AWS WAF vs. Barracuda Web Application Firewall

Most suited if you have a very strong presence in AWS. It is natively available as an add on service. You can also track the costs overtime based on usage. There is still a lot of improvement on the features and the user interface that can be implemented over time

Incentivized

Easy to use and reliable, with very little maintenance required and zero downtime to date. For the education sector, ease of use is hugely important as IT Managers/Technicians are often "Jack of all trades" with a good, broad general knowledge but perhaps lacking specific expertise in certain aspects. Being provided with easy-to-follow tutorials and instructions has been very useful in setting up and configuring the firewall, especially as my background is more in desktop support.

Incentivized

• Protect any application against the most common attacks.
• Provides better visibility of web traffic.
• It allows us to control the traffic in different ways in which it is enabled or blocked through the implementation of security rules developed personally according to our needs.
• It is able to block common attacks such as SQL code injection.
• It allows defining specific rules for applications, thus increasing web security as they are developed.

Incentivized

• Email Filtering and Inspection
• Web-based intrusions and attacks
• Traffic Patterns

• AWS WAF is a bit costly if used for single applications.
• they should provide attack-wise protection, like if my certain type of application is vulnerable to DDOS then I should be able to buy WAF, especially for that attack.
• CLI tool to test in offline mode if possible.

Incentivized

• Reports could be somewhat confusing.
• The initial setup was a little difficult for our Security Admin team.

Incentivized

The product is highly scalable. It is easy to configure the rules and thereby helps us to mitigate many vulnerabilities. The interface and programming of the firewall provisions were easy to setup. Amazon clearly spent a lot of time figuring this out and perfecting it. It allows users to do customized configurations based on their needs. It provides protection against a number of security issues like XSS, SQL injection, etc. I would definitely recommend this for protecting your infra as you scale, since this basically protects and filters all requests hitting your application server.

Incentivized

If you're intending to use AWS WAF, I would say that you absolutely should sign up for support. AWS Support is excellent and they can help you in a really good way to solve your issues.

Incentivized

The Barracuda Web Application Firewall is easy to use. Support from Barracuda is great also. Load Balancing of the Web Application Firewall is also nice. This allows you to do maintenance or have large loads for the end-user. Threat monitoring of our network and traffic coming into our services within our cloud solution.

Incentivized

Unlike these other AWS tools, WAF provides real-time traffic control, rules that can be customized according to the needs of the user, and is based on an implementation in the cloud which avoids the use of memory on computers as well as an account with a very affordable cost for any user or company

Incentivized

We have used SonicWalls and WatchGuard firewall appliances neither are even remotely close to the Barracuda Web Application Firewall. In addition, Barracuda support is fantastic. Throw in the 4 year (free) refresh cycle and there is no reason we would even consider the other two again (at least for the foreseeable future).

Incentivized

• The overall security of the web application increased effectively after deploying AWS WAF
• No negative impacts were seen in the business
• The developers were more confident in the overall security model of the web application being developed and it was easy to integrate WAF into the existing system as the application was also using AWS platform

Incentivized

• Negative impact: a default port was open and missed by one of our techs.
• Positive impact: it protects us everyday now that we have it locked down.