F5 Distributed Cloud WAF (Web Application Firewall) vs. Orca Cloud Security Platform

It helps our website to manage well during high traffic seasons and Holidays. This plaform manages the website overall performance and also protect it against DDoS attacks during these High demand period. It also protects transactions done on our website for the booking of services and products buying by our customers and keep their data safe.

Incentivized

It's good for finding issues in SSH, ec2 instances, and so on. But it's not good at finding stuff for Serverless lambdas, for containers and some more.

Incentivized

• Layer seven attacks are becoming far more common. Traditionally it was always layered three, layer four, where you get an additional firewall, but with the application layer attacks become more frequent, more popular, et cetera. So having the web application firewall protecting us, and then with the recent Log4j, that's the most recent use case when it gave us that instant level of protection whilst we remediated the Log4j that we had that and the F5 Distributed Cloud WAF was protecting us.
• I have a great relationship with the account manager, my account manager, and I think he drives the best price possible, um, for me, and I'm happy with that price.
• F5 Distributed Cloud WAF is always innovating and evolving.
• We run a very competitive proof value where we run numerous competitors against each other, and then we evaluate from that and then make the selection, and F5 Distributed Cloud WAF was the winner.

Incentivized

• Scanning
• CSPM
• IAM Roles

Incentivized

• Better integration between different F5 solutions
• Fail over between devices feels unstable if there are thousands of objects attached to the traffic-group. Needs to be more simpler.
• We have seen issues with malicious user detection where we have used open protocols due to legacy applications, and have been caught with legitimate traffic being blocked.

Incentivized

• Kubernetes
• Docker containers
• Serverless

Incentivized

Its collaborates very well with Application delivery

Incentivized

I believe is a solution that was designed from the start to be simple and easy to use. Coming from Imperva, it simply eased the burden and complexity of managing and securing our apps on different environments (cloud and on-prem). It easy to scale and very quick to deploy (as a cloud waf should be), provide us with DevOps integrations, visibility and automatic insights from multiple events that guarantee peace of mind for us analysts and opp managers.

Incentivized

It provides fewer false positives and a more granular approach to eliminating them, allowing us to focus on threats. Also, with the need to secure both on-premise and cloud-based web applications, we can only use Azure on the cloud part, but we still need to cover on-premise apps with WAF, so we would need to double the time to deploy and manage. Also, its flexibility of deployment scenarios offers us a faster time to deploy WAF without adjusting the app delivery process to WAF's existence.

Incentivized

Wiz and aqua are pretty good but Orca has better UI.

Incentivized

• This helps us quickly push out applications and security to our applications. It is so simple to perform these tasks in F5 Distributed Cloud WAF.
• We are also using the MSP side of it so we have support and are able to have F5 manage our solutions that can save us time.

Incentivized

• less need of security team
• easy to use
• it's not costly

Incentivized