Cloudflare SASE & SSE Platform Reviews

We use the product to mitigate the security risk of dynamic DDoS attacks. In these attacks, millions of requests come from millions of different IPs to get our server down. If we do not have a security solution to mitigate this risk, the service for other users will be down. The server will be down due to the huge consumption of resources.

The solution has different options that can be used to differentiate DDoS attacks. Cloudflare has a user agent, which can be used to define rules. If I do not want MacBook users to access the system, I can use the user agent to drop the traffic for MacBook users. It is very valuable. It helps me mitigate risks.

The product gives us many tools to mitigate risks. It is one of the most powerful solutions on the cloud. The documentation is good.

The onboarding process can be improved a little bit.

I have been using the solution for nine months.

I did not face any stability issues in the past nine months.

I recently contacted support to get more information about certain attacks. I wanted to get a full report about an incident, and they sent me all the details I needed.

Positive

The initial setup is not complex at all. It is too simple.

We just have to integrate the node IP address of AWS and change the public IP as a DNS record. Then, Cloudflare will send all the data after mitigating any risk to AWS. The deployment takes five to seven business days. We need one or two engineers for the security part of the deployment. For testing and services, we need a team.

It is a cloud solution. We have integrated it with Amazon AWS. Sometimes we can't mitigate the DDoS attacks using AWS WAF. It doesn’t detect the attacks. AWS WAF does not have some options to differentiate the type of attacks.

I use the tool only as a DDoS solution. I just use the DDoS service to protect myself. There's no scalability for this option. Documents already exist for all the cloud solutions. I wouldn’t prefer an automated solution for integration because apps are built based on customers’ requirements. The requirements differ, so the default profile for automation can't fit all the customers. Overall, I rate the product a nine and a half or ten out of ten.

Cloudflare DDoS protects against bots and DDoS attacks. I'm using the free version for my personal website. 

The best feature is rate limiting. If I'm expecting 500 visits per hour, Cloudflare will limit the requests if I suddenly get 50,000. 

The free plan has limitations. For example, I can only set up three rules, and the application firewall is unavailable. 

I have used Cloudflare DDoS for about a year.

The initial setup isn't difficult. When a user signs up for a Cloudflare account and adds domains, it automatically deploys basic protection.

I rate Cloudflare DDoS 10 out of 10. Before you opt for Cloudflare DDoS, you should understand that every cloud provider includes DDoS. If you are hosting your services in AWS, Google Cloud, or Microsoft Azure, you already have DDoS, so secondary protection isn't necessary. 

Cloudflare DDoS mitigates DDoS attacks.

Cloudflare DDoS mitigates DDoS attacks mostly by distributing the attacks through their network, which means many of their PoPs will hit your servers. When you have a huge DDoS attack, Cloudflare DDoS will stop the attack after some time. Until then, it will just register the DDoS attack through their network because they have a huge network, and then all those PoPs will hit your servers.

Cloudflare DDoS has poor technical support.

I have been using Cloudflare DDoS for five years.

More than 10,000 users are using Cloudflare DDoS in our company.

I previously used F5.

The solution's pricing lacks transparency. You never know what you're paying for, and even their team sometimes cannot give you a correct answer on how they calculate something.

Overall, I rate Cloudflare DDoS a seven out of ten.