Try our new research platform with insights from 80,000+ expert users

Azure Front Door vs Azure Web Application Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
71
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Azure Front Door
Average Rating
8.8
Reviews Sentiment
7.7
Number of Reviews
13
Ranking in other categories
CDN (2nd), Web Application Firewall (WAF) (12th), Microsoft Security Suite (16th)
Azure Web Application Firewall
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
11
Ranking in other categories
Web Application Firewall (WAF) (13th), Microsoft Security Suite (21st)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Thomas Zebar - PeerSpot reviewer
Provides great security with a good application firewall
The initial setup is straightforward. If you want to use the portal, CLI, or PowerShare, or you want to use automation data for one month, it's straightforward. Even when it comes to operational maintenance, it's pretty easy and straightforward. Microsoft has done a great job on that front. Maintenance generally requires someone who is a cloud administrator or similar to maintain services in general, with Front Door a small piece of a larger maintenance requirement. There's not a lot to manage, the configuration is simple. I encourage people to document the configuration and infrastructure as well as disaster recovery in case anything happens.
Thomas Zebar - PeerSpot reviewer
Is priced well, is stable, and the initial setup is straightforward
I previously used Barracuda Web Application Firewall. I hope that Azure Web Application Firewall will look at other products and replicate some of their functionality. Azure WAF is doing great because it is designed to host web applications in Azure. However, it can be improved with other services. Barracuda is the most advanced firewall in the industry, so Azure WAF could pick some of its features and replicate them into its own application firewall. Barracuda WAF was deployed in parallel to the traffic. Azure WAF should not be deployed in the middle of the traffic. It should support both public and private points of presence. Additionally, like Barracuda, Azure WAF should have an inspection engine that covers not just Microsoft products, but also products from other manufacturers. This would be a great addition to the product and would increase its security functionality.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"It is easier to configure and develop documentation to see how we have configured firewalls."
"I get a lot of value from Cloudflare's API because it enables you to build a separate environment inside the solution. You can create a domain for performing test requests before you move to the production environment and connect various domains."
"The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules."
"The solution offers the flexibility to control configuration rules."
"The most valuable features of the solution are performance and security."
"The UI is good."
"The solution is very good at mitigating threats."
"The price is one of the most important aspects of the product. It's quite affordable."
"I particularly appreciate its load-balancing capabilities as it allows us to manage multiple instances and support a global presence effectively."
"Rules Engine is a valuable feature."
"The most valuable feature is that you can implement resources globally. It does not depend on location and ability or something like that. This is to connect clients around the world."
"Has a great application firewall and we like the security."
"You can assign as many web application firewall policies as you want to the same instance of Front Door."
"The most valuable feature is that I can have CDN and load-balancing capabilities in a single service instead of managing two separate tools."
"The web application firewall is a great feature."
"The initial setup is easy and straightforward...Azure Web Application Firewall is a scalable product."
"It has been a stable product in my experience."
"Azure WAF is extremely stable."
"It's a good option if you want a solution that's ready to go and easy for your team to learn. It's cloud-based, so you don't need to buy or maintain any hardware infrastructure."
"The most valuable feature is that it allows us to publish our applications behind the firewall."
"The most valuable feature of Azure Web Application Firewall is its ability to filter requests and block false positives by using custom rules and the OWASP rule set."
"The integration it has with GitHub is great."
"We have found the most valuable features to be the web application, minimal skills required for management, control through policies, and automation."
 

Cons

"Technical support is lacking."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"It would be helpful if the solution could continue evolving to compete with the other solutions on the market."
"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"DNS Management."
"I'm responsible for the governance and cost control of Azure. I'm not a specialist in any products and therefore I couldn't really speak effectively to features that are lacking or missing."
"It lacks sufficient functionality."
"This is a relatively expensive solution."
"The tool should improve its cost."
"There is room for improvement and they're working on it."
"My suggestion for improvement would be to enhance the Data Export feature to include specific tables, particularly the Azure Diagnostics table."
"The product's features are limited compared to Cloudflare. The tool also doesn't work well in a hybrid environment. I would like to see a way to add personalized APIs in the system."
"There's a limitation on the amount of global rules we can add."
"I would say that Azure's customer service is not that good...I am not very happy with the support offered."
"The management can be improved."
"We would like to see additional site services using AI to provide information about blocking requests and offer analytics on the origin of calls."
"Azure WAF should not be deployed in the middle of the traffic."
"Deployment should be simplified so that a non-techie can handle it."
"The documentation needs to be improved."
"The knowledge base could be improved."
"The support for proxy forwarding could improve."
 

Pricing and Cost Advice

"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"That is one of the great features. I was able to access the majority of the features and services for free."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"The price is reasonable."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"The product's pricing is cheap."
"The tool is a premium product, so it is very expensive."
"The solution is a bit expensive."
"The pricing of the solution is good."
"The transition to the premium tier has led to increased costs, making it more expensive than the classic tier."
"Considering the standard licensing of the tool, even though we have not checked the billing as of now, it might not be very costly."
"It is on a pay-as-you-go basis."
"The product is expensive."
"I give the pricing a nine out of ten."
"The price of the solution depends on your architecture and how you manage it. You can control the cost in Azure quite well. The costs do not directly correlate to expenses in the features we are using."
"The price is reasonable. It is approximately $2,000 US per month."
"We have an enterprise agreement with Microsoft and the pricing is good."
"The price is for this solution is fair and there is a license needed."
"Azure WAF has price advantages over other WAF solutions. The pricing model is flexible because you pay on a scale based on the level of protection you need."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
831,020 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
25%
Computer Software Company
13%
Comms Service Provider
8%
Financial Services Firm
7%
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
8%
Government
7%
Computer Software Company
20%
Financial Services Firm
12%
Manufacturing Company
10%
Insurance Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What's the difference between Azure Front Door and Application Gateway?
We found Azure Front Door to be easily scaled and very stable. The implementation is very fast and Microsoft provides...
What is your experience regarding pricing and costs for Azure Front Door?
It's a matter of value versus price. If we add more features and raise the price, it must remain justifiable. If we m...
What is your experience regarding pricing and costs for Azure Web Application Firewall?
The price is reasonable. It is approximately $2,000 US per month. This cost is one of the main reasons why we selecte...
What needs improvement with Azure Web Application Firewall?
Microsoft is constantly working on improvements. We would like to see additional site services using AI to provide in...
 

Also Known As

Cloudflare DNS
Azure Front-Door
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Information Not Available
Information Not Available
Find out what your peers are saying about Azure Front Door vs. Azure Web Application Firewall and other solutions. Updated: January 2025.
831,020 professionals have used our research since 2012.