Try our new research platform with insights from 80,000+ expert users

Cloudflare Web Application Firewall vs Microsoft Azure Application Gateway comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 12, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
72
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Cloudflare Web Application ...
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
23
Ranking in other categories
Web Application Firewall (WAF) (7th)
Microsoft Azure Application...
Average Rating
7.2
Reviews Sentiment
6.8
Number of Reviews
47
Ranking in other categories
Application Delivery Controllers (ADC) (4th), Web Application Firewall (WAF) (3rd)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
SachidDoshi - PeerSpot reviewer
Offers a huge signature repository and is superiorly effective in mitigating DDoS attacks
The solution's learning curve can still be further reduced, which presently stands at two or three months. The product has a custom rule set that users can modify and manifest as needed. The vendor can probably shorten the learning curve using cutting-edge technologies like AI. The solution provider can also work around the web applications and identify the toolset that needs to be implemented to deploy the solution in less time. The vendor has launched a SASE product that can function with Cloudflare Web Application Firewall, but many improvements are needed in terms of features, such as the web filtering feature, and CASB has not yet been added.
Shehzad Ali - PeerSpot reviewer
Offers time and cost savings with integration, but user interface needs improvement
We are using it for our internal application development. We are testing those features of application gateways. We are integrating it with our solutions, application, Azure Application Gateway Microsoft has a vast variety of tools, and it blends very well. It provides a range of services, so it…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"I like Cloudflare's application gateway and DDoS protection."
"Smaller businesses have seen great ROI due to the low investment and strong performance."
"The UI is good."
"The most valuable feature of Cloudflare DNS is security."
"The overall experience with Cloudflare is positive, with a rating of eight out of ten."
"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service."
"The rate limiting features and customizations in terms of URL match and applying policies are valuable to me."
"I'm highly satisfied. It's remarkably user-friendly, enabling me to quickly identify issues, and deploy solutions, and it offers the necessary features."
"It is configurable via API."
"The integration of Cloudflare with Cloud Suite is its most valuable feature."
"The product has a valuable security control functionality."
"We like that there's load balancing, firewall capabilities, DDoS protection, et cetera, all covered by Cloudflare."
"There is a huge signature repository"
"Cloudflare WAF provides protection through rules and functionalities like Cloudflare's SDRAP."
"The health probe is pretty good for your backend health. It tells you whether it's communicating and talking to the endpoint correctly. It is quite useful."
"The most valuable feature of the solution is the web application firewall (WAF)."
"The solution's most valuable feature is an HTTP solution and SSL certificate. It is also easy to use."
"WAF feature replicates the firewall."
"The most valuable features of Microsoft Azure Application Gateway are the policies, the data store they are using, and the cloud platform it operates on."
"This is a SaaS product, so it is always up to date."
"We can control what rules should be used and what should be disabled."
"The tool is easy to use and quite flexible. It has policy management features as well. The solution screens all traffic to our web applications before passing it to the application. We recently tested it on one of our poorly developed applications, and the upgrade gave us a 100% result based on our tests. It's very effective as a security measure, and people can detect threats even through the web application."
 

Cons

"The solution could work at being less expensive. It costs a lot to use it."
"It would be helpful if the solution could continue evolving to compete with the other solutions on the market."
"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"The solution could be more user-friendly."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"It should be easier to collect the logs with companies like Sumo. However, based on my discussions with the salespeople, I understand that's how they make their money. With the enterprise product, they want people doing those kinds of enterprise features to do the logging. They want them to pay a lot of money, and that's where I have an issue with them. That should be a default. You should be able to get the log no matter what. The logging should be universal."
"We have noticed multiple instances where Cloudflare falsely indicates that our servers are down, even when there is no actual load on them. This makes it challenging for us to identify the exact issue."
"The product can improve by having more multitenancy capability, which is currently not available."
"There could be an option to duplicate the cluster to maintain the consistency of rules."
"I have experienced some difficulties with Cloudflare's support as a customer based in India."
"It would be ideal if the solution offered better log integration and more integration with different platforms."
"Their documentation could be better. They don't have documentation that explains everything well. They have documentation for everything you're looking for, but they lack a single piece of documentation to tie everything together. As a new user or beginner, it took us a little bit of time to figure out how to put all these things in place."
"The product can improve by having more multitenancy capability, which is currently not available."
"We have noticed some latency when the call goes through the firewall. That could be improved."
"The platform's control features related to real-time authentication and response time need improvement."
"Microsoft Azure Application Gateway is not scalable."
"The working speed of the solution needs improvement."
"The pricing of the solution could be improved. Right now, it's a bit expensive."
"It is a bit tricky to configure. You've got to have a very specific format to configure it. They should make it a little bit easier to configure. Mapping the certificates into it isn't easy, and it could be better. Currently, you've to write a bit of automation to pull certificates directly to HTTPS."
"The solution could improve by increasing the performance when doing updates. For example, if I change the certificate it can take 30 minutes. Other vendors do not have this type of problem."
"The tool's pricing could be improved."
"We have encountered some issues with automatic redirection and cancellation, leading to 502 and 504 gateway errors. So, I experienced some trouble with containers."
"We faced some downtime while validating CNAME."
 

Pricing and Cost Advice

"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"The product's pricing is cheap."
"The product's pricing is minimal compared to other products."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"We don't have any issues with the price."
"The price is reasonable."
"The tool is a premium product, so it is very expensive."
"There are no additional costs beyond the standard licensing fees."
"What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."
"We pay $210 per month for CloudFlare WAF."
"It starts at $20 and can easily go up to $200 monthly"
"The solution is expensive."
"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."
"Cloudflare Web Application Firewall is more affordable than other solutions."
"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."
"It is not too pricey."
"The product is not expensive."
"Microsoft Azure Application Gateway is expensive."
"The solution is cheaper than Imperva. I rate it four to five out of ten."
"It is not expensive."
"I rate the pricing seven out of ten because some third-party solutions are even costlier than this."
"Regarding pricing for Azure Application Gateway, I would rate it at seven."
"Between v1 and v2, there is a lot of change in the pricing. It is very costly compared to AWS."
"The price of the solution can be reduced a bit."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
838,640 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
24%
Computer Software Company
13%
Comms Service Provider
8%
Financial Services Firm
8%
Educational Organization
28%
Computer Software Company
13%
Financial Services Firm
7%
Comms Service Provider
5%
Computer Software Company
16%
Financial Services Firm
12%
Government
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Cloudflare Web Application Firewall?
The product has a valuable security control functionality.
What is your experience regarding pricing and costs for Cloudflare Web Application Firewall?
Cloudflare is cheaper compared to Azure WAF, which I have considered before.
What needs improvement with Cloudflare Web Application Firewall?
The product can improve by having more multitenancy capability, which is currently not available. This improvement wo...
What's the difference between Azure Front Door and Application Gateway?
We found Azure Front Door to be easily scaled and very stable. The implementation is very fast and Microsoft provides...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft...
What do you like most about Microsoft Azure Application Gateway?
Application Gateway automatically redirects unwanted users and takes care of the security aspect. It also handles the...
 

Also Known As

Cloudflare DNS
Cloudflare WAF
Azure Application Gateway, MS Azure Application Gateway
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
crunchbase, udacity, marketo, okcupid, zendesk
Lilly, AccuWeather, AIRFRANCE, Honeywell
Find out what your peers are saying about Cloudflare Web Application Firewall vs. Microsoft Azure Application Gateway and other solutions. Updated: January 2025.
838,640 professionals have used our research since 2012.