Try our new research platform with insights from 80,000+ expert users

Barracuda Web Application Firewall vs Microsoft Azure Application Gateway comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
71
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Barracuda Web Application F...
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
42
Ranking in other categories
Web Application Firewall (WAF) (17th)
Microsoft Azure Application...
Average Rating
7.2
Reviews Sentiment
6.8
Number of Reviews
46
Ranking in other categories
Application Delivery Controllers (ADC) (4th), Web Application Firewall (WAF) (3rd)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Carlo Bertini - PeerSpot reviewer
Provides strong issue discovery capabilities; enhance the security parameters of web applications and suitable for medium to large enterprises
The Barracuda support depends. Sometimes, they solve the issue promptly, but normally, they are not so fast and are not entirely focused on the problem. For example, sometimes I write many requests on the tickets, asking for one, two, three, or four steps and asking for one to three resolutions. Often, they respond with only one or two. So, I need to push again and again. In other cases, I ask questions and get positive feedback immediately, depending on who the technician is. Barracuda has engineers in the USA, UK, and other countries, so it depends on the technician's location and expertise. So, I am not completely satisfied, but sometimes it is okay, and sometimes it is not okay. So, depending on the region and depending on the person who actually receives these tickets, the technical support could be more knowledgeable. So they may need some training or education for the entire staff to respond immediately without any delays. Often, it happens that they respond because they need to, not because they understand the technology I'm using. So they respond just because it's required by the service level agreement, which specifies a response time within four hours. But this is just a response, not a resolution of the case. Sometimes, the response is within the agreed time, but the solution takes much longer.
Sami - PeerSpot reviewer
High stability with built-in rules that reduce alerts and are easy to configure
The graphical interface needs improvement because it is not user friendly. There isn't a standardized process for blocking IPs. IPs need to be blocked individually, whether one or one hundred. A normal scenario would be to copy and paste multiple IPs at the same time but the solution does not offer this option. Updating takes a long time and is up to the WAF. In most cases, we prepare scripts to handle these updates.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution provides good load balancing and protection against DDoS attacks."
"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"The solution is very good at mitigating threats."
"It is easier to configure and develop documentation to see how we have configured firewalls."
"The most valuable features of the solution are performance and security."
"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"The solution is stable, and the DNS servers are simple to use."
"The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
"Data leak prevention is very important and ensures protection against attacks."
"One of the strongest points is its robust issue discovery capabilities. Barracuda invests significant efforts in identifying and resolving issues. They have multiple products that work in tandem to perform these checks, which is beneficial because it automates security updates. This is the primary reason I recommend it to my customers."
"It allows us to scale out to multiple phase servers."
"Even when we were upgrading to a new OS, we didn't have any difficulties with the product. The stability is good."
"The initial setup is easy."
"The most valuable feature is the automatic content filtering."
"Its recommendation about the probabilities on the website is great. It also has free probability managers for the website, which is really helpful. The protection engine, signature-based protection behavior, and analysis features are also great. It also has an ATP module for sandbox scanning and behavior analysis for file uploads."
"Setup of this solution is straightforward. It's a stable and scalable solution, with good performance and fast technical support."
"It has a filter available, although we are not currently using it because it is not part of our requirements. But it is a good option and when it becomes part of our requirements we will definitely use it."
"We chose this solution in the first place because it has access to Layer 7. I can control the requests and the content, which I can access on my network if I want to even if it's forbidden access to other external resources. If I want to monitor, for example, traffic, and apply this rule on Layer 7, I can do so. This was our main goal when implementing this application. We wanted to take advantage of the Gateway capabilities."
"The health probe is pretty good for your backend health. It tells you whether it's communicating and talking to the endpoint correctly. It is quite useful."
"The solution integrates different applications and APIs securely, enhancing overall security and network optimization."
"We find it valuable because it is compatible with our existing Azure solution."
"The solution's integration is very good."
"The product's initial setup phase was easy."
"The production is a valuable feature."
 

Cons

"It would be helpful if the solution could continue evolving to compete with the other solutions on the market."
"There might be helpful if there was some web application firewall feature."
"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"The integration of LLMs on the dashboard is something that is needed in the tool."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"There are some vulnerabilities that are reported across the tools offered by Barracuda for some devices, which need to be taken care of from an improvement perspective."
"The usability of the interface could be improved."
"Barracuda Web Application Firewall’s scalability needs improvement."
"I faced an issue when Barracuda decided not to support Azure Stack Hub anymore, which was a significant issue as we had many customers using it on that platform."
"We've had some blocks of the application and some false positives."
"There are issues when upgrading firewalls and we experience different issues across customers."
"The incident reporting needs to be improved."
"I have to go to an individual obligation, make changes, and come out, and go to the next obligation and make the same changes. There is no grouping option."
"It is a bit tricky to configure. You've got to have a very specific format to configure it. They should make it a little bit easier to configure. Mapping the certificates into it isn't easy, and it could be better. Currently, you've to write a bit of automation to pull certificates directly to HTTPS."
"The product's performance should be better."
"The solution doesn’t support wildcard-based and regular expression-based rules."
"I want the solution's support to improve. The tool is also expensive."
"One of the challenges we faced was the solution does not support any other PCP protocols apart from HTTP and HTTPS."
"Application Gateway’s limitation is that the private and the public endpoint cannot use the same port."
"The working speed of the solution needs improvement."
"Implementing and standardizing the solution across the IT landscape in a heterogeneous environment is painful."
 

Pricing and Cost Advice

"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The product's pricing is cheap."
"The cost primarily depends on the size of the organization."
"A free version of the solution is available."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"The price is reasonable."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"The Barracuda Web Application Firewall is quite expensive."
"Cost is a bit on the higher side. Big companies can afford it."
"While I would have to check on the price of the solution, I feel it to be okay and it matches the market price."
"The pricing is reasonable."
"The pricing is less compared to other web applications."
"In my opinion, the product is fairly priced."
"The price of the solution is a little expensive. There is a license for this solution and it can be purchased every one, two, or five years."
"The product is inexpensive."
"Microsoft Azure Application Gateway is expensive."
"I rate the price of Microsoft Azure Application Gateway an eight out of ten."
"The solution is reasonably priced."
"Regarding pricing for Azure Application Gateway, I would rate it at seven."
"There is a need to pay a fixed price per month to use the product. There are no additional payments to be made to Microsoft apart from the charges paid towards the monthly licensing costs attached to the solution."
"The product is expensive. I rate the pricing a seven out of ten."
"The tool's pricing model is pay-as-you-go."
"The solution is fairly priced."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
25%
Computer Software Company
13%
Comms Service Provider
7%
Financial Services Firm
7%
Computer Software Company
21%
Financial Services Firm
10%
Manufacturing Company
8%
Government
7%
Computer Software Company
16%
Financial Services Firm
12%
Government
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Barracuda Web Application Firewall?
It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs...
What is your primary use case for Barracuda Web Application Firewall?
I'm using Barracuda as a web application firewall for any application. It is too smart and user-friendly, making it e...
What is your experience regarding pricing and costs for Barracuda Web Application Firewall?
On a scale, pricing is nine out of ten. It's a reasonable price for this product.
What's the difference between Azure Front Door and Application Gateway?
We found Azure Front Door to be easily scaled and very stable. The implementation is very fast and Microsoft provides...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft...
What do you like most about Microsoft Azure Application Gateway?
Application Gateway automatically redirects unwanted users and takes care of the security aspect. It also handles the...
 

Also Known As

Cloudflare DNS
No data available
Azure Application Gateway, MS Azure Application Gateway
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar
Lilly, AccuWeather, AIRFRANCE, Honeywell
Find out what your peers are saying about Barracuda Web Application Firewall vs. Microsoft Azure Application Gateway and other solutions. Updated: December 2024.
824,053 professionals have used our research since 2012.