Try our new research platform with insights from 80,000+ expert users

Barracuda Web Application Firewall vs F5 Advanced WAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
71
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Barracuda Web Application F...
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
42
Ranking in other categories
Web Application Firewall (WAF) (17th)
F5 Advanced WAF
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
65
Ranking in other categories
Web Application Firewall (WAF) (2nd)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Carlo Bertini - PeerSpot reviewer
Provides strong issue discovery capabilities; enhance the security parameters of web applications and suitable for medium to large enterprises
The Barracuda support depends. Sometimes, they solve the issue promptly, but normally, they are not so fast and are not entirely focused on the problem. For example, sometimes I write many requests on the tickets, asking for one, two, three, or four steps and asking for one to three resolutions. Often, they respond with only one or two. So, I need to push again and again. In other cases, I ask questions and get positive feedback immediately, depending on who the technician is. Barracuda has engineers in the USA, UK, and other countries, so it depends on the technician's location and expertise. So, I am not completely satisfied, but sometimes it is okay, and sometimes it is not okay. So, depending on the region and depending on the person who actually receives these tickets, the technical support could be more knowledgeable. So they may need some training or education for the entire staff to respond immediately without any delays. Often, it happens that they respond because they need to, not because they understand the technology I'm using. So they respond just because it's required by the service level agreement, which specifies a response time within four hours. But this is just a response, not a resolution of the case. Sometimes, the response is within the agreed time, but the solution takes much longer.
Ahmed Moamen - PeerSpot reviewer
Protects applications with versatile authentication features
F5 offers a versatile solution that can be integrated with APM in cases where integration with an external IDB is needed. It is useful for authentication backup if the on-prem directory service is unavailable. Additionally, its WAF functionality is valuable for protecting applications from attacks. It is a versatile and strong solution that's easy to understand and deploy.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"The most valuable feature of Cloudflare DNS is security."
"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"I get a lot of value from Cloudflare's API because it enables you to build a separate environment inside the solution. You can create a domain for performing test requests before you move to the production environment and connect various domains."
"The solution offers the flexibility to control configuration rules."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"Easier http to https redirect using page rules"
"The most valuable feature of Cloudflare is that it has a free version. They give us the free version with the anti-DDoS features and also the load balancing solution."
"Parameter Protection is a valuable feature."
"The product has fantastic support services."
"The most valuable feature is the rule set."
"The most valuable feature of this solution is the simplicity of configuration."
"We use Barracuda to protect the application. That's the main feature we use it for."
"The most valuable feature is the automatic content filtering."
"It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs in our environment."
"There is no one special feature, but the WAF itself is valuable: user-friendly protection against web attacks etc., authentication, reporting, accountability, alerting, and hardened OS."
"It is also quite intuitive and user-friendly. They have several webinars that are actually like labs. You can use these webinars to learn about how to use all features of the product."
"F5 Advanced WAF has very good stability and scalability. Its initial setup was straightforward."
"F5's user-friendly interface and seamless integration stand out as the most valuable features for us."
"It can scale."
"The most valuable features of F5 Advanced WAF are the security features and the protection."
"Customers find the load balancer feature as the most valuable."
"The most valuable feature is that it is secure."
"The most valuable features of F5 Advanced WAF are SSL uploading, signature, and anomaly detection. It is overall a high-quality solution."
 

Cons

"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"In the last two years, there has been a certain amount of downtime when using the VDM."
"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
"An integrated SSO feature would be useful for Cloudflare DNS."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"The integration of LLMs on the dashboard is something that is needed in the tool."
"If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag."
"For the free and Pro plans, Cloudflare could use a simple bot to provide information to users. This would improve support, especially for less advanced users who utilize the free components."
"I have to go to an individual obligation, make changes, and come out, and go to the next obligation and make the same changes. There is no grouping option."
"I would suggest that someone implementing this product is knowledgeable in the IT field, and with the network needs. It is complex."
"The solution needs to leverage some additional features to a broader scale of software-defined networks."
"Its interface can be better. It is not very friendly."
"They should improve their features, so they easily compare to the competition."
"Barracuda Web Application Firewall's load balancing feature could be improved."
"Barracuda Web Application Firewall’s scalability needs improvement."
"I think the main area for improvement in this product is learning it, as can be seen when comparing it to the F5 web application firewall. F5 has a very powerful learning phase when you start using your web application firewall against your site. Barracuda has something like this, but not with the same functionality from my point of view."
"F5 Advanced WAF could improve the precision of the scanning. There are many false positives. They should improve their threat database."
"The solution should include protection against web page attacks like what is available in FortiWeb."
"We get false positives sometimes."
"The deployment side is quite complex."
"I would say their graphical interface, the GUI. I don't like the GUI as much as before."
"I would like for there to be a cloud-based solution, this would also help to improve scalability."
"People who want to work with the device have to be pro in Linux"
"I would like to see additional controls."
 

Pricing and Cost Advice

"The product's pricing is minimal compared to other products."
"We are using the free version."
"That is one of the great features. I was able to access the majority of the features and services for free."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"The cost primarily depends on the size of the organization."
"The product's pricing is cheap."
"There are no additional costs beyond the standard licensing fees."
"Cost is a bit on the higher side. Big companies can afford it."
"The pricing is reasonable."
"Our licensing fees are paid annually and the cost is between €600 and €800 (approximately $665.00 to $885.00 USD)."
"They have competitive pricing."
"Barracuda costs us $8,000 per year. Barracuda costs $20,000 for a full subscription, when you try to protect multi-site infrastructure, in different geographical zones and for different data centers. If you have only one site, Barracuda will be cheaper."
"The price of the solution is a little expensive. There is a license for this solution and it can be purchased every one, two, or five years."
"They only offer a yearly licensing plan."
"The product is expensive."
"The pricing of F5 Advanced WAF is more expensive than other solutions like Radware and CD18, it is quite high."
"Its price is fair. We have done a couple of deals where they were able to give some kind of discount to the customers. The price was initially high for the customers, but after a couple of negotiations, it came within their budget. They were happy with that."
"It's more expensive than other solutions and depending on the modules, there can be additional fees."
"I rate F5 Advanced WAF's pricing a three out of ten."
"Licensing fees for this solution are paid on a yearly basis."
"It is a little bit costly, but it has all the features that are required."
"I am not sure about pricing but licenses are available on Google."
"There is a perpetual license that comes with your hardware. There is also an additional fee for support."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
25%
Computer Software Company
13%
Comms Service Provider
7%
Financial Services Firm
7%
Computer Software Company
21%
Financial Services Firm
10%
Manufacturing Company
8%
Government
7%
Computer Software Company
15%
Financial Services Firm
15%
Government
8%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Barracuda Web Application Firewall?
It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs...
What is your primary use case for Barracuda Web Application Firewall?
I'm using Barracuda as a web application firewall for any application. It is too smart and user-friendly, making it e...
What is your experience regarding pricing and costs for Barracuda Web Application Firewall?
On a scale, pricing is nine out of ten. It's a reasonable price for this product.
What do you like most about F5 Advanced WAF?
It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the r...
What is your experience regarding pricing and costs for F5 Advanced WAF?
The pricing and support service levels affect response times from customer service, depending on whether the support ...
What needs improvement with F5 Advanced WAF?
The main improvement needed is related to IP intelligence. Once we start receiving traffic from repetitive IP address...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar
MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
Find out what your peers are saying about Barracuda Web Application Firewall vs. F5 Advanced WAF and other solutions. Updated: December 2024.
824,053 professionals have used our research since 2012.