Barracuda Web Application Firewall decide in just few minutes
July 28, 2025

Barracuda Web Application Firewall decide in just few minutes

Anonymous | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User

Overall Satisfaction with Barracuda Web Application Firewall

-Barracuda Web Application Firewall is being used to protect all our on prem applications -It protects against all layer 7 web attacks like SQL injection, XSS, etc -It provides protection against top ten Owasp as well -It provides protection against bot attacks -It provides protection against Dos attacks, - It mitigates Dos attacks as well, - It has a content updates as well that provides mitigates against zero day attacks, - the URL and Parameter profile has a very granularity to mitigate false positives, -learning if the traffic also provides easy to make an application ready to enforce in blocking

Pros

  • Attack patterns are regularly updates through contents via Barracuda Web Application Firewall update servers
  • Bot Protection has a good line feature to verify between the genuine clients like browsers and bots
  • Dos Protection also good level of protection to mitigate Layer 7 attacks
  • Allow Deny Rules provides a lot of granular controls to allow and deny the traffic
  • URL profiles has a very granular control to mitigate false positives
  • Parameter profiles has a very granular control to mitigate false positives
  • Risk score feature for the clients to mitigate attacks is also very good feature
  • Client fingerprint module can be used against malicious user to enhance security
  • Separate XML and JSOn profile for all the URL profiles of the application is plus
  • API security is very much effective and shadow API can also be identified

Cons

  • STM crashes sometimes happen due to unusual traffic pattern
  • Obfuscation on the client side user credentials which appears in the developer tools of browser
  • URL Profiles redundancy during the learning of traffic needs to be fixed
  • Dos Protection should be more granular like escalation period to throw JS challenge, Captcha and rate limit when escalation period hits until the WAF stops the attack
  • Client Fingerprinting should work as expected when verifying the clients as in rare some scenarios, it creates issues
  • Enhanced Visibility & Response
  • Improved Compliance Posture
  • Low latency in the application functionalities
  • Less consumption of resources like CPU, memory etc
  • Availability and integration with other authentication services, log tools etc
-User friendly interface for quick learning -Quick deployment for deploying applications -Easy to manage for naive -System components and upgradation of the WAF is very easy go with -Back restoration is very to make it up and ready anytime -Seperate JSON and XmL profiles for each URLs of the application is plus -Amazing and world class support engineer in comparison other vendors and always available to support -Quick resolution on bugs with their patch applying process
-The first choice for small companies should always be Barracuda Web Application Firewall due to budget alignment and same has been done here to avail more features rather than paying without verifying need of the features properly -There is no vendor in the market to provide budget friendly WAF with exceptional support because their engineer are world class

Do you think Barracuda Web Application Firewall delivers good value for the price?

Yes

Are you happy with Barracuda Web Application Firewall's feature set?

Yes

Did Barracuda Web Application Firewall live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Barracuda Web Application Firewall go as expected?

Yes

Would you buy Barracuda Web Application Firewall again?

Yes

-Companies have to focus on budget like their budget is very strict -Companies have less number application to protect and they want performance rather than protection of numerous number of applications -Where load balancing is less priority and application security is the only focus -Companies doesn’t want to spend too much on WAF engineer to handle it and require an admin with less knowledge as it provides very easy interface to handle it - It is best where companies need to stay away from additional charges from using Dos, Bot, client fingerprinting, rate limiting, risk scoring featues

Comments

More Reviews of Barracuda Web Application Firewall

  1. Home
  2. Web Application Firewalls
  3. Barracuda Web Application Firewall Reviews
  4. User Review of Barracuda Web Application Firewall