F5 Networks offers the Advanced Web Application Firewall (WAF) to provide bot defense, advanced application protection, anti-bot SDK, and other features.
N/A
NetScaler ADC
Score 8.1 out of 10
N/A
NetScaler ADC is an application delivery controller.
Advanced WAF is well suited for protection against account enumeration attacks, protection against known and new increasing attack vectors through out of the box attack signatures and threat campaigns. Also, up to date and accurate IP intelligence database to block based on known IP reputation.
Citrix Netscaler can be a powerful network appliance for environments that are fully committed and open to utilizing a network appliance that isn't made by a traditional network vendor. Administrator user experience has improved over the years and will continue to improve with the flexibility of virtual and physical appliances available for medium and large enterprises.
So the product definitely is helping us for sudden attacks through DDOS, some injection ingestion into UI URLs, and definitely it's capturing those and I definitely see that as an advantage for us. They can stop the hackers from using our endpoints.
Flexibility. NetScaler assumes its admins know a bit about networking and in-depth details surrounding the applications they are configuring access for/to. This being so, the range of configuration options is very broad allowing various versions' combinations of protocol patterns, expressions, rules etc., all to the benefit of the admin.
Granularity. Having such a broad range of configuration options available, while still allowing simple options to be configured simply. The GUI is well-stylized and navigation has a good flow.
Ease of control. For load-balancing of simple services right out of the box, NetScaler makes it pretty easy, compared to the range of options available in the surrounding GUI and under the hood.
I'd like to see the licensing model streamlined instead of having this, plus, plus this, plus this to get a working product. I had to go back to the sales team several different times to get a fully deployed product.
The documentation could use an overhaul with specific examples related to the command line as well as GUI. Explanations in the documentation would also be helpful.
Being able to have more than just one routing table would allow the ability to leverage security.
Improve on the specifics I mentioned previously and could be a 10/10 product. It is also a confusingly branded product that I have supported in two large enterprises where IT departments are unsure if the product belongs to the Citrix remote access support team or the Network infrastructure support team (it should be the later) and typically under utilized.
Overall, our organization's experience with Citrix support is that support can be hit or miss. Oftentimes it takes multiple attempts and much longer than desirable to obtain a viable solution for issues experienced with their products. It would be great to see Citrix invest time, effort, and almighty dollars into improving their support and bug fix process across the board.
AWAF provides most complete web application and API protection; including L7 DoS; in custimer's multi cloud deployments whether on-premises, public cloud, private cloud, etc.
We chose Citrix ADC over Kemp and F5 due to additional integrations with various products such as Citrix/Horizon/Monitoring tools. We additionally chose ADC due to better ease of use and ability to have the appliances be virtual or physical, with the configuration being a simple migration of code which provided flexibility to be able to do a hybrid environment with ease.
This has been good overall. It has a positive impact on the security of our applications. I don't have necessarily a measurement on ROI, but it definitely definitely added to the security of our products.
