Try our new research platform with insights from 80,000+ expert users
reviewer2308284 - PeerSpot reviewer
Solutions Engineer at a tech services company with 1,001-5,000 employees
Real User
Top 20
A proactive security solution that protects web applications and APIs and enables easy administration
Pros and Cons
  • "We can prevent attacks or issues even before they happen."
  • "Sometimes, support tickets don't get addressed quickly."

What is our primary use case?

The solution is used by SMBs and enterprises that have a lot of websites that they need to protect.

How has it helped my organization?

Since the product is categorized in Gartner as a Web Application and API Protection tool, it protects APIs and web applications. It provides bot and client-side protection. I have done POCs. Once the platform is configured to block DDoS attacks, no traffic regarding DDoS or bots gets into the application.

What is most valuable?

If the clients have requirements for APIs and microservices, we can offer such services with the help of the solution. We can offer it as a security solution that protects APIs and microservices. Imperva’s real-time monitoring makes it very easy for administrators to monitor their existing web applications.

What needs improvement?

My clients raised a concern that even if they need the tool only for DDoS protection, they still have to buy the WAF license. It’s difficult to position the tool if the client already has a WAF solution and needs Imperva only for DDoS protection.

Buyer's Guide
Imperva Web Application Firewall
March 2025
Learn what your peers think about Imperva Web Application Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
842,690 professionals have used our research since 2012.

For how long have I used the solution?

I have been using the solution since June last year.

What do I think about the stability of the solution?

I rate the tool’s stability a ten out of ten. Since I've been onboarded, I haven't had any issues.

What do I think about the scalability of the solution?

I rate the tool’s scalability a ten out of ten. Imperva allows only clean traffic. The scalability is based on the clean traffic and not the overall bandwidth of the client. Our clients are mostly enterprise businesses. I have some SMB customers.

How are customer service and support?

Sometimes, support tickets don't get addressed quickly. However, the support team gets to it eventually.

How would you rate customer service and support?

Positive

How was the initial setup?

The initial setup is very easy. I rate the ease of setup a ten out of ten. The time taken for deployment depends on the number of applications we want to onboard. Usually, we can do it in a day.

What was our ROI?

Imperva is a very proactive solution. It is not reactive. We can prevent attacks or issues even before they happen. It is something people must consider since many enterprises are facing DDoS attacks, and their data is getting compromised.

What's my experience with pricing, setup cost, and licensing?

I rate the solution’s pricing a seven out of ten. Some solutions are cheaper than Imperva. Imperva’s pricing is a bit higher in the market since it offers a full-blown WAF.

What other advice do I have?

We are partners. I rate the product's integration with our client's IT infrastructure a nine out of ten. It is easily integrated since many configurations are needed to onboard Imperva into a client’s infrastructure fully. Overall, I rate the product a nine out of ten.

Which deployment model are you using for this solution?

Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Kevin Juma - PeerSpot reviewer
Technology Operations Manager, Global IT at a tech services company with 11-50 employees
Real User
Deploys easily; good, responsive customer service
Pros and Cons
  • "I have had a positive experience with Imperva Web Application Firewall's tech support so far. They are knowledgeable and respond on time."
  • "The Imperva Web Application Firewall automations are good, but there is still room for improvement with them."

What is our primary use case?

Our primary use case for the solution is securing our applications and customer-facing website.

What is most valuable?

The Imperva Web Application Firewall feature I have found the most valuable is the ease of deployment. The solution's customer service is good as well. 

What needs improvement?

The Imperva Web Application Firewall automations are good, but there is still room for improvement with them. Fast rule propagation could also be improved.

For how long have I used the solution?

My company has been using Imperva Web Application Firewall for four years. But, personally, I have been using it for three years. It was already operational in the organization when I joined. 

What do I think about the stability of the solution?

We have not had any issues with stability. 

What do I think about the scalability of the solution?

I think Imperva Web Application Firewall is scalable. 

How are customer service and support?

I have had a positive experience with Imperva Web Application Firewall's tech support so far. They are knowledgeable and respond on time. 

How would you rate customer service and support?

Positive

How was the initial setup?

I was not with the company when Imperva Web Application Firewall was initially deployed but I believe the process was straightforward. 

Which other solutions did I evaluate?

F5 firewalls are clunky and that is why we do not use them. They are good and powerful, but it takes quite a bit to set them up. They are not as easy to set up as Imperva Web Application Firewall.

What other advice do I have?

I would say: take Imperva Web Application Firewall into consideration because of its simplicity. 

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Imperva Web Application Firewall
March 2025
Learn what your peers think about Imperva Web Application Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
842,690 professionals have used our research since 2012.
reviewer1946217 - PeerSpot reviewer
Manager at a tech services company with 1,001-5,000 employees
Real User
An easy-to-use solution that integrates seamlessly to block OWSAP attacks
Pros and Cons
  • "The solution integrates seamlessly with other tools and has a good alert mechanism."
  • "The solution works for particular zones but isn't always the best solution for all zones."

What is our primary use case?

The solution is used to detect and block application attacks on the internet perimeter. We integrate the solution with SOAR and Phantom to automate our playbook and block URLs.

How has it helped my organization?

The solution reduces the risk of attacks and that benefits our clients. 

What is most valuable?

The solution integrates seamlessly with other tools and has a good alert mechanism. 

The solution provides good protection against OWASP top-ten attacks.

What needs improvement?

The solution works for particular zones but isn't always the best solution for all zones. 

The solution's pricing could be improved. 

For how long have I used the solution?

I have been using the solution for five years. 

What do I think about the stability of the solution?

The solution is stable. 

What do I think about the scalability of the solution?

We implemented the SA solution and have not tried to scale it beyond our client's 10,000 users. 

How are customer service and support?

I do not have experience with escalating issues because our internal support team handles vendor support. 

Which solution did I use previously and why did I switch?

We have not switched solutions but prefer this solution for on-premises. When we need a tool that is cloud-based, we prefer other solutions. 

How was the initial setup?

The initial setup was not complex and integration was easy. 

What about the implementation team?

The solution was implemented by the supplier. 

What's my experience with pricing, setup cost, and licensing?

The solution's pricing is an issue. 

Which other solutions did I evaluate?

We use many tools for the application layer including Imperva, Infoblox Secure DNS, and Palo Alto. 

What other advice do I have?

The solution is a leader in the market and is easy to use.

I rate the solution a nine out of ten. 

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1803495 - PeerSpot reviewer
SOAR Consultant at a tech services company with 1,001-5,000 employees
Consultant
Scalable and stable firewall for web applications with a good interface, but path and traffic visibility need improvement
Pros and Cons
  • "Very scalable and very stable firewall for web applications, with a good interface in its cloud version. Mitigation is its most valuable feature. The technical support for this product is also good."
  • "Imperva Web Application Firewall is a good system, but we found that the visibility of the diverse-path server, e.g. where the traffic is coming from, the different IPs, etc., needs improvement."

What is most valuable?

The mitigation feature is what I find most valuable in Imperva Web Application Firewall. The interface of the cloud version of this solution is also good.

What needs improvement?

Every product has a room for improvement, and in Imperva Web Application Firewall, we found a limitation when we need to check which email IP traffic is coming from, e.g. we cannot find it.

Imperva Web Application Firewall is a good system, but we found that the visibility of the diverse-path server, e.g. where the traffic is coming from, the different IPs, etc., needs improvement. If we can populate those information, we can block them in our firewalls, and that would make this solution better.

Though the cloud interface of Imperva Web Application Firewall is good, the interface of the on-premises version is not as appealing, and it's what I'd like to see improved in the next release of this solution.

What do I think about the stability of the solution?

Imperva Web Application Firewall is a very stable solution.

What do I think about the scalability of the solution?

The cloud version of Imperva Web Application Firewall is very scalable.

How are customer service and support?

Technical support for this solution is good.

How was the initial setup?

It's very easy to set up the cloud version of Imperva Web Application Firewall. It's not difficult, because you just need to map your DNS, and that's it. Setting up this solution is not a problem.

What other advice do I have?

I'm working as a cyber security consultant and I provide Imperva Web Application Firewall and other similar solutions to customers.

We are working in the Middle East, e.g. we are deploying solutions to different organizations.

I don't have any input on the pricing for Imperva Web Application Firewall, as that part is covered by the research team.

I don't have advice for people looking into implementing this solution, except that everyone has different opinions and different requirements. Every organization has different requirements, and their choices will be based on their requirements. If all their requirements are fulfilled by Imperva Web Application Firewall, then they'll want to implement or use it.

I've giving Imperva Web Application Firewall a score of seven out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
GA Consultant Cyber Security at a tech services company with 51-200 employees
Real User
Suits large enterprises, supports different application sources, and provides tight control
Pros and Cons
  • "Configuration for different application sources is most valuable. We can segregate the traffic that an application is carrying and identify the sizing in Imperva."
  • "It should be more user-friendly. Like other web solutions, it would be helpful to be able to easily do policy configuration and identification inside the application. Understanding the in-depth configuration of a policy is somewhat difficult for an engineer, and they can improve that."

What is our primary use case?

We have an Akamai cloud-based solution for it. We have an in-house customer, and they have their own Akamai cloud for WAF. As a solution provider, we are working with their private Akamai WAF. 

What is most valuable?

Configuration for different application sources is most valuable. We can segregate the traffic that an application is carrying and identify the sizing in Imperva.

It is quite proficient in terms of logs reports, and it provides tight control for policy configuration. So, there can't be any unwanted applications on the internal LAN site. It is quite restrictive, which is a plus point. The sizing of an application is quite easy to understand while we are configuring and deploying Imperva.

What needs improvement?

It should be more user-friendly. Like other web solutions, it would be helpful to be able to easily do policy configuration and identification inside the application. Understanding the in-depth configuration of a policy is somewhat difficult for an engineer, and they can improve that. 

For how long have I used the solution?

I have about two to three years of experience with Imperva. I'm working as a GA consultant for cybersecurity and information security. I'm working on different security solutions such as WAF, IAM, DDoS, Azure firewall proxy, and antivirus. I work with different customers, and I also do the architecture review or assessment.

What do I think about the stability of the solution?

Its stability is quite good. It is not at all an issue. 

It is also quite good performance-wise. We are confident about its performance.

What do I think about the scalability of the solution?

It is for large-scale enterprises where the traffic is huge, and there are many internet-facing applications, which is a plus point of Imperva.

We don't have the HA mode for the respective solution in Imperva, which has to be there when we have the DC and DR locations. We can activate only one solution at DC, but while we are conducting the drills between DC and DR, it is quite difficult to import all the configurations at the DR location in Imperva. It takes time.

How are customer service and support?

Their support is good. It is not an issue. Whenever we have any questions or concerns, we're getting an appropriate solution for our queries. 

Some of the clients have had direct support from Imperva, and some of the clients had a third-party vendor. We also get support from a local Imperva employee. When I was working for a bank, there was good support from this person who was working with Imperva. 

How was the initial setup?

The support for the setup is very good from the provider, but it can be difficult for an engineer to have an in-depth understanding of the configuration of a policy for an application.

What other advice do I have?

I would rate it an eight out of 10.

Which deployment model are you using for this solution?

Private Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1059231 - PeerSpot reviewer
Technical Account Manager at a tech services company with 201-500 employees
Reseller
Easy to deploy with good cost savings and great scaling potential
Pros and Cons
  • "The solution is stable."
  • "I loved the approach of the cloud. The cloud has a lot of new features, like advanced web protection and DDoS protection. If those could also be on-boarded onto the on-prem versions, that would be ideal. They need to pay attention to both deployment options and not just favor one."

What is most valuable?

The product is very good. 

It's so easy to do the deployment. The installation is very straightforward. You can't even compare it to others on the market. It's that easy.

The features on offer are very nice.

The solution is stable.

The licensing setup makes the product easy to scale. 

The pricing is very good. 

What needs improvement?

I loved the approach of the cloud. The cloud has a lot of new features, like advanced web protection and DDoS protection. If those could also be on-boarded onto the on-prem versions, that would be ideal. They need to pay attention to both deployment options and not just favor one. 



For how long have I used the solution?

I've been using the solution for the last five years. I've used it for quite a while now. 

What do I think about the stability of the solution?

The stability of the product is good. There are no bugs or glitches. It doesn't crash or freeze. It's reliable.

What do I think about the scalability of the solution?

We typically deal with medium-sized organizations.

The licensing model makes the solution very simple to scale. If a company wants to expand, it's not a problem.

How are customer service and technical support?

We need an improvement in the support. We need a lot of turnarounds. Whenever is a ticket open, it's something that has become a concern. 

Which solution did I use previously and why did I switch?

I'm not currently working with any other solution. I just use this product. 

Previously, I did work with F5 and Fortinet. However, Imperva is superior to both of these products.

How was the initial setup?

The initial setup is easy and the solution is very simple to deploy.

What's my experience with pricing, setup cost, and licensing?

The solution is very affordable and the cloud is making it even easier in terms of cost savings. 

What other advice do I have?

We are resellers and we are based in Kenya. We're actually doing the whole suite. I'm working with Database Security and I'm also doing the Web Application Firewall, both of which are on-prem and on the cloud. I'm also doing the DRA.

It's the best in breed in terms of a solution you can put in place.

I'd rate the solution at an nine out of ten. We're quite happy with its overall capabilities. 

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer:
PeerSpot user
it_user255885 - PeerSpot reviewer
Senior Security Analyst at a tech services company with 501-1,000 employees
Consultant
We can quickly see the attacks that the environment is suffering and take action to mitigate the threat(s).

Valuable Features

I was involved in the deployment and found that all the features in this product are fantastic, especially the correlated attack validation, threat radar (reputation, fraud), and virtual patching. Those are features that are very useful in day to day operations.

Improvements to My Organization

Using WAF in an organization means we can quickly see the attacks that the environment is suffering and take action to mitigate the threat(s). It is possible to view traffic and analyze it to determine if it is legitimate traffic or not, using features such as threat radar and geolocation, helping the security team in the company.

Use of Solution

I've been using the WAF component for over a year.

Deployment Issues

I had no issues with deployment.

Stability Issues

I had no issues with stability.

Scalability Issues

I had no issues with scalability.

Customer Service and Technical Support

Customer Service:

I didn't use the customer service, but all the teams in Imperva have a deep knowledge about the product to support customers for any issues they have.

Technical Support:

The technical support team at Imperva have a deep knowledge of all their solutions, and they are ready to support any customer with any problem.

Initial Setup

The initial setup is different for each environment. You need knowledge of the environment and application, to make a good schedule of activities. Make sure you validate the requirements, and the setup will be simpler to do

Implementation Team

I work as a System Engineer and part of my role is to help the partners do deployments for our customers. I participated in some deployments, and I can say the partners I have worked with have good knowledge about deployment and support for all solutions.

Other Advice

All products are good, and I believe narrowing the choice of manufacturer is best done when you do proof of concepts in-house and you can see which of your choices is best matched to your needs.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Senior Presales Engineer at a tech services company with 11-50 employees
Real User
Top 5
A cloud-based solution for traffic inspection that offers good up-time
Pros and Cons
  • "The solution is cloud-based and offers us good uptime. It has combined web and API security. Therefore, with one license, you access both application security and also API security."
  • "I would like to improve the tool's turnaround time in terms of support."

What is our primary use case?

We use the solution for traffic inspection. 

What is most valuable?

The solution is cloud-based and offers us good uptime. It has combined web and API security. Therefore, with one license, you access both application security and also API security.

What needs improvement?

I would like to improve the tool's turnaround time in terms of support. 

For how long have I used the solution?

I have been working with the solution for three years. 

What do I think about the stability of the solution?

I have never had any issues on stability. 

What do I think about the scalability of the solution?

The tool is scalable. 

How was the initial setup?

The solution's setup is straightforward. 

What's my experience with pricing, setup cost, and licensing?

The tool is expensive. 

What other advice do I have?

I would rate the solution a nine out of ten. The solution is very mature and covers everything for its use cases. 

Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator
PeerSpot user
Buyer's Guide
Download our free Imperva Web Application Firewall Report and get advice and tips from experienced pros sharing their opinions.
Updated: March 2025
Buyer's Guide
Download our free Imperva Web Application Firewall Report and get advice and tips from experienced pros sharing their opinions.