It helped us to define wherever there was illicit traffic between our webs, and improved the control we achieved.
Security Consultant at a security firm with 501-1,000 employees
Gives us the ability to differentiate between a positive and a false-positive intruder action
Pros and Cons
- "Gives us the ability to trace each connection, and to have logs to be able to differentiate between a positive and a false-positive intruder action."
- "I miss being able to integrate the dashboard with other BI tools we are using. We have to export and import data to be able to present it, and doing so is a lot of work."
How has it helped my organization?
What is most valuable?
The ability to trace each connection, and to have logs to be able to differentiate between a positive and a false-positive intruder action.
It is handy to retrieve and download the logs to line up separate actions to identify possible intruder behaviour.
What needs improvement?
At that moment, I miss being able to integrate the dashboard with other BI tools we are using. We have to export and import data to be able to present it, and doing so is a lot of work.
For how long have I used the solution?
One to three years.
Buyer's Guide
Imperva DDoS
December 2024
Learn what your peers think about Imperva DDoS. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,095 professionals have used our research since 2012.
What do I think about the stability of the solution?
Not at all.
It was a bit pointless to know how many sites were offline every time a spot in the world decided to do maintenance, but we like it as we can handle worldwide issues, knowing what is going on there.
What do I think about the scalability of the solution?
No issues at all, it fulfills our expectations in terms of scalability.
How are customer service and support?
Great.
Which solution did I use previously and why did I switch?
We had used many local, and some cloud-based solutions (like Azure, Advanced Nagios, Centreon). We switched for the scalability of the solution, the reporting features it has, as well as the availability to fine tune the solution.
How was the initial setup?
It was straightforward, but we had to fine tune it.
The initial setup blocked some cookies and data from our scrapers which, they said, they never received from us. We investigated and found the WAF was blocking them. It was a lot of work.
What's my experience with pricing, setup cost, and licensing?
It's worth it. It's a fine solution for medium/big companies worried about attacks that happen in the wild.
Which other solutions did I evaluate?
Centreon and Azure.
What other advice do I have?
My best advice could be, if you don't have the staff to carry out security in a proper way, have a tool do it, but use a specialized tool like this one, and don't re-invent the wheel.
Also, in our case, we soon realized that we needed an expert to fine tune it and to obtain all the features we wanted.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Director at a tech company with 51-200 employees
Considered CloudFlare as well. Didn't like that they want to take control of DNS.
What is most valuable?
CDN and DDoS.
How has it helped my organization?
This would speed up the images on the website geographically and protect against DDoS attacks.
What needs improvement?
- Maybe another pricing tier for home uses with a few more features above the free version.
- An appliance for large enterprise customers.
For how long have I used the solution?
6 months.
What was my experience with deployment of the solution?
Very straightforward.
What do I think about the stability of the solution?
No issues.
What do I think about the scalability of the solution?
None, all automatic.
How are customer service and technical support?
Customer Service:
Excellent, no issues.
Technical Support:Excellent.
Which solution did I use previously and why did I switch?
No.
How was the initial setup?
Very straightforward, just some DNS changes.
What about the implementation team?
In-house, again very straightforward.
What was our ROI?
Priceless, DDoS protection.
What's my experience with pricing, setup cost, and licensing?
Choose the most appropriate model.
Which other solutions did I evaluate?
CloudFlare, didn't like as they want to take control of DNS.
What other advice do I have?
Great product, it will not let you down!
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Imperva DDoS
December 2024
Learn what your peers think about Imperva DDoS. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,095 professionals have used our research since 2012.
IT Manager at a tech services company with 1,001-5,000 employees
We were able to dial in the security and protection that it provided and understand the threat to our company website.
I was introduced to Incapsula after our company website had started to show signs of a persistent active DDoS attack.
I got on the phone with their representative, who later brought in an engineer and within that same day we were able to begin mitigating the problem, all under the free trial. We were able to easily dial in the security and protection that the service provided and began to understand the threat (which was not a DDoS attack) quickly.
We were so impressed with the effectiveness of the solution and the assistance that we received from support that we subscribed to their service in an ongoing basis, which has proven to be reliable and simple to use.
However, I'd like to be able to drill down more into the analytics that Incapsula collects. For example, I'd like to be able to click on the pieces of the pie charts to get more detailed info. also, we had a small issue with some vagueness in the installation instructions, but we sorted it out and everything was good from that point on.
They helped us to get the solution up and running, as well as assisted in setting up rules and other security settings that improved the overall effectiveness of the solution. I would recommend Incapsula's solution to anyone looking to add a robust security layer to their web sites and properties.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Infrastructure Expert at a tech services company with 1,001-5,000 employees
Great service, great value
Valuable Features:
Their solutions are always on, in depth and protect against most all web threats imaginable.
Improvements to My Organization:
Essentially, it has added an extra layer of protection to my clients through their DNS routing service. Less downtime, and happier clients.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
CEO at a tech services company with 51-200 employees
We use Incapsula for some of our sites and the experience has been excellent
We use Incapsula for some of our sites and the experience has been excellent. You would not even know it was there – unlike those caching plugins (admittedly they are for speed not for security) – which remind you constantly that they are there so much so that you have to turn them off. Whoops.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
I developed a website and it has SSL. Do you know if Incapsula can support it?
CEO at a tech services company with 1-10 employees
Integrates with IBM AS/400 and Db2, and is stable and scalable
Pros and Cons
- "Integration with IBM AS/400 and Db2 is okay."
- "The cost could be lower; our end clients need to have a high budget to purchase this solution."
What is our primary use case?
We use it for protection. For example, for one of our banking clients, we use it to protect their mobile and website applications.
What is most valuable?
Imperva is really amazing, feature wise and performance wise.
Integration with IBM AS/400 and Db2 is okay.
What needs improvement?
The cost could be lower; our end clients need to have a high budget to purchase this solution.
For how long have I used the solution?
We have been a partner for Imperva Incapsula for two years.
What do I think about the stability of the solution?
It's stable.
What do I think about the scalability of the solution?
It's a scalable solution.
How are customer service and support?
Technical support is provided by a distributor, and sometimes, there's a delay.
I would rate the technical support at four on a scale from one to ten.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup is easy because it's a plugin; it's an appliance. That means that there is a predefined setting.
Even with the professional service, it does not take a long time. It takes a few days, and everything is done.
For the professional service, usually one person from the distributor is required for deployment.
What's my experience with pricing, setup cost, and licensing?
We have an issue with Imperva Incapsula in the Iraqi market because of the high price.
What other advice do I have?
If you are looking for efficiency and the best technology, you should use Imperva. If you have a limited budget, however, then this is not a suitable solution for you.
I would rate Imperva Incapsula at eight on a scale from one to ten.
Disclosure: My company has a business relationship with this vendor other than being a customer:
Solutions Architect at a financial services firm with 201-500 employees
Easy to configure, simple to set up, and quite stable
Pros and Cons
- "The solution's most valuable aspect is that it is easy to configure."
- "The log analytics interface within Incapsula isn't really good. For example, if you have to get all logs from there, it's a very cumbersome process."
What is our primary use case?
We are using the solution as a WAF. Beyond that, I can't divulge too much information about the details surrounding how we use the solution as part of a confidentiality agreement we're under with clients.
What is most valuable?
The solution's most valuable aspect is that it is easy to configure.
The solution keeps itself up to date itself and there's no customization that we need to do. It makes it extremely easy and cut back on the amount of work required, and saves us on man-hours.
The initial setup is fairly easy.
What needs improvement?
The log analytics interface within Incapsula isn't really good. For example, if you have to get all logs from there, it's a very cumbersome process.
The solution doesn't seem to come with any other additional features. There are other products in the market today that give you an overall network perimeter protection. Incapsula is good for what it is, but it can expand its horizon a lot if it decides to include more network perimeter protection features and capabilities. It needs items, for example, at endpoints and some sort of firewall that can work at multiple levels. Items of that nature will really bump up the security and make it a much better product.
For how long have I used the solution?
We've been using the solution for a while now. It's been about three or four years at least.
What do I think about the stability of the solution?
The solution is fairly stable. I don't think we've had to deal with crashes of the system. There aren't bugs and glitches. We find it to be reliable.
What do I think about the scalability of the solution?
We haven't had any issues with the scalability the solution provides. If a company needs to scale this product they can do so pretty easily.
How are customer service and technical support?
I've never contacted technical support, and I'm unsure if anyone on my team has, either. I wouldn't be able to speak to the quality of service they provide.
How was the initial setup?
The initial setup was not complex at all. It was pretty straightforward.
The deployment of the solution, which included the design phase of the process, took a few months to complete.
We have our own in-house team that handles any maintenance that needs to happen on an ongoing basis.
What other advice do I have?
We're simply a customer. We don't have a business relationship with the company at this time. We use the product ourselves. We aren't resellers or integrators.
I'd advise other companies, based on the scale of the organization and complexity, that if one has to choose a product, a company cannot choose a product from someone else's say so. It would depend on how complex their network design is. If it's fairly simple, then there's only one thing they need there. Multiple layers mean that this solution may not be the right product. A company has to do the research to find out if there are other products that are offering more of what they want, according to their unique requirements.
I'd rate the solution eight out of ten. If the solution was a bit more complete, and offered, for example, perimeter protection, I would give it higher marks.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
System Administrator at a tech services company with 51-200 employees
We have peace of mind that nobody will use malware on us or try to hack our website
Pros and Cons
- "On the site security, I can see which countries have incidents, whether it was a robot attack, a real human user, or non-human user."
- "On the activity log, I can see the exact details, the visit, and the threat."
- "The dashboard is good and user-friendly."
- "On the real time, you can see live traffic, which is flowing into our website."
- "I am not sure if this application has a policy where you can create your custom policy and run it as our firewall. We should have some ability to also create some custom policy, then run it as a firewall."
What is our primary use case?
We use Incapsula as a firewall on our website which can block any suspicious attempts from the outside of the company. For example, if someone is trying to hack our website or put malware on it, it blocks them.
How has it helped my organization?
When I joined the company, one of our websites was hacked by malware (somebody put it on our website). The website went down for a long time. It took two weeks to clear the server and move everything: all the content, clean it, bring it up, and start again. By using this application, the firewall is blocking every suspicious activity and event. Now, we are safe. We have peace of mind that nobody will use malware on us or try to hack our website. With this application, we have some peace of mind that everything is blocked by Incapsula.
What is most valuable?
- I like to see the security. On the site security, I can see which countries have incidents, whether it was a robot attack, a real human user, or non-human user. For this feature, I like it because I can see information quickly without going into long logs and details. It is very comprehensive regarding what is going on behind the scenes on the website traffic.
- The option saying activity launch. On the activity log, I can see the exact details, the visit, and the threat. If I click on the details, it shows me exactly where it came from, who the user agent is, and what page they tried to enter. Then, it gives me the session. Also, I have the option to put them on the blacklist or the white list. Therefore, I like this option because it is more detailed. If someone causes more than one of the incidents, then they are maybe suspicious, and we want to learn more about it. Here we can get the data, and under the data, we can see the IP addresses, therefore tracking and copying that IP address and putting it under IP lookup.
- The dashboard is good and user-friendly. You can easily understand it, even if you don't have any prior knowledge. Looking at it, you can easily see what is happening because it is a very user-friendly menu and user interface. I don't come from this exact background, but it seems I am supposed to manage and work with this stuff. Because of the user interface, I can understand even without having prior knowledge or education of it.
- The real-time option is cool as well. On the real time, you can see live traffic, which is flowing into our website.
What needs improvement?
I am not sure if this application has a policy where you can create your custom policy and run it as our firewall. We should have some ability to also create some custom policy, then run it as a firewall. Maybe it is not relevant, but I think this would be a good option.
Some things previously happened where we moved one of our websites to a new host and new server, then we had difficulty putting in our user credentials to Incapsula because we could not find them. My boss was aggravated with the issue. I believe he contacted Incapsula and found out how to use the credentials for the website. They had changed the user interface a couple months ago. It was different than now. We had to put some information from the website domain to Incapsula login order to activate it, because they had changed the user interface.
For how long have I used the solution?
One to three years.
What do I think about the stability of the solution?
It is a stable product.
What do I think about the scalability of the solution?
It is not used at a high level, but we just put it in and configured it with our website. So, for the things that we have to run, it works just fine. I have no idea about any other scalability. However, it is just fine for the reason that we are using it.
How are customer service and technical support?
I have never had a ticket with technical support, but I believe that they are supportive.
Which solution did I use previously and why did I switch?
I was not involved with any solution in the company prior to Incapsula. When I came to this company, we were using this solution.
How was the initial setup?
Someone else set it up.
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Buyer's Guide
Download our free Imperva DDoS Report and get advice and tips from experienced pros
sharing their opinions.
Updated: December 2024
Product Categories
Distributed Denial-of-Service (DDoS) Protection CDN Web Application Firewall (WAF)Popular Comparisons
Cloudflare
Arbor DDoS
Akamai App and API Protector
Radware DefensePro
Azure DDoS Protection
AWS Shield
Fastly
F5 Silverline Managed Services
Prolexic
Fortinet FortiDDoS
Corero
Sucuri
Nexusguard DDoS Protection
A10 Thunder TPS
Buyer's Guide
Download our free Imperva DDoS Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- F5 vs. Imperva WAF?
- We are looking at managed DNS providers and want to know what others are using
- Prolexic vs. Arbor Networks: How do they compare?
- Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
- How does a WAF help to protect against DDoS attacks?
- DDoS solutions: Any other solutions to consider aside from Radware DefensePro and F5 Silverline DDoS Protection?
- Which is the best DDoS solution and why?
- When evaluating DDoS Protection, what aspect do you think is the most important to look for?
- What is the difference between denial of service and distributed denial of service?
- How does BGP routing help to mitigate DDoS attacks?
I have seen that the IP reputation feature works well in identifying spam and ham. How do you fix if a ham threat is caught as spam? Do you have end user quarantine feature or does it need to be released by administrator everytime?