Barracuda Application Protection vs. NGINX

Simple Barracuda WAF-as-a-Service were out of the box standard policies can be applied. this Barracuda WAF-as-a-Service is perfect for a basic environment and protection in particular if you have already other barracuda Infrastruture elements in your network. Easy to deploy configure and get it running with in a few hours. Definitely not the type of WAF for a complex web application.

Incentivized

Nginx is well-suited for any web server scenarios, such as web applications, backend or reverse proxy for both application and HTTP requests, and distribution. It is less appropriate for Windows-based applications that run directly on a Windows Server host. In any case, it is very easy to manage, through separate conf files for each application or site you want to host with it.

Incentivized

• Provides full-spectrum security DOD-level protection; which is a big help for us for security of our data.
• Ease of setup on her firewall for security for VPN users.
• Configuration is easy to do and use for our security team with its features and pictures of instruction.

Incentivized

• Very low memory usage. Can handle many more connections than alternatives (like Apache HTTPD) due to low overhead. (event-based architecture).
• Great at serving static content.
• Scales very well. Easy to host multiple Nginx servers to promote high availability.
• Open-Source (no cost)!

Incentivized

• More bot categories should be integrated
• URLs profiles should be user friendly the one feature which is bit complicated
• client side integrity should include more mitigation techniques
• there should a feature where you can achieve out of the box requirements means the feature which is not available can be included by writing a code

Incentivized

• Customer support can be strangely condescending, perhaps it's a language issue?
• I find it a little weird how the release versions used for Nginx+ aren't the same as for open source version. It can be very confusing to determine the cross-compatibility of modules, etc., because of this.
• It seems like some (most?) modules on their own site are ancient and no longer supported, so their documentation in this area needs work.
• It's difficult to navigate between nginx.com commercial site and customer support. They need to be integrated together.
• I'd love to see more work done on nginx+ monitoring without requiring logging every request. I understand that many statistics can only be derived from logs, but plenty should work without that. Logging is not an option in many environments.

Great value for the product

Incentivized

-Easy to deploy -Easy to manage application -Scalability is good -Security Features contains a lot of granularities especially URL profiles protection and Json security

Incentivized

This tool is really easy to use and configure. Consumes very less system resources. It is highly modular and configurable. You can easily use it with other tools like certbot for SSLs. You can configure basic security with configuration and headers

Incentivized

Community support is great, and they've also had a presence at conferences. Overall, there is no shortage of documentation and community support. We're currently using it to serve up some WordPress sites, and configuring NGINX for this purpose is well documented.

Incentivized

Price for the over all functionalities offered. Simplicity to configure and deploy in our current environment. Automated standard policies. easy to maintain.

Incentivized

I have found that [NGINX] seems to perform better throughout the years with less issues although I've used Apache more. I would definitely recommend [NGINX] for any high volume site and I've seen this to usually be the case from most provided web hosts who will pick [NGINX] over alternatives

Incentivized

• Has been good in lessening threats from the outside.
• Ease of use for our security team to be able to use templates and configure to our specs.
• Being able to set as many rules as you like is a big plus.

Incentivized

• By using Nginx, we can host multiple web services on a single server, keeping our infrastructure costs lower.
• Nginx maintains our HTTPS connections, allowing us to keep our promise to our customers that their data is safe in transit.
• Due to Nginx's extremely low failure rate, our web addresses always return something meaningful, even when individual services go down. In sense, this means we are "always online" and allows us to maintain brand and support our customers even in the face of catastrophe.

Incentivized