Hi Sotir - The WAF in FortiGate is not as robust a solution as our FortiWeb WAF. FortiGate provides basic "checklist" support and doesn't have things such as signature subscriptions, policy customizations and behavioral threat detection. The FortiGate WAF should only be used for the most basic of WAF functionality and compliance. If real web-application is essential, a dedicated WAF like FortiWeb is the only way to go.
