If you were talking to someone whose organization is considering Fortinet FortiWeb, what would you say?
How would you rate it and why? Any other tips or advice?
While I have not done comprehensive testing with FortiWeb, I have no complaints so far. My advice for anybody who is considering this product is that if they are not very advanced in terms of technical training, this product is a good choice because it is very simple to implement. I would rate this solution an eight out of ten.
The type of product you get depends on what you want to protect, how you want to protect it, and how many people will be accessing FortiWeb. What we have now is working fine. I would rate FortiWeb as an eight (out of 10).
Be sure that the security is correctly configured and all the attack patterns are covered. Make sure to do an independent assessment of the security. I would rate it a nine out of ten. We are very satisfied with it. We have an issue when the underlying web protected generates a logout and we want the authentication portal to recognize that the application has been logged out. When the underlying application generates a logout, the portal does not recognize the logout. I would like a way for the FortiWeb portal to easily recognize the portal.
I would rate this solution a seven out of ten.
In the version of Fortinet FortiWeb that we have, it does not include the scanner. We cannot access every feature. If you have all the popular products, you can use the system perfectly to connect everything. Fortinet can improve the security firebase in support for HTTPS and the CPU with additional configurations. On a scale from 1 to 10, I would rate Fortinet FortiWeb a two.
Every external solution acceptable for work will use FortiWeb. We do have three or four FortiWeb solutions now and if there is anything we need to share through the internet, it's going to be through FortiWeb. In terms of advice, I'd say take a good look at the support side of the help documents. There a very good document cycle on the Fortinet website. There's a lot of information. Get to know the solution. I would rate this solution eight out of 10.
The interface has been a pain in the past but now with the later version, 2.2, the user behavior analysis has improved. Before when you want to deploy an application, for example, you needed to have a login page and make sure to search for the user behavior and all the interactions. That way, you could generate flexible usage for that application. Now that's automated, so apart from that, there's no huge report or feature that we would like to improve. I would rate this product a ten out of ten.
If you are looking to be partner with Fortinet, you have to buy licenses. Not even VMs are free to partners. Fortiweb in essence, needs to become part of Fortigate. Fortinet is not suitable for SMB customers since you have to deploy several boxes in order to get thing right. Also, speed of deployment is important and that isn't fast with many boxes. On a scale from one to ten, I would rate this product a solid seven. It's a good product.
I would rate it a seven out of ten. A seven and not a ten because of the antivirus issue.
I would rate it an eleven out of ten.
I rate FortiWeb at eight out of 10 because it is good at what it does but I think it could do more, like combining DDoS protection.