Try our new research platform with insights from 80,000+ expert users

Barracuda Web Application Firewall vs Cloudflare comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Barracuda Web Application F...
Average Rating
8.2
Number of Reviews
40
Ranking in other categories
Web Application Firewall (WAF) (15th)
Cloudflare
Average Rating
8.4
Number of Reviews
71
Ranking in other categories
CDN (1st), Distributed Denial of Service (DDOS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (11th)
 

Mindshare comparison

While both are Security Services solutions, they serve different purposes. Barracuda Web Application Firewall is designed for Web Application Firewall (WAF) and holds a mindshare of 2.0%, down 2.2% compared to last year.
Cloudflare, on the other hand, focuses on Distributed Denial of Service (DDOS) Protection, holds 19.8% mindshare, down 20.6% since last year.
Web Application Firewall (WAF)
Distributed Denial of Service (DDOS) Protection
 

Featured Reviews

Carlo Bertini - PeerSpot reviewer
Sep 8, 2023
Provides strong issue discovery capabilities; enhance the security parameters of web applications and suitable for medium to large enterprises
The Barracuda support depends. Sometimes, they solve the issue promptly, but normally, they are not so fast and are not entirely focused on the problem. For example, sometimes I write many requests on the tickets, asking for one, two, three, or four steps and asking for one to three resolutions. Often, they respond with only one or two. So, I need to push again and again. In other cases, I ask questions and get positive feedback immediately, depending on who the technician is. Barracuda has engineers in the USA, UK, and other countries, so it depends on the technician's location and expertise. So, I am not completely satisfied, but sometimes it is okay, and sometimes it is not okay. So, depending on the region and depending on the person who actually receives these tickets, the technical support could be more knowledgeable. So they may need some training or education for the entire staff to respond immediately without any delays. Often, it happens that they respond because they need to, not because they understand the technology I'm using. So they respond just because it's required by the service level agreement, which specifies a response time within four hours. But this is just a response, not a resolution of the case. Sometimes, the response is within the agreed time, but the solution takes much longer.
Spencer Malmad - PeerSpot reviewer
Dec 1, 2022
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the automatic content filtering."
"We only need one subscription to be protected against both active DDoS and offline DDoS attacks."
"The stability of the solution is good. I don't think we've experienced bugs, crashes, or glitches."
"The product's advanced bot and threat protection capabilities are valuable."
"If an attack is coming continuously, you can ask the device to block it temporarily for two to three minutes. F5 has not provided us with an option to block certain IPs for some time. Barracuda can help you block someone if the source is from a different IP. You can apply the rule to the device and block it for whatsoever time you want. The solution will unblock the IP after the prescribed time as well."
"The installation is straightforward."
"The volumetric DDoS defense is very good because I had a problem with a lot of volumetric DDoS attacks on my servers. After using Barracuda, those attacks have stopped and all the traffic is going smoothly to my servers and the system is working really well."
"Has a good dashboard."
"The UI is good."
"It is a stable solution. I rate the stability a ten out of ten...I rate the scalability a ten out of ten."
"I like Cloudflare's application gateway and DDoS protection."
"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"Its most significant benefit to date is the speed with which it refreshes DNS records on the internet once you change it. If you are changing a website or registering a new record, it is very quick."
"The technical support is good."
"The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules."
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
 

Cons

"It is not stable nor mature."
"We've had some blocks of the application and some false positives."
"I think the main area for improvement in this product is learning it, as can be seen when comparing it to the F5 web application firewall. F5 has a very powerful learning phase when you start using your web application firewall against your site. Barracuda has something like this, but not with the same functionality from my point of view."
"I would suggest that someone implementing this product is knowledgeable in the IT field, and with the network needs. It is complex."
"Sometimes when we put it in action, we have some blogs that appear as false positives. I think that it's improving. Barracuda should minimize false positives."
"An area for improvement in Barracuda Web Application Firewall is attack identification. Other banks identified attacks and tracked logs that the solution wasn't able to identify because of its ready-made rules pre-deployed by the vendor. My organization raised this issue with the technical support team. Another area to improve in Barracuda Web Application Firewall is its service desk. The team resorted to stonewalling because they couldn't accept that a feature was missing in the solution, and it was only after a lot of drilling down that the service desk team accepted that, and would be adding that feature in the future. My organization had to submit a report to the Reserve Bank of India with information on the logs identified and the attacks that happened, and that there was a failure on the part of the Barracuda Web Application Firewall. The Reserve Bank of India conducts a tri-monthly cyber risk audit in all Indian banks. Even smaller banks identified and caught attacks that my organization wasn't able to do, so I was looking into other solutions that competitor banks could be using because Barracuda Web Application Firewall failed to identify some of the attacks."
"They should improve their features, so they easily compare to the competition."
"As most people are aware, the implementation is not easy."
"Support response time could be improved."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"The integration of LLMs on the dashboard is something that is needed in the tool."
"An integrated SSO feature would be useful for Cloudflare DNS."
"Cloudflare's free plan is limited to 5,000 records for their free plan. They should increase that. For example, if I create a domain called abc.com and a subdomain called a.abc.com, my record count will be two. I can make a maximum of 5,000 subdomains. However, if we use our own DNS hosted on another provider, there is no limit. Their free plan also lacks name server customization."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"Cloudflare should add more documentation and pricing to the cloud version."
"The solution could work at being less expensive. It costs a lot to use it."
 

Pricing and Cost Advice

"They only offer a yearly licensing plan."
"Barracuda costs us $8,000 per year. Barracuda costs $20,000 for a full subscription, when you try to protect multi-site infrastructure, in different geographical zones and for different data centers. If you have only one site, Barracuda will be cheaper."
"In my opinion, the product is fairly priced."
"The product pricing was competitive for the value it offers regarding security features."
"The product is expensive."
"The price of the solution is a little expensive. There is a license for this solution and it can be purchased every one, two, or five years."
"The pricing is less compared to other web applications."
"For small companies, the price is very expensive because the WAF is an enterprise-level application, not intended for smaller businesses. In my opinion, the price is right for enterprise-level use."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"The product's pricing is cheap."
"The tool is a premium product, so it is very expensive."
"The price is reasonable."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"That is one of the great features. I was able to access the majority of the features and services for free."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
814,649 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Computer Software Company
20%
Financial Services Firm
10%
Educational Organization
9%
Government
8%
Educational Organization
25%
Computer Software Company
13%
Comms Service Provider
7%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Barracuda Web Application Firewall?
It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs in our environment.
What is your primary use case for Barracuda Web Application Firewall?
I use the solution in my company to protect our website.
Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GRE tunnels. We have decreased site load times on Mobile 3G from 8 to 1,6 seconds ...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service that offers great redundancy and advanced security with built-in unmetered and ...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
 

Also Known As

No data available
Cloudflare DNS
 

Overview

 

Sample Customers

Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar
Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Find out what your peers are saying about Barracuda Web Application Firewall vs. Cloudflare and other solutions. Updated: May 2020.
814,649 professionals have used our research since 2012.