NGINX vs. Oracle Dyn Web Application Security Platform vs. WatchGuard XTM - Discontinued Product

Nginx is well-suited for any web server scenarios, such as web applications, backend or reverse proxy for both application and HTTP requests, and distribution. It is less appropriate for Windows-based applications that run directly on a Windows Server host. In any case, it is very easy to manage, through separate conf files for each application or site you want to host with it.

Incentivized

Their technical team is great, their portal is easily the best of those I have reviewed it against (including Akamai, CloudFlare, and Imperva), and they are a dedicated technology partner through and through.

Incentivized

WatchGuard XTM comes in different models, so you can choose the model best suited for your company size. I think it works well in small as well as very large networks. I have not used this feature, but you can create a "FireCluster" to connect member devices of the same model if you need to put multiple WatchGuard XTMs in your environment. Coming from command line, it took a little adjusting to learn which screen to use to set up the different rules. Once you understand how to set up policies, it is simple to create more. New firewall administrators would appreciate the ease of creating policies, and expert administrators should find everything they need plus extra features.

Incentivized

• Very low memory usage. Can handle many more connections than alternatives (like Apache HTTPD) due to low overhead. (event-based architecture).
• Great at serving static content.
• Scales very well. Easy to host multiple Nginx servers to promote high availability.
• Open-Source (no cost)!

Incentivized

• Pre-populated rulesets - This allows engineers to quickly spin up new WAF instances without the need to configure extensive rulesets.
• Detailed audit logs - Logs show detailed information about traffic hitting the WAF as well as information the rules allowing or blocking the traffic.
• Change Management - Changes can be staged and applied when necessary, without interfering with current traffic.

Incentivized

• Proxy filter.
• Link redundancy.
• Security.

• Customer support can be strangely condescending, perhaps it's a language issue?
• I find it a little weird how the release versions used for Nginx+ aren't the same as for open source version. It can be very confusing to determine the cross-compatibility of modules, etc., because of this.
• It seems like some (most?) modules on their own site are ancient and no longer supported, so their documentation in this area needs work.
• It's difficult to navigate between nginx.com commercial site and customer support. They need to be integrated together.
• I'd love to see more work done on nginx+ monitoring without requiring logging every request. I understand that many statistics can only be derived from logs, but plenty should work without that. Logging is not an option in many environments.

• The purchase of Oracle Dyn into Oracle Dyn continues to develop the company, and while the process maturity is wonderful, it is worth mentioning.
• Many businesses were affected when their Express option was yanked from production too rapidly, resulting in significant costs and delays.
• Full 360-degree traffic and data visibility with ADC analytics integration.

Incentivized

• Support can be hard to work with. While they are typically knowledgeable, there can be a language barrier. Also, most troubleshooting seems intrusive which is a problem in a production environment.
• The throughput of the cheaper models leaves something to be desired.
• Have had some issues running VOIP behind these, but have not been able to narrow down the issues to the phone provider or WatchGuard yet.

Incentivized

Great value for the product

Incentivized

This tool is really easy to use and configure. Consumes very less system resources. It is highly modular and configurable. You can easily use it with other tools like certbot for SSLs. You can configure basic security with configuration and headers

Incentivized

Community support is great, and they've also had a presence at conferences. Overall, there is no shortage of documentation and community support. We're currently using it to serve up some WordPress sites, and configuring NGINX for this purpose is well documented.

Incentivized

I have found that [NGINX] seems to perform better throughout the years with less issues although I've used Apache more. I would definitely recommend [NGINX] for any high volume site and I've seen this to usually be the case from most provided web hosts who will pick [NGINX] over alternatives

Incentivized

After several years involved with the issue of cyber security and having been very close with distributed denial of service attacks, having used several companies to protect our applications, I decided to opt for Oracle Dyn Web Application Security Platform. Definitely, Oracle Dyn gives my organization the protection we need for our critical applications, far away from the other companies that offer similar services.

Incentivized

Again, WatchGuard is priced much lower than other vendors in its space. It may not have some of the bigger features such as Layer 7 awareness. It's more simple to manage and provides IT staff the time to work on other tasks versus time spent to create complex rule sets.

Incentivized

• By using Nginx, we can host multiple web services on a single server, keeping our infrastructure costs lower.
• Nginx maintains our HTTPS connections, allowing us to keep our promise to our customers that their data is safe in transit.
• Due to Nginx's extremely low failure rate, our web addresses always return something meaningful, even when individual services go down. In sense, this means we are "always online" and allows us to maintain brand and support our customers even in the face of catastrophe.

Incentivized

• Has a user-friendly interface that is both informative and intuitive.
• The client's websites are monitored round-the-clock by a staff that provides quick response in the event of any difficulties.
• Deploying it is a breeze.

Incentivized

• Easy to set up and connect firewalls
• Easy to set up branch tunnels
• Less time spent training