Azure Web Application Firewall vs Microsoft Azure Application Gateway comparison

Azure Web Application Firewall vs. Microsoft Azure Application Gateway

Download the complete report

Helped 814,649 peers since 2012

Categories and Ranking

Azure Web Application Firewall

Ranking in Web Application Firewall (WAF)

13th

Average Rating

8.4

Number of Reviews

Ranking in other categories

Microsoft Security Suite (20th)

Microsoft Azure Application...

Ranking in Web Application Firewall (WAF)

2nd

Average Rating

7.2

Number of Reviews

Ranking in other categories

Application Delivery Controllers (ADC) (3rd)

Mindshare comparison

As of November 2024, in the Web Application Firewall (WAF) category, the mindshare of Azure Web Application Firewall is 5.4%, up from 5.2% compared to the previous year. The mindshare of Microsoft Azure Application Gateway is 10.5%, down from 13.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Web Application Firewall (WAF)

Featured Reviews

Thomas Zebar

Azure Principal Architect at Cloud Computech Consultancy

May 4, 2023

Is priced well, is stable, and the initial setup is straightforward

I previously used Barracuda Web Application Firewall. I hope that Azure Web Application Firewall will look at other products and replicate some of their functionality. Azure WAF is doing great because it is designed to host web applications in Azure. However, it can be improved with other services. Barracuda is the most advanced firewall in the industry, so Azure WAF could pick some of its features and replicate them into its own application firewall. Barracuda WAF was deployed in parallel to the traffic. Azure WAF should not be deployed in the middle of the traffic. It should support both public and private points of presence. Additionally, like Barracuda, Azure WAF should have an inspection engine that covers not just Microsoft products, but also products from other manufacturers. This would be a great addition to the product and would increase its security functionality.

Read full review

Sami

Cyber Security Consultant at a retailer with 10,001+ employees

Nov 29, 2022

High stability with built-in rules that reduce alerts and are easy to configure

Our company uses the solution to publish services that are on Azure. There is more than one way to publish services. You can use the Microsoft infrastructure for app services including small programming, configurations related to obligations, and publishing. Or you can publish manually by using…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's quite a stable product and works well with Microsoft products."

"The most valuable feature of Azure Web Application Firewall is its ability to filter requests and block false positives by using custom rules and the OWASP rule set."

"It's a good option if you want a solution that's ready to go and easy for your team to learn. It's cloud-based, so you don't need to buy or maintain any hardware infrastructure."

"The solution has good dashboards."

"The most valuable feature is that it allows us to publish our applications behind the firewall."

"It's great for protecting against DDoS attacks."

"The integration it has with GitHub is great."

"The initial setup is easy and straightforward...Azure Web Application Firewall is a scalable product."

More Azure Web Application Firewall pros

"The tool helps manage microservices by providing developers with a platform to conduct tests and assessments on the web application. The custom domain option is one of the most valuable features I've found. This feature is incredibly helpful for the end-users of the web application. With the custom domain feature, you can change the lengthy link to a shorter, more memorable one. For example, instead of using a lengthy default link, you can customize it to something like imail.com, which is much easier to remember and share."

"We can control what rules should be used and what should be disabled."

"We use the product in front-end and back-end applications to do the load balancing smartly."

"The load balancing features are valuable."

"WAF feature replicates the firewall."

"This is a SaaS product, so it is always up to date."

"The most valuable feature of Microsoft Azure Application Gateway is its ease of use."

"We chose this solution in the first place because it has access to Layer 7. I can control the requests and the content, which I can access on my network if I want to even if it's forbidden access to other external resources. If I want to monitor, for example, traffic, and apply this rule on Layer 7, I can do so. This was our main goal when implementing this application. We wanted to take advantage of the Gateway capabilities."

More Microsoft Azure Application Gateway pros

Cons

"I would say that Azure's customer service is not that good...I am not very happy with the support offered."

"The documentation needs to be improved."

"We would like to see additional site services using AI to provide information about blocking requests and offer analytics on the origin of calls."

"Azure WAF should not be deployed in the middle of the traffic."

"There is a need to be able to configure the solution more."

"The knowledge base could be improved."

"The support for proxy forwarding could improve."

"In Brazil, we have some problems with the phone service that affect our connection with the cloud. However, it isn't common."

More Azure Web Application Firewall cons

"I believe that there is room for improvement in terms of additional functionality. It is an advantage to have features readily available for configuration without needing customer-defined rules."

"Microsoft needs to work on their documentation."

"The product could be easier to use and implement."

"The pricing of the solution is a bit high. The solution should offer different pricing systems."

"It is a bit tricky to configure. You've got to have a very specific format to configure it. They should make it a little bit easier to configure. Mapping the certificates into it isn't easy, and it could be better. Currently, you've to write a bit of automation to pull certificates directly to HTTPS."

"The security of the product could be adjusted."

"The solution should provide more security for certificate-based services so that we can implement more security on that."

"For the first-time user, it is difficult to understand so the user-interface needs to be improved."

More Microsoft Azure Application Gateway cons

Pricing and Cost Advice

"The price is for this solution is fair and there is a license needed."

"The price of the solution depends on your architecture and how you manage it. You can control the cost in Azure quite well. The costs do not directly correlate to expenses in the features we are using."

"We have an enterprise agreement with Microsoft and the pricing is good."

"The price is reasonable. It is approximately $2,000 US per month."

"I give the pricing a nine out of ten."

"Azure WAF has price advantages over other WAF solutions. The pricing model is flexible because you pay on a scale based on the level of protection you need."

"The solution's pricing is not complex. It is not expensive from our point of view."

"The solution is paid monthly. The solution is highly expensive."

"The solution is reasonably priced compared to other solutions."

"Every solution comes with a license and cost. Microsoft provides the license and the total cost is for the maintenance every year."

"It is not expensive."

"I rate the pricing seven out of ten because some third-party solutions are even costlier than this."

"Between v1 and v2, there is a lot of change in the pricing. It is very costly compared to AWS."

"There is a need to pay a fixed price per month to use the product. There are no additional payments to be made to Microsoft apart from the charges paid towards the monthly licensing costs attached to the solution."

More Microsoft Azure Application Gateway pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.

See recommendations

814,649 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

21%

Financial Services Firm

11%

Manufacturing Company

10%

Government

Computer Software Company

16%

Financial Services Firm

12%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Azure Web Application Firewall?

The integration it has with GitHub is great.

What is your experience regarding pricing and costs for Azure Web Application Firewall?

The price is reasonable. It is approximately $2,000 US per month. This cost is one of the main reasons why we selected Azure Web Application Firewall. It provides enough functionality for our needs.

What needs improvement with Azure Web Application Firewall?

Microsoft is constantly working on improvements. We would like to see additional site services using AI to provide information about blocking requests and offer analytics on the origin of calls. Th...

What's the difference between Azure Front Door and Application Gateway?

We found Azure Front Door to be easily scaled and very stable. The implementation is very fast and Microsoft provides excellent support. Azure Front Door can quickly detect abnormalities before the...

How does AWS WAF compare to Microsoft Azure Application Gateway?

Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft Azure Application Gateway web application firewall software was the better fit ...

What do you like most about Microsoft Azure Application Gateway?

Application Gateway automatically redirects unwanted users and takes care of the security aspect. It also handles the performance side of things, which is why we use it.

AWS WAF vs Azure Web Application Firewall

Comparisons

Compared 45% of the time

Fortinet FortiWeb vs Azure Web Application Firewall

Compared 12% of the time

Azure Front Door vs Azure Web Application Firewall

Compared 6% of the time

Microsoft Defender for Endpoint vs Azure Web Application Firewall

Compared 4% of the time

F5 Advanced WAF vs Azure Web Application Firewall

Compared 3% of the time

More Azure Web Application Firewall Competitors

F5 Advanced WAF vs Microsoft Azure Application Gateway

Compared 13% of the time

AWS WAF vs Microsoft Azure Application Gateway

Compared 11% of the time

Cloudflare Web Application Firewall vs Microsoft Azure Application Gateway

Compared 11% of the time

NetScaler vs Microsoft Azure Application Gateway

Compared 10% of the time

HAProxy vs Microsoft Azure Application Gateway

Compared 9% of the time

More Microsoft Azure Application Gateway Competitors

Product Reports

Web Application Firewall (WAF)

Download Azure Web Application Firewall product report

Microsoft Azure Application Gateway

Download Microsoft Azure Application Gateway product report

Microsoft Azure Application Gateway report

Also Known As

No data available

Azure Application Gateway, MS Azure Application Gateway

Learn More

Microsoft

Overview

Azure Web Application Firewall (WAF) provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit commonly known vulnerabilities. SQL injection and cross-site scripting are among the most common attacks.

To learn more about our solution, ask questions, and share feedback, join our Microsoft Security, Compliance and Identity Community.

Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Traditional load balancers operate at the transport layer (OSI layer 4 - TCP and UDP) and route traffic based on source IP address and port, to a destination IP address and port.

To learn more about our solution, ask questions, and share feedback, join our Microsoft Security, Compliance and Identity Community.

Sample Customers

Information Not Available

Lilly, AccuWeather, AIRFRANCE, Honeywell

Azure Web Application Firewall vs. Microsoft Azure Application Gateway