Primarily, clients are in need of some extra defense and a bit of protection, which is why they use this solution.
Security Expert at a tech services company with 1-10 employees
Stable and scalable with good account takeover protections
Pros and Cons
- "The solution has a very good interface."
- "The rules surrounding the making of web applications could be improved."
What is our primary use case?
What is most valuable?
The most important aspect of the solution is the DDoS feature.
The solution has a very good interface.
Last year, the solution added a lot of additional improvements and functionalities, and for now, the features they have offered us have been great.
They recently added some account takeover protections that have been really useful.
What needs improvement?
The rules surrounding the making of web applications could be improved.
For how long have I used the solution?
I believe I've been using the solution for about four years.
Buyer's Guide
Imperva DDoS
November 2024
Learn what your peers think about Imperva DDoS. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,660 professionals have used our research since 2012.
What do I think about the stability of the solution?
There aren't issues with stability. As a cloud solution, it's hard to say if there will be stability issues. There might be issues with some customer setups, for example, but not with the product itself.
What do I think about the scalability of the solution?
The scalability of the solution is okay. Companies can expand it if they need to.
How are customer service and support?
We've been in touch with technical support in the past. Out of ten, I'd rate them at six or seven. We've had some issues with them in terms of response times, but overall they are okay.
Which solution did I use previously and why did I switch?
We didn't previously work with a different solution. We've partnered with Imperva so we're dealing only with them.
How was the initial setup?
Typically, the initial setup is more or less straightforward. there isn't too much complexity.
What other advice do I have?
We're resellers of the solution.
Typically the solution is deployed with the help of DNS.
It's a good product. It's one of the best on the market. If a company can afford the solution, they should try it out.
I'd rate the solution eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Security Consultant at a security firm with 501-1,000 employees
Gives us the ability to differentiate between a positive and a false-positive intruder action
Pros and Cons
- "Gives us the ability to trace each connection, and to have logs to be able to differentiate between a positive and a false-positive intruder action."
- "I miss being able to integrate the dashboard with other BI tools we are using. We have to export and import data to be able to present it, and doing so is a lot of work."
How has it helped my organization?
It helped us to define wherever there was illicit traffic between our webs, and improved the control we achieved.
What is most valuable?
The ability to trace each connection, and to have logs to be able to differentiate between a positive and a false-positive intruder action.
It is handy to retrieve and download the logs to line up separate actions to identify possible intruder behaviour.
What needs improvement?
At that moment, I miss being able to integrate the dashboard with other BI tools we are using. We have to export and import data to be able to present it, and doing so is a lot of work.
For how long have I used the solution?
One to three years.
What do I think about the stability of the solution?
Not at all.
It was a bit pointless to know how many sites were offline every time a spot in the world decided to do maintenance, but we like it as we can handle worldwide issues, knowing what is going on there.
What do I think about the scalability of the solution?
No issues at all, it fulfills our expectations in terms of scalability.
How are customer service and technical support?
Great.
Which solution did I use previously and why did I switch?
We had used many local, and some cloud-based solutions (like Azure, Advanced Nagios, Centreon). We switched for the scalability of the solution, the reporting features it has, as well as the availability to fine tune the solution.
How was the initial setup?
It was straightforward, but we had to fine tune it.
The initial setup blocked some cookies and data from our scrapers which, they said, they never received from us. We investigated and found the WAF was blocking them. It was a lot of work.
What's my experience with pricing, setup cost, and licensing?
It's worth it. It's a fine solution for medium/big companies worried about attacks that happen in the wild.
Which other solutions did I evaluate?
Centreon and Azure.
What other advice do I have?
My best advice could be, if you don't have the staff to carry out security in a proper way, have a tool do it, but use a specialized tool like this one, and don't re-invent the wheel.
Also, in our case, we soon realized that we needed an expert to fine tune it and to obtain all the features we wanted.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Imperva DDoS
November 2024
Learn what your peers think about Imperva DDoS. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,660 professionals have used our research since 2012.
Director at a tech company with 51-200 employees
Considered CloudFlare as well. Didn't like that they want to take control of DNS.
What is most valuable?
CDN and DDoS.
How has it helped my organization?
This would speed up the images on the website geographically and protect against DDoS attacks.
What needs improvement?
- Maybe another pricing tier for home uses with a few more features above the free version.
- An appliance for large enterprise customers.
For how long have I used the solution?
6 months.
What was my experience with deployment of the solution?
Very straightforward.
What do I think about the stability of the solution?
No issues.
What do I think about the scalability of the solution?
None, all automatic.
How are customer service and technical support?
Customer Service:
Excellent, no issues.
Technical Support:Excellent.
Which solution did I use previously and why did I switch?
No.
How was the initial setup?
Very straightforward, just some DNS changes.
What about the implementation team?
In-house, again very straightforward.
What was our ROI?
Priceless, DDoS protection.
What's my experience with pricing, setup cost, and licensing?
Choose the most appropriate model.
Which other solutions did I evaluate?
CloudFlare, didn't like as they want to take control of DNS.
What other advice do I have?
Great product, it will not let you down!
Disclosure: I am a real user, and this review is based on my own experience and opinions.
IT Manager at a tech services company with 1,001-5,000 employees
We were able to dial in the security and protection that it provided and understand the threat to our company website.
I was introduced to Incapsula after our company website had started to show signs of a persistent active DDoS attack.
I got on the phone with their representative, who later brought in an engineer and within that same day we were able to begin mitigating the problem, all under the free trial. We were able to easily dial in the security and protection that the service provided and began to understand the threat (which was not a DDoS attack) quickly.
We were so impressed with the effectiveness of the solution and the assistance that we received from support that we subscribed to their service in an ongoing basis, which has proven to be reliable and simple to use.
However, I'd like to be able to drill down more into the analytics that Incapsula collects. For example, I'd like to be able to click on the pieces of the pie charts to get more detailed info. also, we had a small issue with some vagueness in the installation instructions, but we sorted it out and everything was good from that point on.
They helped us to get the solution up and running, as well as assisted in setting up rules and other security settings that improved the overall effectiveness of the solution. I would recommend Incapsula's solution to anyone looking to add a robust security layer to their web sites and properties.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Infrastructure Expert at a tech services company with 1,001-5,000 employees
Great service, great value
Valuable Features:
Their solutions are always on, in depth and protect against most all web threats imaginable.
Improvements to My Organization:
Essentially, it has added an extra layer of protection to my clients through their DNS routing service. Less downtime, and happier clients.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
CEO at a tech services company with 51-200 employees
We use Incapsula for some of our sites and the experience has been excellent
We use Incapsula for some of our sites and the experience has been excellent. You would not even know it was there – unlike those caching plugins (admittedly they are for speed not for security) – which remind you constantly that they are there so much so that you have to turn them off. Whoops.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
I developed a website and it has SSL. Do you know if Incapsula can support it?
CEO at a tech services company with 1-10 employees
Integrates with IBM AS/400 and Db2, and is stable and scalable
Pros and Cons
- "Integration with IBM AS/400 and Db2 is okay."
- "The cost could be lower; our end clients need to have a high budget to purchase this solution."
What is our primary use case?
We use it for protection. For example, for one of our banking clients, we use it to protect their mobile and website applications.
What is most valuable?
Imperva is really amazing, feature wise and performance wise.
Integration with IBM AS/400 and Db2 is okay.
What needs improvement?
The cost could be lower; our end clients need to have a high budget to purchase this solution.
For how long have I used the solution?
We have been a partner for Imperva Incapsula for two years.
What do I think about the stability of the solution?
It's stable.
What do I think about the scalability of the solution?
It's a scalable solution.
How are customer service and support?
Technical support is provided by a distributor, and sometimes, there's a delay.
I would rate the technical support at four on a scale from one to ten.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup is easy because it's a plugin; it's an appliance. That means that there is a predefined setting.
Even with the professional service, it does not take a long time. It takes a few days, and everything is done.
For the professional service, usually one person from the distributor is required for deployment.
What's my experience with pricing, setup cost, and licensing?
We have an issue with Imperva Incapsula in the Iraqi market because of the high price.
What other advice do I have?
If you are looking for efficiency and the best technology, you should use Imperva. If you have a limited budget, however, then this is not a suitable solution for you.
I would rate Imperva Incapsula at eight on a scale from one to ten.
Disclosure: My company has a business relationship with this vendor other than being a customer:
Solutions Architect at a financial services firm with 201-500 employees
Easy to configure, simple to set up, and quite stable
Pros and Cons
- "The solution's most valuable aspect is that it is easy to configure."
- "The log analytics interface within Incapsula isn't really good. For example, if you have to get all logs from there, it's a very cumbersome process."
What is our primary use case?
We are using the solution as a WAF. Beyond that, I can't divulge too much information about the details surrounding how we use the solution as part of a confidentiality agreement we're under with clients.
What is most valuable?
The solution's most valuable aspect is that it is easy to configure.
The solution keeps itself up to date itself and there's no customization that we need to do. It makes it extremely easy and cut back on the amount of work required, and saves us on man-hours.
The initial setup is fairly easy.
What needs improvement?
The log analytics interface within Incapsula isn't really good. For example, if you have to get all logs from there, it's a very cumbersome process.
The solution doesn't seem to come with any other additional features. There are other products in the market today that give you an overall network perimeter protection. Incapsula is good for what it is, but it can expand its horizon a lot if it decides to include more network perimeter protection features and capabilities. It needs items, for example, at endpoints and some sort of firewall that can work at multiple levels. Items of that nature will really bump up the security and make it a much better product.
For how long have I used the solution?
We've been using the solution for a while now. It's been about three or four years at least.
What do I think about the stability of the solution?
The solution is fairly stable. I don't think we've had to deal with crashes of the system. There aren't bugs and glitches. We find it to be reliable.
What do I think about the scalability of the solution?
We haven't had any issues with the scalability the solution provides. If a company needs to scale this product they can do so pretty easily.
How are customer service and technical support?
I've never contacted technical support, and I'm unsure if anyone on my team has, either. I wouldn't be able to speak to the quality of service they provide.
How was the initial setup?
The initial setup was not complex at all. It was pretty straightforward.
The deployment of the solution, which included the design phase of the process, took a few months to complete.
We have our own in-house team that handles any maintenance that needs to happen on an ongoing basis.
What other advice do I have?
We're simply a customer. We don't have a business relationship with the company at this time. We use the product ourselves. We aren't resellers or integrators.
I'd advise other companies, based on the scale of the organization and complexity, that if one has to choose a product, a company cannot choose a product from someone else's say so. It would depend on how complex their network design is. If it's fairly simple, then there's only one thing they need there. Multiple layers mean that this solution may not be the right product. A company has to do the research to find out if there are other products that are offering more of what they want, according to their unique requirements.
I'd rate the solution eight out of ten. If the solution was a bit more complete, and offered, for example, perimeter protection, I would give it higher marks.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Imperva DDoS Report and get advice and tips from experienced pros
sharing their opinions.
Updated: November 2024
Product Categories
Distributed Denial of Service (DDOS) Protection CDN Web Application Firewall (WAF)Popular Comparisons
Cloudflare
Arbor DDoS
Akamai App and API Protector
Radware DefensePro
Azure DDoS Protection
AWS Shield
Fastly
F5 Silverline Managed Services
Prolexic
Fortinet FortiDDoS
Corero
Sucuri
Nexusguard DDoS Protection
A10 Thunder TPS
Buyer's Guide
Download our free Imperva DDoS Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- F5 vs. Imperva WAF?
- We are looking at managed DNS providers and want to know what others are using
- Prolexic vs. Arbor Networks: How do they compare?
- Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
- How does a WAF help to protect against DDoS attacks?
- DDoS solutions: Any other solutions to consider aside from Radware DefensePro and F5 Silverline DDoS Protection?
- Which is the best DDoS solution and why?
- What is the difference between denial of service and distributed denial of service?
- When evaluating DDoS Protection, what aspect do you think is the most important to look for?
- How does BGP routing help to mitigate DDoS attacks?
I have seen that the IP reputation feature works well in identifying spam and ham. How do you fix if a ham threat is caught as spam? Do you have end user quarantine feature or does it need to be released by administrator everytime?