S/N Features Barracuda WAF FortiWeb WAF

Product should fall in leader or challenger quadrant in

1 Challenger Niche Player
Gartner Magic Quadrant report for Web Application

2 Protection against Generic attacks Yes Yes

3 Protection against generic Network based attacks Yes Yes

4 Protection against Network layer DOS attacks-- Yes Yes

Protection against Application layer DoS attacks /Live

DDOS Preotection volumetric floods, stealthy
application-targeted
5 Yes No
strikes, and role/authentication-type strategies—in
hope of discovering vulnerabilities in an
organization’s defense.

6 Protection against outbound data theft Yes Yes

7 Protection against policy evasion attacks Yes Yes

8 Control over file uploads Yes Yes

9 Support multiple deployment modes Yes Yes

10 WAF capabilities to protect unlimited Application. Yes No(Application base Limitation)

11 Protocol support Yes Yes

12 SSL offloading support Yes Yes
13 Application Load balancing Yes Yes
14 Protection against Known exploits Yes Yes

15 Prevent OS and web server Fingerprinting-- Yes No

16 Supports common Network Protocols Yes Yes

Application level DDoS protection. Also includes

17 Yes No
volumetric DDoS prevention for applications

18 Protection against Buffer overflows Yes Yes

19 Virtual patching Yes Yes
20 Anti-Web defacement Yes Yes

21 Protection against business logic attacks Yes Yes

Protection against Known server and database

22 Yes No
vulnerability--

23 Protection against OWASP top 10 security risks Yes Yes

24 Integration with
25 LDAP/RADIUS/AD Yes Yes
26 Support for Certificates Yes Yes

27 Application security testing tools (SAST, DAST, IAST)-- Yes No

28 SIEM Yes Yes

29 IAM-- Yes Yes
30 Vulnerability Management tools Yes Yes