Amazon Web Services offers AWS WAF (web application firewall) to protect web applications from malicious behavior that might impede the applications functioning and performance, with customizable rules to prevent known harmful behaviors and an API for creating and deploying web security rules.
$0.60
per 1 million requests
Sophos SG Firewall Appliances
Score 8.6 out of 10
N/A
Sophos SG Firewall Appliances are designed to provide optimal protection for organizations of all sixes from small remote offices, to global organizations requiring high-availability and
N/A
Pricing
AWS WAF
Sophos SG Firewall Appliances
Editions & Modules
Resource Type - Request
$0.60
per 1 million requests
Resource Type - Rule
$1.00
per month (prorated hourly)
Resource Type - Web ACL
$5.00
per month (prorated hourly)
No answers on this topic
Offerings
Pricing Offerings
AWS WAF
Sophos SG Firewall Appliances
Free Trial
No
No
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
—
—
More Pricing Information
Community Pulse
AWS WAF
Sophos SG Firewall Appliances
Features
AWS WAF
Sophos SG Firewall Appliances
Firewall
Comparison of Firewall features of Product A and Product B
AWS WAF
-
Ratings
Sophos SG Firewall Appliances
9.3
10 Ratings
7% above category average
Identification Technologies
00 Ratings
9.510 Ratings
Visualization Tools
00 Ratings
8.310 Ratings
Content Inspection
00 Ratings
9.510 Ratings
Policy-based Controls
00 Ratings
9.210 Ratings
Active Directory and LDAP
00 Ratings
9.310 Ratings
Firewall Management Console
00 Ratings
8.510 Ratings
Reporting and Logging
00 Ratings
9.310 Ratings
VPN
00 Ratings
9.810 Ratings
High Availability
00 Ratings
9.510 Ratings
Stateful Inspection
00 Ratings
9.510 Ratings
Proxy Server
00 Ratings
9.58 Ratings
Best Alternatives
AWS WAF
Sophos SG Firewall Appliances
Small Businesses
Cloudflare
Score 8.9 out of 10
pfSense
Score 8.8 out of 10
Medium-sized Companies
F5 Big-IP Advanced WAF
Score 9.4 out of 10
Quantum Firewalls and Security Gateways
Score 9.3 out of 10
Enterprises
F5 Big-IP Advanced WAF
Score 9.4 out of 10
Palo Alto Networks Virtualized Next-Generation Firewalls - VM Series
Well Suited: 1. To prevent DDOS attacks: AWS WAF has a lot of managed rules to prevent DDOS attacks based on traffic origination from a particular IP or IP reputation etc. 2. To rate-limit requests: Well it sounds familiar like preventing DDOS attacks, but it can also be used to rate-limit requests originating from the same IP address. We have used this feature so that we can test multiple failure scenarios for our application. 3. To prevent Data crawling: The BOT control feature allows us to prevent BOTs from crawling data on our websites. Not Suited: 1. To integrate applications outside of AWS Cloud: As I mentioned in my previous comments, this type of integration requires a custom implementation of another AWS resource.
It is well-suited for all sizes of organizations. It will help them to safeguard their network from various cyber threats like ransomware, phishing, malware, etc. It will provide them with many features like deep packet inspection, web filtering, application control, etc. in one place. It will also help them optimize bandwidth usage
Protect any application against the most common attacks.
Provides better visibility of web traffic.
It allows us to control the traffic in different ways in which it is enabled or blocked through the implementation of security rules developed personally according to our needs.
It is able to block common attacks such as SQL code injection.
It allows defining specific rules for applications, thus increasing web security as they are developed.
AWS WAF is a bit costly if used for single applications.
they should provide attack-wise protection, like if my certain type of application is vulnerable to DDOS then I should be able to buy WAF, especially for that attack.
We have been using AWS WAF for the past 3 years in front of our websites. We find it useful in preventing data crawling, DDOS attacks, etc on our websites, and hence we are going to use it in the future as well. AWS WAF is one of the best Firewalls in business.
I rated Sophos SG Firewall a 9 out of 10 because it has consistently provided strong and reliable security for our organization over the past five years. Its unified features like IPS, VPN, web filtering, and reporting make it easy to manage and highly effective in protecting our network. The interface is user-friendly, and support from Sophos has been timely and helpful. I deducted one point only because deeper cloud-native integration and more advanced analytics would further enhance its future readiness.
The product is highly scalable. It is easy to configure the rules and thereby helps us to mitigate many vulnerabilities. The interface and programming of the firewall provisions were easy to setup. Amazon clearly spent a lot of time figuring this out and perfecting it. It allows users to do customized configurations based on their needs. It provides protection against a number of security issues like XSS, SQL injection, etc. I would definitely recommend this for protecting your infra as you scale, since this basically protects and filters all requests hitting your application server.
Management could use some improvements. Sophos management and workflows has always been designed by Engineers for Engineers. They do not always follow logical workflows in the real world. Once you figure this out it is easier to use but no where as smooth as many other products on the market.
I rated the availability of Sophos SG Firewall a 10 because, in our experience, it has been highly reliable and available whenever we needed it. We have not faced any significant application errors or unplanned outages. The system has been robust, ensuring continuous protection and minimal downtime, even during firmware updates or configuration changes. Its stability and uptime have been consistent, allowing us to trust it as a critical part of our network security infrastructure.
I rated the performance of Sophos SG Firewall a 10 because it consistently delivers fast and reliable results. Pages load quickly, reports are generated within a reasonable time frame, even for complex queries, and overall system responsiveness is excellent. Additionally, the firewall integrates seamlessly with other software and systems without causing any noticeable slowdowns or performance degradation. Its optimized performance has contributed to smooth network operations and minimal disruption to other services, making it a highly reliable solution for our needs.
If you're intending to use AWS WAF, I would say that you absolutely should sign up for support. AWS Support is excellent and they can help you in a really good way to solve your issues.
The biggest selling point for sophos is their vendor support. Those guys put a smile on our faces. There are multiple ways you can contact their support like chat, or telephone or email. They are very responsive and they do have very knowledgable and patient support staff. We have raised tickets at all odd hours and they have been addressed correctly
I rated the in-person training a 10 because the sessions were thorough, engaging, and well-structured. The trainers had a deep understanding of the Sophos SG Firewall and were able to clearly explain both basic and advanced features. The hands-on approach allowed us to directly apply what we were learning, which made the training highly practical and valuable. Additionally, the trainers were available to address specific questions and provide real-time troubleshooting during the sessions, making it an overall positive experience.
I was very satisfied with the implementation of the Sophos SG Firewall, giving it a rating of 9. One key insight from the implementation process is that while the setup was relatively straightforward, it’s crucial to carefully plan the network configuration in advance, especially for high availability (HA) and VPN setups. Ensuring compatibility with existing infrastructure and performing thorough testing before going live can significantly reduce issues later on. Additionally, leveraging the built-in wizards and configuration guides helped streamline the process, but hands-on testing was essential to ensure everything worked as expected in our specific environment.
Easy of use. Setup and configuration is fairly quick. There are the usual advantages of it being a cloud solution where you can buy into the solution, configure it and set it up and get it up and running. If you are already a subscriber to AWS, having a native service has its advantages.
We use Sophos in conjunction with WatchGuard, for an extra added level of security. Sophos is a little more sophisticated and complicated but they work well together as added layers of protection against most cyber threats.
I rated the contract terms and pricing structure a 9 because, overall, they were fair and competitive. The unit pricing for the Sophos SG Firewall was reasonable considering the features and performance offered, and the billing frequency was flexible, allowing us to align it with our budget cycles. However, one area that could be improved is the pricing for multi-year commitments—there could be more significant discounts or additional incentives for long-term agreements. Overall, the structure worked well for our needs, but some adjustments could make it even more cost-effective.
I rated the product's scalability a 9 because Sophos SG Firewall offers excellent flexibility and can be easily scaled across multiple departments and sites. It provides the ability to add more firewalls, manage them centrally, and integrate with other security solutions as our network grows. However, the only reason I didn’t give it a perfect score is that, in some complex environments, managing a large-scale deployment with many firewalls can become a bit challenging, especially in terms of centralized management and monitoring. Despite this, the overall scalability is highly effective for most use cases.
I rated the professional services a 10 because the support we received was outstanding. The team was highly skilled, responsive, and provided tailored solutions to meet our specific needs. They guided us through the entire implementation process, from setup to optimization, ensuring that the firewall was configured efficiently and securely. Their expertise helped us avoid potential pitfalls and ensured a smooth deployment, which greatly contributed to the success of our project.
Implementing this AWS service has been really favorable because when creating custom rules we give more specific protection to our applications against vulnerabilities that cause them to be consuming other resources or running with errors.
It allows us to control the traffic of our business applications, which is really favorable, given that in this way we can decide that you can access them and not.
It is extremely advantageous that we can establish rules in a centralized way since it saves time, as well as it allows us to protect several applications at the same time by reusing the rules established above.
It allows you to save time and money because we only pay for what is used.