Try our new research platform with insights from 80,000+ expert users

F5 Advanced WAF vs Radware Cloud WAF Service comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
71
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
F5 Advanced WAF
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
67
Ranking in other categories
Web Application Firewall (WAF) (2nd)
Radware Cloud WAF Service
Average Rating
8.6
Reviews Sentiment
7.9
Number of Reviews
23
Ranking in other categories
Web Application Firewall (WAF) (10th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Richard Polyak - PeerSpot reviewer
Easy event identification, highly stable, and customizable
Generally, F5 Advanced WAF initial setup is straightforward. However, our environment was more complex and it took us a little more time to customize the solution to where we needed it to be. Additionally, the customization didn't rectify everything. We had to do customization to a certain event to prevent attacks that it wasn't catching, but that might not necessarily be the solutions' fault. It could be more of our setup than the solution's fault and not being able to run the latest version or the newer version could be more of a limitation on our ability to put it in the right place. The whole implementation to have the solution run at the level we wanted it to take approximately five months. Our company's environment is one that we can't put a canned solution in front of. Our environment, cannot have a canned solution that might fit everybody else because of how customized this environment is. It does need a lot of tuning to meet our environment's requirements. I rate the initial setup of F5 Advanced WAF a three out of five.
Werner Lunow - PeerSpot reviewer
The interface is easy to use, and the solution protects us from OWASP Top Ten threats
DDoS protection was the critical feature we wanted when we decided to go with Radware. The company faced many DDoS attacks at the time, and we didn't have a solution. It's not the only reason we chose Cloud WAF. We do use it for other use cases. Cloud WAF's interface is easy to use and protects us from OWASP Top Ten threats. Our dev team do QA checks on applications before they go live, but Cloud WAF creates an additional security layer on our website. The solution protects against multiple threat types. We see SQL injection attacks and DDoS probes constantly. Attackers attempt multiple queries and enumeration attacks against our applications. We previously had a basic firewall with an IPS feature set, but it wasn't providing the same level of protection we get from the WAF. CloudWAF matches things automatically and identifies any threats. It seems to be doing its job. We sometimes have strange code-related behavior. When our developers write some poorly written code, it generates events in Cloud WAF. It's generally effective at detecting. We had an issue with a misconfigured rule where it blocked legitimate traffic. Overall, we haven't had many issues with it in the last three years. We leave it alone.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"Smaller businesses have seen great ROI due to the low investment and strong performance."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service."
"The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"Centralized, full-featured DNS."
"The web application firewall itself is most valuable. It provides positive security and negative security. In negative security, it blocks a task such as cross-site scripting, code injection, etc. In positive security, it lets you specify and enforce things, such as the parameters allowed in username and password fields and the number of characters allowed in a field."
"The solution's most valuable features include application DDoS protection, bot blocking, and HTTP header verifications."
"The most valuable features of F5 Advanced WAF are the overall capabilities, there is not a comparable solution on the market."
"The most valuable features of F5 Advanced WAF are the easy identification of events and customization. We can pinpoint our settings."
"There are a lot of good features."
"F5 Advanced WAF has very good stability and scalability. Its initial setup was straightforward."
"The solution is easily accessible on mobile and laptop devices."
"It's scalable and very easy to manage."
"From a financial point of view, we no longer need to appropriate more horsepower to our backend web servers constantly to service these requests because Cloud WAF is preventing malicious bots from accessing our web page. It reduced the load on our backend."
"The solution offers good protection."
"With the current visibility dashboard, we can now obtain insight into the nature of attacks, identify attackers, and detect top IP or threat regions."
"Cloud WAF's interface is easy to use and protects us from OWASP Top Ten threats. Our dev team do QA checks on applications before they go live, but Cloud WAF creates an additional security layer on our website."
"DDoS protection is a valuable feature that works efficiently."
"The most valuable feature is the monitoring dashboard that we access through the portal."
"What makes this a comprehensive offering from Radware is that it combines WAF, ADA, bot management, and API protection, which is not currently available from any other provider in the market."
"The API Discovery is also very good because the application is outsourced, which means that we don't have the code. API Discovery allowed me to discover precisely how to orchestrate the API so that I could see the results."
 

Cons

"DNS Management."
"There are some issues with the CDN services."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag."
"In the last two years, there has been a certain amount of downtime when using the VDM."
"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
"There might be helpful if there was some web application firewall feature."
"They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem."
"Compatibility with multiple cloud environments needs improvement. Both stability and scalability need to be improved."
"F5 Advanced WAF needs better integration within the application, like remote dashboards."
"More legacy protocols should be added to the solution."
"The delay times on firmware patches and software updates could be better and improved."
"There should be more ability to rate limit certain scenarios. The majority of the time, it is either on or off. For certain types of use cases, there should be the ability to rate limit, not just enable or disable."
"People who want to work with the device have to be pro in Linux"
"The interface is old-looking, it's not modern, which is why it's not always comfortable to use."
"The solution could improve by having an independent capture module. It has a built feature that you can deploy the capture on your published website. However, it's not very user-friendly. When you compare this feature to Google Capture or other enterprise captures, they are very simple. It needs a good connection to the F5 Advanced WAF sandbox. When you implement this feature in the data center, you may suffer some complications with connecting to the F5 Advanced WAF sandbox. This should be improved in the future."
"Radware's bot manager can be improved because it's very complicated to implement for apps. Radware could also add alerts by WhatsApp or Telegram. It only sends notifications via email or SMS."
"They have a portal for webinar training but because we are in a Spanish-speaking country, it is difficult for us to watch them. Not all of us are fluent in English, but most of the courses and webinars are in English. That part could be improved..."
"API integration and documentation need to be improved. There should be more detailed documentation for API usage, rate limiting, CNAME, and DDoS functions. A lot of articles need to be added to their portal."
"We've had some issues with putting certificates in."
"Radware Cloud WAF Service should provide SSL certificates for its hosting customers."
"If we want to publish services to a limited number of providers and we only want those providers to connect, we need to forward those requests to the Radware support team and they apply them, but it takes some time."
"The connection between the front and back ends could be improved."
"The lower-level technical team at Radware could improve their approach to problem-solving as they sometimes are very slow."
 

Pricing and Cost Advice

"There are no additional costs beyond the standard licensing fees."
"The tool is a premium product, so it is very expensive."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"We are using the free version."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"The product's pricing is cheap."
"A free version of the solution is available."
"We don't have any issues with the price."
"I rate F5 Advanced WAF's pricing a three out of ten."
"Its price is fair. We have done a couple of deals where they were able to give some kind of discount to the customers. The price was initially high for the customers, but after a couple of negotiations, it came within their budget. They were happy with that."
"I am not sure about pricing but licenses are available on Google."
"I don't have any issue with the pricing of this solution."
"F5 Advanced WAF's pricing is high."
"It is expensive. Its price should be better. Its licensing is on a yearly basis. Its licensing is also based on the model. There are no additional costs."
"There is a perpetual license that comes with your hardware. There is also an additional fee for support."
"There is an annual subscription for this solution."
"The price is a bulk average."
"I am not directly involved in pricing and setup cost discussions, but it seems that Radware offers a more cost-effective solution compared to F5. It is considered a good value for our budget."
"When compared to Akamai and F5, Radware's pricing and licensing are highly competitive."
"The pricing is fair."
"I believe the prices are fair."
"We are paying $20,000 annually for six licenses that provide basic WAF functionality."
"Radware Cloud WAF Service falls within a mid-range price bracket compared to other web application firewall solutions."
"If you plan to deploy Cloud WAF, keep in mind that the product is priced based on the megabits of traffic that pass through and the number of transactions. You should get your requirements correct up front. The active attackers feed and CDN services cost extra, so you need to negotiate these features upfront."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
832,138 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
24%
Computer Software Company
13%
Comms Service Provider
8%
Financial Services Firm
7%
Computer Software Company
15%
Financial Services Firm
15%
Government
8%
Manufacturing Company
6%
Computer Software Company
16%
Manufacturing Company
11%
Retailer
10%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about F5 Advanced WAF?
It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the r...
What is your experience regarding pricing and costs for F5 Advanced WAF?
The setup cost is normal, yet not the best in terms of the commercial aspect. Other competitors like Fortinet are che...
What needs improvement with F5 Advanced WAF?
One improvement for AOF could be focusing on enhancing its AI engine to make it more mature.
What do you like most about Radware Cloud WAF Service?
One of the most valuable features we have found in the solution is protection against attacks from botnet networks an...
What is your experience regarding pricing and costs for Radware Cloud WAF Service?
I am not directly involved in pricing and setup cost discussions, but it seems that Radware offers a more cost-effect...
What needs improvement with Radware Cloud WAF Service?
API integration and documentation need to be improved. There should be more detailed documentation for API usage, rat...
 

Also Known As

Cloudflare DNS
No data available
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
Information Not Available
Find out what your peers are saying about F5 Advanced WAF vs. Radware Cloud WAF Service and other solutions. Updated: January 2025.
832,138 professionals have used our research since 2012.