Akamai App & API Protector vs. Apache JMeter vs. SonicWall Web Application Firewall

Akamai Kona Site Defender KSD, works fine for any website or mobile application (Native/JDK), it can be used as a WAF, a rate limiting tool, or a bot management tool all in one, plus you will get all the benefits of the Akamai CDN (Content distribution network) as well

Incentivized

JMeter is well suited for Java applications where the user can script the scenario once and make changes to accommodate for as many numbers of users for load test execution. The image and selection of any files or exporting files scenario is handled well.

It is less appropriate to test Ajax applications where it is required to script click per use.

Incentivized

I will recommend SonicWall depending of the size of the company and the knowledge of the personal is going to administer the firewall. I deploy those in small office settings where manageability was relative non existence.

Incentivized

• Web Security
• Bot managment
• Rate Control

Incentivized

• Easy of use - in generate load like HTTP requests, and processing/analyzing the responses. No coding is necessary at the basic level, just need to understand load testing and the infrastructure being tested.
• Automatic management of things like cookies to help with session state support - so you don't specifically have to worry about it or handle it
• Lots of testing/configuration options to suit your needs in making the right load generation (sampling requests), and analyzing the results, including any pre and post processing of the results first. Things like the Beanshell/BSF pre/post processors, response assertion, regular expression extractor, XPath extractor, CSV data set config
• There is a JMeter cloud service called BlazeMeter that I think would be useful for those that need to scale up high load without provisioning their own systems. I've not personally tried it though, but I recently attended a meetup presentation that highlighted nice useful features that BlazeMeter provides. One should evaluate the service if they are considering JMeter and need to expand beyond existing hardware resources.

• Content updates are automatic content lists of applications, URLs, virtual threats.
• Great visualization through graphics of traffic and threats.
• One of the best web content filters on the market.

Incentivized

• Custom rules might be hard to configure
• For some cases you will need to contact the Akamai team to adjust the backend
• Interface might feel laggy if used in a non-powerful PC

Incentivized

• Jmeter requires many tweaks with respect to its configuration file and thread properties. users need to edit theses files themselves. There could be some interface where we can edit this fields.
• Jmeter cannot handle more threads and hangs up when we increase the number of threads. This causes lot of inconvenience. In these situations, user can be notified that such change would be lead to slow performance so that user can do as required. The same appears when we try to view huge files on graph listener.
• Jmeter should optimize the read and write access to output csv since it acts as overhead to the I/O performance. This affects our test results for the application which we are testing.

• VPN implementation
• Geo block rules

Incentivized

Price, Wiki and user sharing. Having access to the information provided by the developers and other open source providers is key for me. The ability to share information and get answers directly is very important to success in software testing. And the price of this product currently is amazing. Too many companies charge way too much money for products that are far behind in their value and pertinence

The purpose related to performance and load testing through Apache JMeter works fine but the usability of the tool should be improved quite a lot. If someone starts with the Jmeter fresh without prior experience, they need to put more efforts in understanding the tool. The UI is not that great which is the main reason not to give high rating on usability.

Incentivized

I have been using JMeter for the last year. By using this tool, you can make sure the system will work under varied loads. It helps us to simulate real time scenarios by creating required virtual users and make sure the application will work under load. Perform load, stress, and stability testing using JMeter.

Incentivized

Technical support is a little expensive but it works. Any technical problem or not, SonicWall support helps in solving the problems. The SLA is fast and the service is also cordial, functional, and straight to the point. Support is essential to keep the tool always up-to-date with lists of malware, URLs, attacks, and others.

Incentivized

I have used LoadRunner and Silkperformer, and so far Jmeter turns out be the easiest to use of all these. While each of them have their own ROI, Jmeter can be picked by anyone in hours and start testing within a day. While with other tools, we need to get license, install them (takes a while) and setup tests and firewalls, etc.

Both products has their pro and cons. However in term of subscription and pricing for a small office, this offered better ROI as the office didn't want to spend too much and have something relative easy to manage.

Incentivized

• Fair Security investment
• An attack impact would be higher
• Support contract is not cheap

Incentivized

• Good ROI on improving the performance of the application.
• Finding issues in the performance.
• Benchmark the performance results.
• CON: Need skillset to create and maintain the scripts in Java.
• Scripts are reusable and it is executed by any user.
• Need Client and Server setup to execute the scripts.

Incentivized

• More accurate analysis with the best usage reports and graphs
• Reduction of virtual attacks from blocks

Incentivized