NGINX App Protect has improved the flexibility of services in our company and distributed new escalation applications. The downtime in our network has decreased substantially. In a short time, we can republish and resolve issues in our network.
Senior Network Engineer at a comms service provider with 1,001-5,000 employees
Flexible and high availability
Pros and Cons
- "The most valuable feature of NGINX App Protect is its flexibility."
- "The setup of NGINX App Protect is complex. The full process took one week to complete. Additionally, we had to change the network infrastructure platform which took one month."
How has it helped my organization?
What is most valuable?
The most valuable feature of NGINX App Protect is its flexibility.
For how long have I used the solution?
I have been using NGINX App Protect for approximately three years.
What do I think about the stability of the solution?
NGINX App Protect is stable.
Buyer's Guide
NGINX App Protect
February 2025

Learn what your peers think about NGINX App Protect. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
839,422 professionals have used our research since 2012.
What do I think about the scalability of the solution?
The scalability of NGINX App Protect is decent.
We have approximately 500 people using the solution in my organization. We have IT specialists that work with the core mobile network.
How are customer service and support?
We do not have technical support in Iran, we only use our own knowledge about the solution.
Which solution did I use previously and why did I switch?
I did not use a similar solution previous to NGINX App Protect.
How was the initial setup?
The setup of NGINX App Protect is complex. The full process took one week to complete. Additionally, we had to change the network infrastructure platform which took one month.
I rate the setup difficulty of NGINX App Protect a four out of five.
What about the implementation team?
We used an IT expert for the implementation of NGINX App Protect. We have three people who provide support for NGINX App Protect.
What was our ROI?
We have received a return on investment, NGINX App Protect was a good investment.
What's my experience with pricing, setup cost, and licensing?
I rate the price of NGINX App Protect a three out of five.
There are not any additional costs we had to pay to use NGINX App Protect.
What other advice do I have?
We have a complex project and we found some of our applications did not work as intended. However, moving forward we do not find we will experience this level of complexity.
I rate NGINX App Protect a nine out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller

Manager - Cyber Security at a financial services firm with 10,001+ employees
Great auto-learning and protection
Pros and Cons
- "NGINX App Protect's best features are auto-learning, which creates a profile of applications that are deployed, bot protection, and force protection, which lets you configure your brute force policy and alert for and prevent brute force attacks."
- "NGINX App Protect would be improved with integration with Shape and F5 WAF, which would make it easy for users to manage all their web application security with a single solution."
What is most valuable?
NGINX App Protect's best features are auto-learning, which creates a profile of applications that are deployed, bot protection, and force protection, which lets you configure your brute force policy and alert for and prevent brute force attacks.
What needs improvement?
NGINX App Protect would be improved with integration with Shape and F5 WAF, which would make it easy for users to manage all their web application security with a single solution. In the next release, I'd like to see some enhancements in bot protection, API security, and mobile application security.
For how long have I used the solution?
I've been using NGINX App Protect for four years.
What do I think about the stability of the solution?
NGINX App Protect is stable but has some areas for improvement, including HTML5 availability. I would rate its stability eight out of ten.
How are customer service and support?
NGINX's technical support is good, but sometimes their response time is delayed, or they don't have the technical skills to resolve issues. We're seeing these issues despite having premium support.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I previously used Imperva WAF.
What other advice do I have?
I would give NGINX App Protect a rating of eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
NGINX App Protect
February 2025

Learn what your peers think about NGINX App Protect. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
839,422 professionals have used our research since 2012.
Manager - Cyber Security (SOC) at a financial services firm with 10,001+ employees
Easy to analyze security abnormalities, stable, and the support is good
Pros and Cons
- "The most valuable feature is that there is a link in the system that will help to analyze the security of an application when something abnormal is found."
- "Setting policies and parameters through the UI should be more automated because the process is manual, where we can only edit one rule at a time."
What is our primary use case?
We use this solution to protect our entire set of web applications. This includes protecting against vulnerabilities as a result of programming errors.
What is most valuable?
The most valuable feature is that there is a link in the system that will help to analyze the security of an application when something abnormal is found.
What needs improvement?
This firewall should support more of the network layers.
Profiling capability should be improved.
Setting policies and parameters through the UI should be more automated because the process is manual, where we can only edit one rule at a time.
For how long have I used the solution?
I have been using the NGINX Web Application Firewall for more than a year and a half.
What do I think about the stability of the solution?
In terms of stability, this solution is much better than Imperva.
What do I think about the scalability of the solution?
In terms of scalability, depending on the application, there is a limit to how many policies I can design.
How are customer service and technical support?
The technical support for this solution has improved. Imperva used to be better, but now, NGINX is more responsive.
Which solution did I use previously and why did I switch?
I have also used Imperva. The stability and interface are better in the NGINX WAF. For example, it is easier to create new policies. Technical support from NGINX is also more responsive than that of Imperva.
How was the initial setup?
The initial setup was complex in terms of deployment and fine-tuning.
We have more than ten applications so it took us between four and five months to deploy.
What about the implementation team?
We had to contract a third-party consultant to assist us with the deployment. We are satisfied with their work
What other advice do I have?
Based on my experience, this solution is better than the other choices on the market.
I would rate this solution an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
IT Security at a insurance company with 501-1,000 employees
With an easy setup phase in place, the tool offers high stability and good scalability
Pros and Cons
- "It is a stable solution."
- "The product's user interface is an area with shortcomings as it can be quite confusing for users, making it an area where improvements are required."
What is most valuable?
The most valuable feature of the solution is that IVF and ICSI are covered under the firewall option offered by the tool. I don't have a specific feature I like the most since I look at features through comparisons of different firewall products and the features of such tools.
What needs improvement?
The product's user interface is an area with shortcomings as it can be quite confusing for users, making it an area where improvements are required. The main menu can be quite confusing.
After you implement it, it's not so easy to understand how it works. Though in my company, we understand the basics of the product, if you want to explore the more advanced features, then the principal product doesn't explain it to us, which can be quite confusing when navigating through the main menu.
For how long have I used the solution?
I have been using NGINX App Protect for five years. I use the solution in my company.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
In our company, we never tried to use the scalability options provided by the tool.
How are customer service and support?
The solution's technical support is good. I rate the technical support an eight to nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Previously, our company was using Fortinet. I don't know why my company switched from Fortinet to NGINX App Protect because it happened before I joined the organization.
How was the initial setup?
The product's initial setup phase was easy.
What's my experience with pricing, setup cost, and licensing?
The price of NGINX App Protect is not much different from the products that fall under the leader category of Gartner Magic Quadrant.
Which other solutions did I evaluate?
My company needs to expand its options to see if some other brand apart from NGINX App Protect is faster.
As the license for NGINX App Protect in our company will expire in a few months, my company wants to make a decision on whether to extend the services of the tool or not based on the research we do on other platforms in the market.
What other advice do I have?
My company is satisfied with the product.
For the user interface, I rate the product an eight out of ten.
For the functionalities of the product, I rate the tool a ten out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Cyber Security Analyst at Link3 Technologies
A scalable solution for application firewall with easy deployment
What is our primary use case?
We use the solution for application firewall purposes. We use both mobile and web applications.
What needs improvement?
During the NGINX App Protect v1.1 upgrade, we encountered compatibility issues with our existing telecom infrastructure, specifically the load balancer and WAF. These issues manifested as difficulties with the HTTP 1.1 protocol. While attempting to solve the problem through upgrades, we ultimately opted for alternative solutions as the desired effect could not be achieved. This highlights the technical challenges of integrating NGINX App Protect with diverse network components.
For how long have I used the solution?
I have been using NGINX App Protect for more than five years.
What do I think about the stability of the solution?
The product is stable.
I rate the solution’s stability an eight-point five out of ten.
What do I think about the scalability of the solution?
The solution is scalable.
How are customer service and support?
The customer service’s response should be faster.
How was the initial setup?
The initial setup is straightforward. For deployment, we configured basic configuration, and after mounting, We observed our application for almost four months. After that, we proceed to enforcement blocking mode. Typically, all our applications are live, so we can't block it on day one. We observed it for a long time, like six months, and then we went into step-by-step blocking mode.
Three people are required for the solution's deployment.
What's my experience with pricing, setup cost, and licensing?
The product is expensive and has a subscription-based licence.
What other advice do I have?
NGINX App Protect's high price and limited support options can be a drawback. While troubleshooting basic issues is manageable, resolving advanced problems through paid support channels can be expensive and experience delays.
I recommend the solution if the client has no financial issues regarding their WAF or LTM solutions. Still, if they are budget constraints, one should think of other options like Fortinet.
Overall, I rate the solution an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Information Security Engineer at a computer software company with 1,001-5,000 employees
Beneficial reverse proxy, effective load balancer, and helpful support
Pros and Cons
- "The most valuable feature of NGINX App Protect is the reverse proxy."
- "The price of NGINX App Protect could improve."
What is our primary use case?
NGINX App Protect can be used as a reverse proxy, internet controller, and for caching.
How has it helped my organization?
NGINX App Protect has improved our organization by using the load balancer feature.
What is most valuable?
The most valuable feature of NGINX App Protect is the reverse proxy.
What needs improvement?
The price of NGINX App Protect could improve.
For how long have I used the solution?
I have been using NGINX App Protect for approximately two years.
What do I think about the stability of the solution?
NGINX App Protect is stable. It is lightweight and fast.
What do I think about the scalability of the solution?
The scalability of NGINX App Protect is good and it is easy to do.
How are customer service and support?
The experience I had with the technical support was good.
Which solution did I use previously and why did I switch?
We used another solution previously to NGINX App Protect. We switch to testing other solutions.
How was the initial setup?
The initial setup of NGINX App Protect is basic. The full deployment took approximately one day.
What about the implementation team?
We followed the documentation to do the implementation of NGINX App Protect in-house. We have one person that does the deployment and maintenance of the solution.
What was our ROI?
I have not seen a return on investment, it is too soon. We are only in the testing phase.
What's my experience with pricing, setup cost, and licensing?
There is a monthly or annual subscription to use NGINX App Protect. There are not any additional costs to the subscription.
I rate the price of NGINX App Protect a three out of five.
What other advice do I have?
I would recommend this solution to others because it performs well.
I rate NGINX App Protect a ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Technical Expert at SFR
Highly scalable, command-line interface based solution
Pros and Cons
- "The initial setup was simple and took three to four days."
- "Areas for improvement would be if NGINX could scan for vulnerabilities and learn and update the signatures of DoS attacks."
What is our primary use case?
I use this solution as a web application firewall.
What is most valuable?
The most valuable feature is that NGINX uses the command-line interface, making it simple for some users.
What needs improvement?
Areas for improvement would be if NGINX could scan for vulnerabilities and learn and update the signatures of DoS attacks.
For how long have I used the solution?
I've been using this solution for about three years.
What do I think about the stability of the solution?
App Protect has good stability.
What do I think about the scalability of the solution?
NGINX is very scalable, which is a great advantage of this product.
How are customer service and support?
The technical support is very good.
How was the initial setup?
The initial setup was simple and took three to four days.
What's my experience with pricing, setup cost, and licensing?
NGINX is not expensive.
What other advice do I have?
I would rate this solution as eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior Network Administrator at Nexio South Africa
Stable solution with efficient security management features
Pros and Cons
- "It has the best documentation features."
- "Its technical support could be better."
What is most valuable?
The solution has the best traffic management and security management features. In addition, it has good interface and documentation features. Also, it integrates with other solutions.
What needs improvement?
The solution's technical support could be better.
For how long have I used the solution?
I have been using the solution for six years.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
We plan to increase the solution's usage in our organization.
How are customer service and support?
The solution's technical support team is good. Although, sometimes they ask us to provide the configuration file instead of addressing the current technical issue. Most of the time, the error doesn't need a configuration file to resolve it.
How would you rate customer service and support?
Positive
What was our ROI?
The solution generates a return on investment.
What's my experience with pricing, setup cost, and licensing?
The solution's price is reasonable. Its license renewal costs around R200,000.
What other advice do I have?
The solution requires essential training to understand the functionality. I rate it a ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.

Buyer's Guide
Download our free NGINX App Protect Report and get advice and tips from experienced pros
sharing their opinions.
Updated: February 2025
Popular Comparisons
Microsoft Azure Application Gateway
Azure Front Door
AWS WAF
F5 Advanced WAF
Fortinet FortiWeb
Cloudflare Web Application Firewall
Imperva Web Application Firewall
Imperva DDoS
Akamai App and API Protector
Azure Web Application Firewall
F5 Silverline Managed Services
open-appsec
FortiWeb Web Application Firewall (WAF)
NEVIS nevisProxy
Buyer's Guide
Download our free NGINX App Protect Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which lesser known firewall product has the best chance at unseating the market leaders?
- Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
- What do you recommend for a securing Web Application?
- Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
- Imperva WAF vs. Barracuda: Which One is Better?
- F5 vs. Imperva WAF?
- When should companies use SSL Inspection?
- NGFW with URL Filtering vs Web Proxy
- How does a WAF help to protect against DDoS attacks?
- What's right for me? Fortinet or Citrix?