
Comms Service Provider16%
Financial Services Firm8%