TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    AWS WAF

    Score7.8 out of 10
    N/AAmazon Web Services offers AWS WAF (web application firewall) to protect web applications from malicious behavior that might impede the applications functioning and performance, with customizable rules to prevent known harmful behaviors and an API for creating and deploying web security rules.

    $0.60

    per 1 million requests

    Zscaler Internet Access

    Score8.9 out of 10
    N/AZscaler Internet Access™ (ZIA) is a secure web gateway (SWG), delivering cloud native cyberthreat protection and zero trust access to the internet and SaaS apps.N/A
    Pricing
    AWS WAFZscaler Internet Access
    Editions & Modules
    Resource Type - Request
    $0.60
    per 1 million requests
    Resource Type - Rule
    $1.00
    per month (prorated hourly)
    Resource Type - Web ACL
    $5.00
    per month (prorated hourly)
    No answers on this topic
    Offerings
    Pricing Offerings
    AWS WAFZscaler Internet Access
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    Community Pulse
    AWS WAFZscaler Internet Access
    Considered Both Products
    Amazon AWS
    No answer on this topic
    Zscaler
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    6 Answers
    99%
    Would buy again
    284 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    6 Answers
    98%
    Delivers good value for the price
    245 Answers
    Happy with the feature set
    83%
    Happy with the feature set
    5 Answers
    99%
    Happy with the feature set
    284 Answers
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    5 Answers
    97%
    Lived up to sales and marketing promises
    207 Answers
    Implementation went as expected
    100%
    Implementation went as expected
    6 Answers
    93%
    Implementation went as expected
    227 Answers
    Features
    AWS WAFZscaler Internet Access
    Identity Management
    Comparison of Identity Management features of AWS WAF and Zscaler Internet Access
    Feature
    AWS WAF
    -
    Ratings
    Zscaler Internet Access
    5.0
    2 Ratings
    55% below category average
    Multi-Factor Authentication00 Ratings5.02 Ratings
    Endpoint Security
    Comparison of Endpoint Security features of AWS WAF and Zscaler Internet Access
    Feature
    AWS WAF
    -
    Ratings
    Zscaler Internet Access
    10.0
    2 Ratings
    11% above category average
    Endpoint Detection and Response (EDR)00 Ratings10.02 Ratings
    Threat Intelligence
    Comparison of Threat Intelligence features of AWS WAF and Zscaler Internet Access
    Feature
    AWS WAF
    -
    Ratings
    Zscaler Internet Access
    8.5
    216 Ratings
    7% above category average
    Network Analytics00 Ratings8.7217 Ratings
    Threat Recognition00 Ratings8.3214 Ratings
    Vulnerability Classification00 Ratings8.5191 Ratings
    Automated Alerts and Reporting00 Ratings8.2205 Ratings
    Threat Analysis00 Ratings8.8203 Ratings
    Threat Intelligence Reporting00 Ratings8.5199 Ratings
    Automated Threat Identification00 Ratings8.5192 Ratings
    Zero Trust Security
    Comparison of Zero Trust Security features of AWS WAF and Zscaler Internet Access
    Feature
    AWS WAF
    -
    Ratings
    Zscaler Internet Access
    8.9
    262 Ratings
    4% above category average
    Continuous Verification00 Ratings8.7245 Ratings
    Secure Web Gateways00 Ratings9.0236 Ratings
    Network Flow Control00 Ratings8.1217 Ratings
    Network Traffic Analysis00 Ratings8.8219 Ratings
    Segmentation Leveraging00 Ratings8.6194 Ratings
    Admin Access Control00 Ratings9.1230 Ratings
    Network Data Encryption00 Ratings8.8207 Ratings
    Network Topology Mapping00 Ratings10.02 Ratings
    Best Alternatives
    AWS WAFZscaler Internet Access
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    F5 Big-IP Advanced WAF
    Score9.4 out of 10
    No answers on this topic
    Enterprises
    F5 Big-IP Advanced WAF
    Score9.4 out of 10
    Forescout Vistaro Platform
    Score6.7 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    AWS WAFZscaler Internet Access
    Likelihood to Recommend
    9.0
    (9 ratings)
    9.0
    (295 ratings)
    Likelihood to Renew
    9.0
    (1 ratings)
    8.4
    (6 ratings)
    Usability
    9.0
    (2 ratings)
    8.8
    (279 ratings)
    Availability
    -
    (0 ratings)
    7.3
    (1 ratings)
    Performance
    -
    (0 ratings)
    5.5
    (1 ratings)
    Support Rating
    9.0
    (2 ratings)
    7.2
    (10 ratings)
    Online Training
    -
    (0 ratings)
    7.3
    (1 ratings)
    Implementation Rating
    -
    (0 ratings)
    8.3
    (2 ratings)
    Configurability
    -
    (0 ratings)
    8.3
    (2 ratings)
    Product Scalability
    -
    (0 ratings)
    7.3
    (1 ratings)
    Vendor post-sale
    -
    (0 ratings)
    8.3
    (3 ratings)
    Vendor pre-sale
    -
    (0 ratings)
    7.3
    (2 ratings)
    User Testimonials
    AWS WAFZscaler Internet Access
    Likelihood to Recommend
    Amazon AWS
    Well Suited: 1. To prevent DDOS attacks: AWS WAF has a lot of managed rules to prevent DDOS attacks based on traffic origination from a particular IP or IP reputation etc. 2. To rate-limit requests: Well it sounds familiar like preventing DDOS attacks, but it can also be used to rate-limit requests originating from the same IP address. We have used this feature so that we can test multiple failure scenarios for our application. 3. To prevent Data crawling: The BOT control feature allows us to prevent BOTs from crawling data on our websites. Not Suited: 1. To integrate applications outside of AWS Cloud: As I mentioned in my previous comments, this type of integration requires a custom implementation of another AWS resource.
    Incentivized
    Read full review
    Zscaler
    I feel the product is very good to set up basic standards and go beyond that in many aspects. However, due to being sometimes too simple, it limits the ability to do some other complex changes. Having the ability to do both would be ideal for some, if not all, of the products within Zscaler Internet Access. A simple setup to have it stand-up, and more advanced settings for those more experienced.
    Incentivized
    Read full review
    Pros
    Amazon AWS
    • Protect any application against the most common attacks.
    • Provides better visibility of web traffic.
    • It allows us to control the traffic in different ways in which it is enabled or blocked through the implementation of security rules developed personally according to our needs.
    • It is able to block common attacks such as SQL code injection.
    • It allows defining specific rules for applications, thus increasing web security as they are developed.
    Incentivized
    Read full review
    Zscaler
    • Provides a secure VPN connection point for endpoint connectivity.
    • Provides the VPN connectivity in a fast and reliable connection state.
    • Very dependable, once connected the connection stays up and there's no fuss.
    • Very good at letting you know when you are not authenticated.
    • Very easy to authenticate and regain access when your session times out.
    Incentivized
    Read full review
    Cons
    Amazon AWS
    • AWS WAF is a bit costly if used for single applications.
    • they should provide attack-wise protection, like if my certain type of application is vulnerable to DDOS then I should be able to buy WAF, especially for that attack.
    • CLI tool to test in offline mode if possible.
    Incentivized
    Read full review
    Zscaler
    • ZS CLI support to turn off ZIA and ZDX service specifically on mac.
    • Better visibility into failed posture devices, including a timeline and the reason the posture failed (This is about the Zscaler mobile portal: Enrolled devices --> Failed posture devices).
    Incentivized
    Read full review
    Likelihood to Renew
    Amazon AWS
    We have been using AWS WAF for the past 3 years in front of our websites. We find it useful in preventing data crawling, DDOS attacks, etc on our websites, and hence we are going to use it in the future as well. AWS WAF is one of the best Firewalls in business.
    Incentivized
    Read full review
    Zscaler
    While Zscaler Internet Access (ZIA) delivers critical value in cloud security and RBI compliance, I rate renewal likelihood 7/10 due to evolving needs versus platform limitations. Below is my rationale:
    Key Gaps:
    1. Advanced Threat Costs:
    ZIA’s add-ons (e.g., Advanced DLP, Sandboxing) incur 35%+ cost premiums – straining budgets as transaction volumes (UPI/iMobile) grow 50% YoY.
    2. API Banking Scalability:
    ZIA’s API rate limits throttle real-time policy sync during UPI peaks (10K+ TPS), forcing workarounds for finacle integrations.
    3. RBI Future-Proofing:
    Limited native support for upcoming digital rupee (CBDC) security rules requires custom development, increasing compliance overhead.
    Incentivized
    Read full review
    Usability
    Amazon AWS
    The product is highly scalable. It is easy to configure the rules and thereby helps us to mitigate many vulnerabilities. The interface and programming of the firewall provisions were easy to setup. Amazon clearly spent a lot of time figuring this out and perfecting it. It allows users to do customized configurations based on their needs. It provides protection against a number of security issues like XSS, SQL injection, etc. I would definitely recommend this for protecting your infra as you scale, since this basically protects and filters all requests hitting your application server.
    Incentivized
    Read full review
    Zscaler
    Getting started was pretty straightforward. We can tell the product is way more robust than we are using it. It started as a replacement for previous DNS-blocking content filtering, but we're exploring how this will add value with an upcoming DLP redesign and with traffic optimization at some of our remote sites with severe bandwidth limits.
    Incentivized
    Read full review
    Performance
    Amazon AWS
    No answers on this topic
    Zscaler
    There are often performance issues reported
    Incentivized
    Read full review
    Support Rating
    Amazon AWS
    If you're intending to use AWS WAF, I would say that you absolutely should sign up for support. AWS Support is excellent and they can help you in a really good way to solve your issues.
    Incentivized
    Read full review
    Zscaler
    Zscaler's ZIA support is quick and knowledgable. They respond within 1-2 hours of you submitting your ticket. They are very thorough and are typically ready to jump on a live troubleshooting session. Our ZIA platform and how we use is it unique so at times tickets can be open for weeks but we alway get quality support compared to other unrelated product support in our enterprise
    Incentivized
    Read full review
    Implementation Rating
    Amazon AWS
    No answers on this topic
    Zscaler
    good the engineer give excellent support and eplanation
    Incentivized
    Read full review
    Alternatives Considered
    Amazon AWS
    Easy of use. Setup and configuration is fairly quick. There are the usual advantages of it being a cloud solution where you can buy into the solution, configure it and set it up and get it up and running. If you are already a subscriber to AWS, having a native service has its advantages.
    Incentivized
    Read full review
    Zscaler
    The overall user community and scope of supportability outweighed the others on our short list. Netskope was a close second, but the risk, though small, was greater than that of bringing Zscaler aboard. We were looking for a mature, well-supported, highly functional, and fine-grained solution that met all our user and information security requirements.
    Incentivized
    Read full review
    Return on Investment
    Amazon AWS
    • Implementing this AWS service has been really favorable because when creating custom rules we give more specific protection to our applications against vulnerabilities that cause them to be consuming other resources or running with errors.
    • It allows us to control the traffic of our business applications, which is really favorable, given that in this way we can decide that you can access them and not.
    • It is extremely advantageous that we can establish rules in a centralized way since it saves time, as well as it allows us to protect several applications at the same time by reusing the rules established above.
    • It allows you to save time and money because we only pay for what is used.
    Incentivized
    Read full review
    Zscaler
    • I would say it has a very good ROI, as whenever someone can't access something, they submit a ticket to our network engineer, and within minutes, the site is safely added to ZIA with best-practice configurations. After seeing a little of the UI from the Zenith event, it seems very user-friendly to control these policies.
    Incentivized
    Read full review
    ScreenShots

    Zscaler Internet Access Screenshots

    Screenshot of an overview of Zscaler Internet Access (ZIA), a cloud native security service edge (SSE) solution that builds on a decade of secure web gateway leadership. Offered as a scalable SaaS platform through Zscaler's security cloud, it replaces legacy network security solutions, preventing advanced attacks and data loss with a comprehensive zero trust approach. ZIA is integrated into the Zscaler Zero Trust Exchange™ to provide superior defense-in-depth, secure connectivity, end user experience, and administrative visibility and control.