Try our new research platform with insights from 80,000+ expert users

Azure Web Application Firewall vs Fastly comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), WAN Optimization (4th), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (12th)
Azure Web Application Firewall
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
16
Ranking in other categories
Web Application Firewall (WAF) (12th), Microsoft Security Suite (21st)
Fastly
Average Rating
8.8
Reviews Sentiment
6.3
Number of Reviews
9
Ranking in other categories
CDN (8th), Web Application Firewall (WAF) (18th), Distributed Denial-of-Service (DDoS) Protection (10th)
 

Featured Reviews

HA
Owner at Hga consulting
Has helped manage client domains with streamlined access control and threat visibility
I don't know what areas could be improved with Cloudflare WAF; Cloudflare is constantly improving and adding features to their feature set. They're doing a good job, and as far as DNS and support for any domains that I create or my clients create, it's mandatory for me to make sure that they have Cloudflare as their DNS provider. The Cloudflare load balancing capability hasn't really helped in enhancing my website's uptime and resiliency because we don't really get that much traffic; it's mostly remote users, and web hosting is done by a web hosting service. It doesn't pay to try to host your own website.
Mano Senaratne - PeerSpot reviewer
Head of Digital Engineering, Management Consultant at Stax Inc.
Comprehensive suite simplifies configuration while frequent updates require management
Mainly, it comes with the complete suite of Microsoft services. I can use it in conjunction with the best options and other features that come with it. Configuration is much easier than using different platforms. For example, if I have hosted the application in AWS and am using the Application Firewall from Azure, there are certain additional steps to follow when configuring them. With Microsoft, everything is within a single suite, making it easier to configure and plan. Azure continually upgrades platforms and sends us messages to upgrade to the next version, simplifying the process. Later, it's much easier if I want to upgrade the software platform, scale it, or move it to a different application host as the whole suite comes together. The return on investment is good. If I am doing applications for clients, I can invoice them for better costs. Most applications that I run and use have a better return on investment.
PP
Technical support engineer at Adobe
Optimized ecommerce performance and improved access control through image handling and IP filtering
I believe that Fastly should provide guidelines for their WAF blocking rules. It should be public what the rules are that are blocking their contents. I believe Fastly should provide regional IP addresses instead of POP IPs. Fastly should provide features similar to Cloudflare regarding a block list. Additionally, a POP address should be there with a wide range of IP addresses provided, public static IP addresses, so customers can integrate egress IPs. Fastly should provide WebP image processing on the backend instead of on the fly. It would be a very useful feature to avoid unnecessary time for browser to browser and local cookies. I believe that Fastly service has a few gaps. We are not getting quick responses from Fastly technical support engineers. Sometimes they depend on their D3 developers. There should be transparency.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The technical support is good."
"Its most significant benefit to date is the speed with which it refreshes DNS records on the internet once you change it. If you are changing a website or registering a new record, it is very quick."
"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"The most valuable feature is its usability."
"The most valuable features of the solution are performance and security."
"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules."
"It's very user-friendly."
"I can only strongly recommend using the Azure Web Application Firewall."
"It is almost impossible to access these assets from outside, requiring a very skilled attacker to obtain asset tokens of a customer using Azure."
"The Microsoft support and the analytics are what I appreciate about Azure Web Application Firewall; it integrates effectively with things such as Sentinel and Defender for Cloud, so mostly it's the analytics and now the AI capabilities that have been introduced with Co-pilot."
"It's a good option if you want a solution that's ready to go and easy for your team to learn. It's cloud-based, so you don't need to buy or maintain any hardware infrastructure."
"The integration it has with GitHub is great."
"The most valuable feature of Azure Web Application Firewall is its ability to filter requests and block false positives by using custom rules and the OWASP rule set."
"The functions of Azure Web Application Firewall that I found most valuable include its cost-effectiveness, and unlike other WAF products I have worked with such as Barracuda, we have flexibility to create rules."
"The most valuable feature is that it allows us to publish our applications behind the firewall."
"Compute@Edge features are valuable to me."
"Fastly uses configuration versioning, where you can deploy a new version in less than one minute."
"The product's initial setup phase is straightforward."
"Rate limiting is a good feature that protects from volumetric attacks."
"The product helps our organization to access sites located in different regions quickly."
"Fastly combines both the CDN side and the Signal Sciences next-generation WAF, which is closely integrated with the CDN, allowing us to use both products seamlessly."
"Support is good; the product works as advertised. We have a Slack connection with them. So we can basically ask for help, live, engage, and ring when they respond. Very quickly."
"Fastly provides CDN, WAF, image optimization, and IP restriction."
 

Cons

"There could be more courses with engineers. I like e-learning, however, having a specialist in a classroom is more comfortable for me."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"An integrated SSO feature would be useful for Cloudflare DNS."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"There are some issues with the CDN services."
"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed. This is what I'd like to improve in Cloudflare."
"In the last two years, there has been a certain amount of downtime when using the VDM."
"The solution could work at being less expensive. It costs a lot to use it."
"From my point of view, there is no need for improvement."
"Deployment should be simplified so that a non-techie can handle it."
"Upgrading the platform regularly is necessary for security, however, frequent updates every six months or year from Azure can be a maintenance overhead."
"I encountered difficulties with certificates for a Linux server when implementing protection. I had to create the entire chain, as I couldn't simply upload the certificate and the chain."
"Some Azure applications, like the web application firewall, require a certain level of SKU for hosting setup. The basic setup does not allow me to use the web application firewall and other additional services."
"The knowledge base could be improved."
"We would like to see additional site services using AI to provide information about blocking requests and offer analytics on the origin of calls."
"I would say that Azure's customer service is not that good...I am not very happy with the support offered."
"Stronger analytics would be helpful, like showing configurations that haven't served a certain amount of traffic in a while. With many properties, things can get lost track of - duplicates or unused configurations not properly decommissioned."
"What I don't like about Fastly is that they charge a heavy price."
"The product should provide improved bot detection and management."
"We are not getting quick responses from Fastly technical support engineers. Sometimes they depend on their D3 developers."
"The solution's pricing could be better."
"It is missing a "staging" platform to deploy a test configuration with all of the real settings, which would allow us to properly test before putting it into production."
"Fastly's customer service area needs improvement."
"Support is not that great."
 

Pricing and Cost Advice

"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"The cost primarily depends on the size of the organization."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"There are no additional costs beyond the standard licensing fees."
"The price of the solution is expensive."
"We are using the free tier of the solution."
"We don't have any issues with the price."
"Azure WAF has price advantages over other WAF solutions. The pricing model is flexible because you pay on a scale based on the level of protection you need."
"I give the pricing a nine out of ten."
"The price is for this solution is fair and there is a license needed."
"We have an enterprise agreement with Microsoft and the pricing is good."
"The price of the solution depends on your architecture and how you manage it. You can control the cost in Azure quite well. The costs do not directly correlate to expenses in the features we are using."
"The price is reasonable. It is approximately $2,000 US per month."
"The pricing has been very competitive."
"The solution is cheaper than other products in the market."
"I've generally found Fastly to be very competitive in pricing, especially around Compute@Edge."
"Fastly is less expensive than one of its competitors."
"You need to pay a premium price for the tool."
"In my opinion, Fastly is priced competitively."
"It is an expensive solution."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
879,853 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Computer Software Company
14%
Financial Services Firm
13%
Manufacturing Company
12%
Government
6%
Computer Software Company
11%
Comms Service Provider
10%
Financial Services Firm
10%
Retailer
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business6
Large Enterprise12
By reviewers
Company SizeCount
Small Business5
Large Enterprise5
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for Azure Web Application Firewall?
I would place Azure Web Application Firewall at an eight on a scale from one to 10, with one being cheap and 10 being...
What needs improvement with Azure Web Application Firewall?
The pricing needs improvement, and I think for beginners it will be a little bit complicated, so the ease of use coul...
What is your primary use case for Azure Web Application Firewall?
Because we mostly operate in the cloud and because we're a Microsoft environment, it was the best option in the scena...
What do you like most about Fastly?
Support is good; the product works as advertised. We have a Slack connection with them. So we can basically ask for h...
What needs improvement with Fastly?
I believe that Fastly should provide guidelines for their WAF blocking rules. It should be public what the rules are ...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Information Not Available
Twitter, Airbnb, Alaska Airlines, Pinterest, Vimeo, The Guardian, The New York Times, Ticketmaster, The Drupal Association, Opera, about.com, imgur, Etsy, Foursquare, GitHub, New Relic, shopify, Shazam, Firebase
Find out what your peers are saying about Azure Web Application Firewall vs. Fastly and other solutions. Updated: December 2025.
879,853 professionals have used our research since 2012.