Hi everyone! I'm helping a friend who runs a regional retail chain with about 50 physical stores. Their main online presence is an e-commerce site, and they're finally looking at a dedicated WAF.
We're pretty new to this level of security. We've been looking at Imperva and Fortinet FortiWeb. The pricing models are already a bit overwhelming.
My main questions:
* For a retail setup, is one known to be significantly easier to manage day-to-day? We don't have a huge security team.
* I've heard FortiWeb might integrate more easily if you have other Fortinet gear (which they don't, currently). Is Imperva's cloud management a big advantage for distributed stores?
* Any gotchas with either when it comes to things like PCI compliance or handling seasonal traffic spikes?
Just looking for some real-world pros and cons from people who might have used both. Thanks in advance!