Azure Web Application Firewall Reviews

Custom WAF policies can be created for different sites, No modification required to back end code

Deployment is complex & can be made simpler for folks coming from non-technical back ground

One of the best WAF products available in the market. The only downside can be complex deployment procedure.

Protection from SQL injection, Cross-Site scripting, crawlers & scanners, etc.

The rule set of firewall is very good. Most of the vulnerabilities have been detected this firewall. Firewall configuration is very easy.

I don't find anything to dislikein firewall configuration.

I realised that the firewall detect most of major vulnerabilities. It will protect from SQL injection, cross site scripting etc. Attack.

The different modes and different SKUs available to choose from as per the requirements.

Ability to add Custom Rules along with built-in OWASP rules.

Pricing is a bit complex and a little bit costly when going for the v2 SKU.

We had a Business requirement to allow some sites(URIs) to be accessible from specific IP address range and if the same URI had a certain keyword it could be accessible over the internet(everyone) which is solved by the use of custom rules.

It will detect the top 10 OWASP web application vulnerabilities in your web application and protect against those. if you want to learn more about OWASP (please use Burp Suite tool for testing a website but use only the applications which are recommended by the government or your organization or your teacher and do not try this tools experimentation on some private or govt websites(it is very illegal) and Use OWASP Juice Shop for this testing purpose as well).

Nothing much but it needs to update some major unknown vulnerabilities for users to test other than OWASP top 10.

Mainly web application security testing things and to come across it.

Its capability of detecting and alerting security administrators about most common and Moder types of cyberattacks which helps organization in building in secure architectecture

It socnsole is not that much user friendly as is it not mean for beginners to go and start with everyone has to have a basic understanding of its sévices.

It is helping organization startup to build secure infrastructure or making their infrastructure secure at a pay as you go model.

Its capability of handling most common types of cyber attacks and alerting the security administration with the latest trends and attacks on the server.

It's console is very old it cannot be used by beginners as you need to have very good understanding of the tool.

It is helping organization in improving their security posture with latest attacks.

It's capability of handling and detecting most common types of cyberattack and alert the administrator in real-time about the cyber attack.

It's console is not that much user friendly it cannot be used by beginners without having prior knowledge.

It's is protecting organization against new types of cyberattack.

Protecting multiple web application from web vulnerabilities and attacks. also the custom policies and its priority helps a lot in daily client requirements which differ client by client.

The management can be improved more. The support for proxy forward could improve. There is no annotations for waf rule, makes it to hard to manage. Some features hard to understand.

More focus on security in application gateway in order to prevent from attacks. Reduced false positive and added security rules. Incresed limits for request body and file size.

It has a good monitoring dashboard and the alarming mechani

Nothing as of now, I got what I was looking for.

As a business the larger problem ofdata theft and security

Liked the sql injection protection method

may be lil bit improved performance. i think that's due to it's scanning process for all incoming and outgoing traffics

protects our web apps from web hacking techniques such as sql injection and cross site scripting