Try our new research platform with insights from 80,000+ expert users

Barracuda WAF-as-a-Service vs Microsoft Azure Application Gateway comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
74
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Barracuda WAF-as-a-Service
Average Rating
7.2
Reviews Sentiment
7.4
Number of Reviews
5
Ranking in other categories
Web Application Firewall (WAF) (32nd)
Microsoft Azure Application...
Average Rating
7.2
Reviews Sentiment
6.8
Number of Reviews
47
Ranking in other categories
Application Delivery Controllers (ADC) (4th), Web Application Firewall (WAF) (3rd)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Hadar Eshel - PeerSpot reviewer
Easy to install platform with valuable policy management features
We use the product for securing email systems, protecting websites, and safeguarding web-based applications and portals One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strategy. Additionally, it could operate in a local data center.…
Shehzad Ali - PeerSpot reviewer
Offers time and cost savings with integration, but user interface needs improvement
We are using it for our internal application development. We are testing those features of application gateways. We are integrating it with our solutions, application, Azure Application Gateway Microsoft has a vast variety of tools, and it blends very well. It provides a range of services, so it…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I rate its stability a ten out of ten."
"It is a fast and secure DNS."
"It is easier to configure and develop documentation to see how we have configured firewalls."
"What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"It's very user-friendly."
"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"The most valuable feature is its usability."
"The solution can be used for threat prevention or as a cloud-to-cloud backup system"
"I like its ability to identify known attacks, including DDOS attacks. It's valuable because software must be able to stop known attacks. Application attacks are evolving all the time. When it comes to software-as-a-service, we need to have software that knows about all the latest attacks. It should also protect against major unknown attacks."
"The product's bot protection feature is valuable for our company."
"It provides an ease of policy management."
"The most valuable features of the solution are it is plug and play, has automated policies, a simple configuration, and is easy to create rules."
"I find Application Gateway’s WAF module valuable because it helps prevent layer 7 attacks."
"Good customization; able to report and take action on alerts."
"The most valuable feature of the solution is the web application firewall (WAF)."
"The health probe is pretty good for your backend health. It tells you whether it's communicating and talking to the endpoint correctly. It is quite useful."
"The most valuable feature of Microsoft Azure Application Gateway is its ease of use."
"The most valuable feature is WAF."
"Azure Application Gateway's most valuable feature is ease of use. The configuration is straightforward. It isn't difficult to adjust the size of your instances in the settings. You can do that with a few clicks, and the configuration file is the same way. You can also set rules and policies with minimal time and effort."
"We chose this solution in the first place because it has access to Layer 7. I can control the requests and the content, which I can access on my network if I want to even if it's forbidden access to other external resources. If I want to monitor, for example, traffic, and apply this rule on Layer 7, I can do so. This was our main goal when implementing this application. We wanted to take advantage of the Gateway capabilities."
 

Cons

"I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us."
"If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag."
"There should be a specific price list for enterprise-level customers."
"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed. This is what I'd like to improve in Cloudflare."
"Integration involving API with other products could be more user-friendly."
"For the free and Pro plans, Cloudflare could use a simple bot to provide information to users. This would improve support, especially for less advanced users who utilize the free components."
"Support response time could be improved."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strategy."
"We found it a bit slow when accessing it through the web browser. The URL also exposed the user name and the hashed password. When I log into my Barracuda WAF user portal, I could see the username and the hashed password on the URL itself. So, it is not very secure, and it is important to take that off."
"The stability of the product is an area of concern where improvements are required."
"It's a very specific solution that is only requested for a customer's web code or their global IT policy."
"The solution can improve by bundling Security Operation Center (SOC) with the WAF-as-a-Service, it would provide a lot more value to customers."
"Customer service can be improved. There is room for improvement, specifically in paid support, by providing more direct contact."
"We have encountered some issues with automatic redirection and cancellation, leading to 502 and 504 gateway errors. So, I experienced some trouble with containers."
"The configuration is very specific right now and needs to be much more flexible."
"The tool is a pain to deal with when it comes to the area of configuration."
"It takes a lot of time for a certificate to update in the system. That is a huge drawback, affecting the load-balancing side. And when there are changes to the load balancing, it affects the end-user."
"The monitoring on the solution could be better."
"We faced some downtime while validating CNAME."
"The solution could improve by increasing the performance when doing updates. For example, if I change the certificate it can take 30 minutes. Other vendors do not have this type of problem."
 

Pricing and Cost Advice

"We are using the free tier of the solution."
"We don't have any issues with the price."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The product's pricing is cheap."
"We are using the free version."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"I rate the product's price a five on a scale of one to ten, where one is low, and ten is high. There are no additional costs to be paid apart from the standard licensing fees attached to the solution."
"It's very difficult for me to give an estimate of the cost. All I know is that we sell the box itself as a service."
"The product is expensive but it offers flexible pricing. It could be affordable."
"Microsoft Azure Application Gateway has less price than other application gateway solutions."
"The solution is cheaper than Imperva. I rate it four to five out of ten."
"I would rate the pricing a three out of ten, with ten being cheap and one being expensive."
"Regarding pricing for Azure Application Gateway, I would rate it at seven."
"The tool's pricing model is pay-as-you-go."
"The cost is not an issue."
"The product is not expensive."
"The price of the solution can be reduced a bit."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
848,253 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
19%
Computer Software Company
13%
Comms Service Provider
9%
Financial Services Firm
8%
Computer Software Company
21%
Government
11%
Financial Services Firm
8%
Non Profit
7%
Computer Software Company
16%
Financial Services Firm
12%
Government
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What needs improvement with Barracuda WAF-as-a-Service?
One significant area for improvement in Barracuda WAF-as-a-Service lies in its market positioning and pricing strateg...
What is your primary use case for Barracuda WAF-as-a-Service?
We use the product for securing email systems, protecting websites, and safeguarding web-based applications and portals.
What's the difference between Azure Front Door and Application Gateway?
We found Azure Front Door to be easily scaled and very stable. The implementation is very fast and Microsoft provides...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft...
What do you like most about Microsoft Azure Application Gateway?
Application Gateway automatically redirects unwanted users and takes care of the security aspect. It also handles the...
 

Also Known As

Cloudflare DNS
Barracuda WAF as a Service
Azure Application Gateway, MS Azure Application Gateway
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Salvation Army
Lilly, AccuWeather, AIRFRANCE, Honeywell
Find out what your peers are saying about Barracuda WAF-as-a-Service vs. Microsoft Azure Application Gateway and other solutions. Updated: April 2025.
848,253 professionals have used our research since 2012.