Fortinet Managed Rules for AWS WAF - API Security

What do you like best about the product?

The ready-to-use managed rules and easy AWS WAF integration are the most valuable features for me. They save time in rule management and provide reliable protection against common web threats. The interface is simple to manage, and Fortinet support is helpful when needed. Overall, it improves security while reducing the effort required for daily administration.

What do you dislike about the product?

The rules sometimes need fine-tuning for specific applications, especially when handling false positives. More detailed rule explanations and easier customization would make troubleshooting and policy tuning simpler.

What problems is the product solving and how is that benefiting you?

It reduces the effort of creating and maintaining WAF security rules manually. The managed rules provide ready-to-use protection against common web attacks, helping improve security while saving time on daily WAF management.

What do you like best about the product?

I like Fortinet Managed Rules for AWS WAF because of its easy setup and the ready-made security rules that provide reliable protection against common web attacks like SQL injection and XSS. The consistent protection and easy rule management are great, as they reduce the need for manual security configuration. I particularly value the OWASP protection because it's easy to manage and reduces manual configuration. Overall, the initial setup was fairly easy and straightforward, requiring just a little configuration.

What do you dislike about the product?

The pricing could be more affordable, and the configuration could be simpler for new users. A simpler setup wizard, clearer step-by-step guidance, and recommended default rules would make configuration easier for new users.

What problems is the product solving and how is that benefiting you?

I use Fortinet Managed Rules for AWS WAF to protect my web apps from common attacks and reduce manual security configuration time. It offers easy setup with ready-made security rules for reliable protection.

What do you like best about the product?

I like how easy it is to deploy and manage the rules without having to build and maintain everything from scratch. It saves me time and makes AWS WAF management much simpler overall.

What do you dislike about the product?

The main downside is that some rules need fine-tuning to reduce false positives. It would also be helpful to have clearer, more detailed visibility into why specific requests are being blocked, along with easier customization options for individual rules.

What problems is the product solving and how is that benefiting you?

Fortinet Managed Rules for AWS WAF help protect our web applications from common attacks, without requiring us to manually create and maintain every security rule ourselves.

I use the solution as a firewall for our customer portal.

The solution provides peace of mind with website protection.

The solution offers IP Protection, which I find very valuable.

There is room for improvement in providing better access to updates, more seamless renewals, and the ability to rename objects.

I have used the solution for 12 years.

I did not use any previous solutions.

Inital setup was fairly involved, requiring multiple sessions with Fortinet support.

It is probably best to bring your own license (BYOL).

I did not consider any alternate solutions.

The renewals are not seamless, and although updates are advertised via email from AWS, actual software updates require contacting support for access.

Public Cloud

Amazon Web Services (AWS)

What do you like best about the product?

Thing I like most about Fortinet WAF is that it takes away manual management and maintenance of rules. The entire process of writing and testing WAF signatures

What do you dislike about the product?

It takes away the freedom to edit or add to the fine-tuned individual signature parameter, and the recurring subscription cost also puts pressure on our budget.

What problems is the product solving and how is that benefiting you?

1. It removes the need for continuous rule management for our team.
2. We don’t have to manage dedicated infrastructure.
3. Lastly, it saves time by keeping threat defence up to date.

What do you like best about the product?

I like that Fortinet Managed Rules for AWS WAF is very intuitive and that we can manage groups and users precisely thanks to its integration with Azure AD. Additionally, we are Fortinet partners and receive dedicated discounts, which is an added advantage.

What do you dislike about the product?

nothing in particular

What problems is the product solving and how is that benefiting you?

Fortinet Managed Rules for AWS WAF helps me manage user access integrated with Azure AD, keeping us compliant with NIS2 regulations, and it's intuitive, allowing precise group and user management.

What do you like best about the product?

1.Fast to deploy — subscribe on Marketplace, attach to the existing web ACL, running same day

2.No rule writing or tuning required to get OWASP Top 10 coverage FortiGuard Labs handles signature updates, so we're not chasing new CVEs

3.Stays native to AWS — same console, CloudWatch metrics, sampled logs, Terraform workflow

4.Rule groups are separable (OWASP, SQLi/XSS, bots, API), so we only pay for what we use

5.COUNT mode let us validate against real traffic before blocking Strong coverage-to-effort ratio for a small team with no dedicated WAF engineer

What do you dislike about the product?

1.False positives on legitimate traffic (file uploads, rich-text fields, complex query strings) take trial and error to isolate

2.Documentation is lighter than Fortinet's on-prem WAF products; limited guidance on which rule group to pick for a given workload

What problems is the product solving and how is that benefiting you?

1.Gave us real OWASP Top 10 coverage without anyone writing or maintaining rule logic — we simply didn't have the headcount for that

2.FortiGuard handles signature updates, so new CVEs get covered faster than we could virtual-patch ourselves

3.Satisfies the WAF control for compliance and customer security questionnaires with something documented and defensible

What do you like best about the product?

Because it allows creating custom rules and having better control of all processes. This makes it easier to manage the platform. It is a great differentiator of the product.

What do you dislike about the product?

It allows improving performance and minimizing impact, depending on the platform being used. However, it has a significant price and the return on investment of the product, the support

What problems is the product solving and how is that benefiting you?

With AI, we can solve various problems and, thanks to its support for integrations, it facilitates the optimization of all the integrations we need to implement for what is to come.

What do you like best about the product?

I like how Fortinet Managed Rules for AWS WAF helps me manage both my internal and public domain requests. It effectively stops unauthorized access and ensures only genuine requests reach the server. I appreciate its capability to monitor my payment system and protect my entire subdomains. The setup and configuration process is very easy, and I find the log analysis feature quite useful.

What do you dislike about the product?

Nothing

What problems is the product solving and how is that benefiting you?

I use Fortinet Managed Rules for AWS WAF to manage internal and public domain requests, stop unauthorized access, and protect subdomains. It monitors my payment system effectively. The setup and configuration are also very easy, making log analysis straightforward.

What do you like best about the product?

The biggest advantage is the combination of strong security coverage and ease of management. The preconfigured rules make it much easier to protect AWS workloads against common threats such as SQL injection, XSS, and known exploits without having to build and maintain everything from scratch. The integration with AWS WAF is straightforward, and the managed updates help keep protection aligned with new threats. Overall, it saves time while providing an additional layer of security for web applications and APIs.

What do you dislike about the product?

The main downside is that the rules can sometimes require tuning to avoid false positives, especially for applications with custom traffic patterns. It would also be helpful to have more detailed documentation and clearer guidance for fine-tuning rules for specific workloads. Pricing can also become a consideration as the number of protected resources grows.

What problems is the product solving and how is that benefiting you?

Fortinet Managed Rules for AWS WAF helps us protect our web applications and APIs from common attacks without having to create and maintain WAF rules ourselves. It provides consistent security coverage against threats like SQL injection, XSS, and other known exploits while reducing the time we spend on security rule management. This lets our team focus more on application and infrastructure work while still maintaining a strong security posture.