Imperva DDoS Reviews

Previously I was in software development for more than 15 years. I had developed web applications for internet and cable TV companies. Now, I am a sales executive for Imperva Cloud WAF. 

Imperva Cloud WAF, previously Imperva Incapsula, is a web application firewall that is implemented in the cloud. It protects a public facing web application. It will track if a hacker is doing brute force attack. The web application firewall will detect it and block the source. This could be an IP address or the main name specific for a country. You can then update the profile of your server to block those IP addresses where the attack is coming from .

We have placed Imperva Cloud in our client's employee self service system that they are logged into. The website is protected by Imperva so that employees and customers can log in all over the Philippines. The client is a power generation company, which is a critical service, and has branches all over the Philippines.

We partner with a couple of on-premise data centers in the Philippines, one is PIM. They also provide cloud solutions. We bundle our solutions into their cloud projects.

Imperva Incapsula has many valuable features. One, it protects the top 10 OWAS vulnerability, the open web application software platform, this is standard. Secondly, it protects against broken authentication. As well, it has remote execution of code.

Imperva always needs to adjust to new versions of cyber attacks, it needs to be faster, improve the resiliency of the software of the solution.

I have been using Imperva Cloud WAF for three years.

Imperva is stable. Based on Gartner's survey we are top three, meaning we are reliable based on customer feedback.

This is a scalable solution. We have data centers all over the world. The solution can be set up to be optimized wherever the clients are accessing.

Technical support has good response time. I am also the liaison officer for the technical team in Singapore. Support responds quickly and they do attend to the issues that we raise to them.

The implementation of Imperva Cloud WAF is easy. All you need to do is change the DNS settings, because it is a cloud solution there is no appliance that you need to install at the data center. It just changes the DNS settings, and then a couple of IP address and domain name settings to allow a couple of those IP addresses and domain names settings into the firewall of the client and the firewall of Imperva.

The actual installation will only take a few hours and then full implementation within 24 hours. The initial setup takes time because of the configuration on the client-side. We prepared a questionnaire for the client to assist with preparation.

We created a cross-comparison against hiring a team of cybersecurity staff versus getting a subscription. After using Imperva Cloud for the past three years the cost is already acceptable against hiring a team.

The price depends on the client's needs, it will be impacted depending on whether they need diverse production, or account take over for example.

There is an initial four package bundle with the price changing monthly.

I would rate this solution an 8 out of 10.

We use this product as our Web Application Firewall. It provides web-based protection for us. Our requirements are not very complex.

Some maintenance must be performed by our IT team.

We have been working with Imperva Incapsula for two years.

The stability is okay. We use it extensively, on a daily basis. The firewall operates 24 hours per day.

We have approximately 500 employees that are protected with this product.

We have not had any problems with their technical support.

We did not use another Web Application Firewall before Imperva.

Incapsula is not a difficult product to deploy.

The vendor assisted us with the deployment.

We have an IT support team that is responsible for maintenance.

We have a yearly contract and I am happy with the pricing. Imperva charges us based on bandwidth, which is better than other vendors that charge us according to data transfer. In these cases, our costs are quite high.

Outside of our package, there are no additional fees.

Overall, I am really happy with this solution. This includes the features and capabilities, as well as the cost. It fits our requirements, as well as our budget.

I would rate this solution a nine out of ten.

The company uses this solution to protect us from any potential attacks. We are customers of Imperva and I'm the company director. 

Imperva makes it easier for us to put everything in code; we use Terraform to deploy our infrastructure. 

This is a very limited tool if you're looking to customize. It would be helpful if Imperva would provide additional resources for Terraform that can easily be deployed. There are some cases where we're currently unable to use Terraform.

I've been using this solution for six months. 

The solution is stable although sometimes content delivery seems to be affected because it's in the cloud.

Scalability is fine and we haven't had any issues with resource consumption. 

Technical support is quite proactive in sharing information.

The initial setup is relatively straightforward. 

I rate this solution eight out of 10. 

Our primary use case is DDoS protection. We are using it to protect access to internet sites. It is a SaaS solution, so everybody has the latest version. 

DDoS protection and WAF are the most valuable features. It is easy to deploy a service. It is easy and quick to deploy to a new website.

Its price could be improved. It is quite expensive.

It will be good if we could export the configuration. Currently, to control the configuration, we need to go to each website, which is not very convenient.

I have been using this solution for six years.

Its capacity is okay for us, and we don't need to scale it or expand its usage.

Their technical support is good. We get a quick response from them.

It was simple. It is very easy and quick to deploy.

It was done in-house.

It is expensive.

I would recommend this solution to others. It has been working fine for us, and it has all the features that we need. I would advise others to know the exact bandwidth that is required for the project because the cost is based on the bandwidth. You must evaluate the required bandwidth beforehand.

I would rate Imperva Incapsula a nine out of ten. Technically, it is a very good solution.

The first use case was due to the need to protect DDoS attacks as well as protection for SQL injection. The existing application was no longer supported, and to prevent further attacks from occurring, WAF Imperva was applied. The rollout was very fast due to the need for DNS notes only.

In the old days, we experienced many problems with denial of service attacks, and identifying them was very difficult because we did not have a WAF solution. After the deployment, the solution gave us the visibility we needed.

Anti-DDoS protection, as well as other protections like SQL injection, Cross-Site Scripting, and antiscanner. These types of protection are valuable to the business due to the daily attacks on our portals, and that often cannot be seen without a tool like this.

Imperva now offers add-ons to add functionality, but I would like to see these included in the product, even if it would cost more.

No issues with stability.

No issues with scalability.

Very good, although I have not had any problems so far.

No, this is the first solution I have used.

It was straightforward, very simple. I only entered the domain and Incapsula returned the DNS data that I needed to change for the protection to be configured.

I did not participate in the process of choosing the solution.

Only configure it by enabling all protections. This is very important for preventing attacks.

We offer implementation services for our customers.

Most customers use Imperva Incapsula to protect themselves from WAF attacks. If they need an application load balancing, whether it is on a single data center or if they have a B2B extension. Also, if they need protection from the bots. Imperva has all of those functionalities.

It's very pretty easy to onboard the URL. One of the unique features included with Imperva is its advanced bot protection. In addition the base licensing modules with most of the features.

In terms of features, Imperva is quite good; it outperforms its competitors.

Pricing could be more competitive.

It would be beneficial to include vulnerability management in the solution, similar to what they have for their on-premise solution.

I have been working with Imperva Incapsula for more than three years.

I have been using the latest update.

The stability is quite good. It has an uptime of 99%. None of our customers have complained about its uptime and its availability.

The majority of our customers are enterprise businesses, with some SMB, but it depends on their budget, as well as their needs, and whether it is for security or compliance purposes.

Imperva is quite expensive for organizations that use it for compliance purposes. Other WAP solutions, such as Fortinet or Barracuda, which are slightly less expensive than Imperva, will be considered.

Imperva Incapsula is easy to scale.

I believe that Technical support is 24/7. They are also very quick to respond via email.

We work with all of the Imperva solutions from the database, monitoring tools, and the web applications firewall.

The initial setup Is quite simple and straightforward. We only have seven steps to follow. It's a very simple and straightforward process.

If the customer agrees to a DNS sense, it will take no more than 10 to 15 minutes.

Imperva is responsible for maintenance.

Incapsula is a SaaS (software-as-a-service) provider. Anyone can do the applications, but you must subscribe to the service.

Pricing is a challenge for most of our customers.

I cannot provide a comparison because I have not worked with any other vendors.

I would recommend this solution to others because it is pretty simple to implement, and you don't need a dedicated WAP technician to maintain this solution. 

Anyone in the organization can easily implement it, and it can be maintained with a little application knowledge. On the application side, you do not need to be a subject matter expert it is not necessary.

I would rate Imperva Incapsula a nine out of ten.

Our customers have a number of use cases for Imperva Incapsula. Some use it to protect their APIs and others for its DDoS features. 

There are quite a few useful Imperva Incapsula features. For example, one of them is the reports. The graphics are very good and it's easy to configure. The whole process is very fast and reliable too. They have good tech support as well.

Users would benefit from better documentation. There is official documentation, but sometimes we need more detail. We have some use cases that are not so run of the mill. It would be great if there was a knowledge base that we could go to for more answers.

The price could also be more reasonable. The price should at the very least be adjusted for different parts of the world. For example, here in Latin America, our budgets are very different than those for projects in the United States or Europe. It would be really positive if we could get the product at a more affordable price as we are customers with lower budgets without sacrificing features or capabilities of the solution.

I have been using Imperva Incapsula for about three years. It's a solutions I recommend to my customers. 

This is a very stable solution. 

I like their support. The times we have asked for their help, they have been very accurate at giving answers.

The initial setup is easy. It can take maybe half an hour due to the propagation of the DNS name on the server. However, setting up one Imperva website is very easy. You just have to wait for the DNS to refresh on the other DNS server and that's it.

I would encourage people to implement Imperva Incapsula. I think it is a very mature, easy to use, and reliable solution.

Incapsula was acquired by Imperva. We had a need to provide a solution for our clients and the Incapsula solution and Cloud WAF (Web Application Firewall) allowed us to have people subscribe to Incapsula as a service. It was easy to work with because we would just put in the hostname and the IP address of the websites in Incapsula's DNS. When the DNS is resolved it first passes through Incapsula and makes a stops in the Cloud WAF before it sends the website itself.  

Customers can trust it because the traffic going to the customer passes through Incapsula's cloud service. So if there is an attack, the website and the visitors are protected because it will take care of such issues and it eliminates the bad traffic. Both ends are taken care of so the website is protected from hackers because it first goes through the Incapsula Cloud WAF. That is the basic high-level architecture of how the Incapsula works.  

We distributors of Imperva in Africa. I am responsible for our business presence in Eastern and Western Africa. I am fixed locally here in Nigeria. Being distributors, we have a pretty good idea of how the market is in general and how the products are used. All the partners who implement it and who resell sell it, buy it from us and deploy for customer accounts. We cover a high percentage of the financial service industry here in Nigeria.  

For this part of the world, several things are important. It is important that the clients have the features which they get to use to get against bad traffic, of course as this is the reason for the product. But especially for customers in this region, it is also the opportunity to use the service platform. They do not have to own it or maintain it and they may not otherwise have the capacity to deploy this type of solution. Instead, they can pay for it as a service. It works so well here that even some of the banks are using it.  

The most valuable feature is the ability to mitigate bad traffic. I think the highest traffic we would experience can be handled by the Incapsula Cloud WAF because it can scale. So if there is some attack on a website and there is high volume, instead of it disrupting the website and disrupting business operations, it is not a problem for the customer's website. That ability to mitigate problems with the traffic is why the clients use the product to protect their valuable data and customer interactions.  

If I had the opportunity to recommend an enhancement to Imperva it would be to have more POP (Point of Presence) in East and West Africa, and in Central Africa as well. There is only one POP in South Africa. There are other ones are in Europe, America, and Asia and sometimes the latency can be an issue because for your traffic to hit the website — say in East Africa. First, it has to first go to the nearest point of presence. Because of the distance, there can be some problems. So if they have a POP closer to manage customers around Africa this could be a better service to clients.  

I have only recently begun to use Imperva Incapsula compared to the amount of time I have been in the industry. For more than a decade and I have tried my hands on various security solutions, mainly having to do with network infrastructure.  But now I am back to working with security solutions and, over this past year, I have engaged mostly with applications in data security. Before that, I was doing a lot more with the whole of network security. Incapsula is more of an application for data security and it is something which Imperva does pretty well.  

The stability is not an issue. The product is serviced and maintained for the client.  

Virtually all the banks in Nigeria, Ghana, East, and West Africa, are using Imperva. Of course, they are using it for various things, but for the most part, they use it for data security and application security and then also a little bit on the Incapsula platform.  

The scalability depends on the customer but there are really no features that a client will want to request that Imperva does not handle in terms of scalability. Of course, you cannot compare the size of the banks and the input and output demands of banking in Western European countries or the Americas with the needs of banking in Africa.  

For us, it is a good solution.  

Response from technical support has been very good. I would say that they are excellent because they are always willing to attend to customers' requests. They provide support based on time zones so there is good access.  

Because it is a cloud product and the setup is minimal, it is straightforward and quickly implemented.  

I do have experience with Imperva SecureSphere. I am working with various solutions that have various features and how these solutions work for different customers. For one customer, I was trying to do some research to see if they should replace Trustwave WAF with a different solution because the customer asked me about other possibilities. This was my first customer who had asked me to look into Trustwave, so I also took the time to research that product. But different products fit different businesses and industries better.  

I am not an expert in every solution of this type, but I have a pretty good idea of what makes them work as a good solution based on customer needs. I do not do the implementation because I am more in a position of doing pre-sales and consultancy.  

I would highly recommend Imperva Incapsula especially for customers who want extra security for their web presence.  

On a scale from one to ten where one is the worst and ten is the best, I would rate the Incapsula product overall as a nine-out-of-ten.