Cloudflare Web Application Firewall offers Software-as-a-Service flexibility, ease of configuration via API, OWASP and managed rulesets with minimal false positives, user-friendly interface, and quick setup. Key features include DDoS protection, rate limiting, caching, and DNS setup. It supports integration with other services, provides scalable and stable performance, frequent rule updates, comprehensive security controls, and detailed reporting. Users appreciate Cloudflare's technical support and competitively priced enterprise bundle with a wide range of security offerings.
- "Cloudflare is cheaper compared to Azure WAF, which I have considered before."
- "Some of the most valuable features of Cloudflare Web Application Firewall include its DNS zone setup and the zero trust policy."
- "Cloudflare WAF provides protection through rules and functionalities like Cloudflare's SDRAP."
Cloudflare Web Application Firewall needs to update the ModSecurity core rule set. Its documentation requires more clarity for beginners. Users seek improved log integration, false-negative alert reduction, and more granular reporting. Challenges include third-party integration, rate limiting, real-time authentication, and response time. Better customer support and clearer expectations for paid features are needed. Enhancements in dashboard user-friendliness, account-level features, and alert configuration are requested. There are calls for improvements in latency and request handling efficiency.
- "The learning curve was steep initially."
- "The dashboard could be more user-friendly."
- "Support can be challenging at times."