Try our new research platform with insights from 80,000+ expert users

Barracuda Web Application Firewall vs F5 Advanced WAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (12th)
Barracuda Web Application F...
Average Rating
8.2
Reviews Sentiment
7.5
Number of Reviews
44
Ranking in other categories
Web Application Firewall (WAF) (17th)
F5 Advanced WAF
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
69
Ranking in other categories
Web Application Firewall (WAF) (1st)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Anne-Aimee Wollerich - PeerSpot reviewer
Managing bot traffic effectively enhances usability for non-technical users
Barracuda Web Application Firewall lacks some of the more specified and structured features offered by solutions like Tenable. Although Tenable is more expensive and less easily deployable, its features are more deepened and chiseled, particularly for IT personnel. For example, Tenable provides more comprehensive dark web scanning capabilities, which Barracuda could improve upon.
Ahmed Moamen - PeerSpot reviewer
Protects applications with versatile authentication features
F5 offers a versatile solution that can be integrated with APM in cases where integration with an external IDB is needed. It is useful for authentication backup if the on-prem directory service is unavailable. Additionally, its WAF functionality is valuable for protecting applications from attacks. It is a versatile and strong solution that's easy to understand and deploy.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"The DDoS protection is the most valuable aspect of the solution."
"New and innovative way to protect the client's data."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"It is a fast and secure DNS."
"The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"From what I've seen so far, there are no negatives to report as of yet"
"The initial setup is pretty straightforward, especially if you enlist assistance."
"The solution's most valuable feature is that it actually protects our website, and it provides all the required security functions."
"The customer service and support are exceptional, and I would give them a ten out of ten."
"The solution is user-friendly and easy to set up."
"It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs in our environment."
"The stability of the product is good. Stability-wise, I rate the solution a ten out of ten."
"Our customers value the solution's simplicity."
"Has a good dashboard."
"The best solution for WAF."
"Very easy to implement and works well."
"It can scale."
"The product has valuable features for load balancing, monitoring tools, and HPXpress services."
"It ensures compliance with security standards by providing features like PCI DSS checks."
"F5 technical support is excellent. They are experts who always provide the right solution, and they understand the problem. Their response and resolution times are good."
"Customers find the load balancer feature as the most valuable."
"F5 Advanced WAF offers features not available in other products."
 

Cons

"For the free and Pro plans, Cloudflare could use a simple bot to provide information to users. This would improve support, especially for less advanced users who utilize the free components."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"Cloudflare does not have an on-premise solution. If they had different approaches they could be better suited to accommodate more customers, such as on-premise and hybrid deployments. For example, hybrid deployments would be useful where you could move the traffic from the enterprise to the cloud."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"Cloudflare's free plan is limited to 5,000 records for their free plan. They should increase that. For example, if I create a domain called abc.com and a subdomain called a.abc.com, my record count will be two. I can make a maximum of 5,000 subdomains. However, if we use our own DNS hosted on another provider, there is no limit. Their free plan also lacks name server customization."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"The reporting can definitely be improved to offer a lot more explanation on something that may have happened or has actually happened."
"We've had some blocks of the application and some false positives."
"Sometimes when we put it in action, we have some blogs that appear as false positives. I think that it's improving. Barracuda should minimize false positives."
"It would be better if their updates would be released annually."
"I would like to see a native multi-cloud cover."
"There are issues when upgrading firewalls and we experience different issues across customers."
"There are false positives that I am receiving when compared to other WAFs."
"As a service, Barracuda needs to host in Saudi Arabia, as they currently don't have this functionality."
"Barracuda Web Application Firewall lacks some of the more specified and structured features offered by solutions like Tenable."
"One thing that can be improved, is to increase the quantity over predefine policy."
"F5 Advanced WAF could improve the precision of the scanning. There are many false positives. They should improve their threat database."
"The solution should include RASP for another level of protection at the code itself."
"Users would like to have an additional IP intelligence license to handle this within WAF itself without needing to engage with the SOC team."
"The reporting could be clearer and embedded to include our movement data."
"The BIG-IQ is supposed to centralize the management for all of the boxes but it's not very effective."
"The pricing could be more flexible."
"The administrator's user interface and some of the settings can sometimes be very complicated to understand."
 

Pricing and Cost Advice

"There are no additional costs beyond the standard licensing fees."
"The price of the solution is expensive."
"We don't have any issues with the price."
"We are using the free tier of the solution."
"We are using the free version."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"Cost is a bit on the higher side. Big companies can afford it."
"Barracuda costs us $8,000 per year. Barracuda costs $20,000 for a full subscription, when you try to protect multi-site infrastructure, in different geographical zones and for different data centers. If you have only one site, Barracuda will be cheaper."
"The price of the solution is a little expensive. There is a license for this solution and it can be purchased every one, two, or five years."
"The price is reasonable, more so than other products."
"They have competitive pricing."
"They only offer a yearly licensing plan."
"The product is expensive."
"The solution is based on a licensing model and might be $360 for the hybrid version."
"It is a little bit costly, but it has all the features that are required."
"There is an annual subscription for this solution."
"I am not sure about pricing but licenses are available on Google."
"F5 bundles up services and the bundle is what you pay for rather than individual components."
"It's more expensive than other solutions and depending on the modules, there can be additional fees."
"Pricing for this solution is higher than average."
"There are different licenses available to use F5 Advanced WAF, such as BT, ASM, and LPM."
"I rate F5 Advanced WAF's pricing a three out of ten."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
869,952 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
15%
Financial Services Firm
9%
Manufacturing Company
8%
University
6%
Computer Software Company
15%
Financial Services Firm
14%
Government
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business25
Midsize Enterprise6
Large Enterprise11
By reviewers
Company SizeCount
Small Business25
Midsize Enterprise14
Large Enterprise29
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Barracuda Web Application Firewall?
It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs...
What is your primary use case for Barracuda Web Application Firewall?
Our primary use case was to track the traffic on websites or webshops to identify potential malicious actors, such as...
What is your experience regarding pricing and costs for Barracuda Web Application Firewall?
The pricing for Barracuda is quite high compared to other OEMs. Each transaction requires my purchase team to negotia...
What do you like most about F5 Advanced WAF?
It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the r...
What needs improvement with F5 Advanced WAF?
I do not have anything in mind right now that needs improvement. Generally, it works well. If we need any specific fe...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar
MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
Find out what your peers are saying about Barracuda Web Application Firewall vs. F5 Advanced WAF and other solutions. Updated: September 2025.
869,952 professionals have used our research since 2012.