We performed a comparison between Azure DDoS Protection and Azure Firewall based on real PeerSpot user reviews.
Find out in this report how the two Microsoft Security Suite solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most important feature is that the solution continuously monitors traffic by inbuilt rules to identify preconfigured attacks."
"The most valuable feature of Azure DDoS Protection is that it performs well."
"This solution is the best option for us because we use a lot of Microsoft products. So, it is easy for us to deploy or integrate any features or products."
"I like the user interface, documentation, and support. Azure DDoS Protection is one of the most valuable solutions for any endpoint that is publicly reachable through the internet. It will automatically secure all your endpoints from third-party attacks, cyber attacks, or phishing attacks."
"DDoS Protection is simple to deploy and integrates seamlessly with the Azure environment. Ease of deployment is a crucial feature for us."
"Azure DDoS Protection offers superior protection against denial-of-service attacks."
"I like its order management feature. It doesn't have the kind of threat intelligence that Palo Alto has, but the order management makes it much simpler to know the difference."
"One of the best features is that it natively integrates with Azure Services and tools. When you have a third-party offering, that is not the case. But Azure Firewall provides a comprehensive and seamless security solution for your Azure resources."
"The solution is stable."
"Great security and connectivity."
"It's helped us improve our security posture."
"In terms of the reporting, it's beautiful. It integrates with Azure monitoring and with Azure policies. That piece is a big help. You can set governing policies and you can use the application firewall, as well as the Azure Firewall, to enforce those policies."
"Azure Firewall is a cloud-native solution that removes the pain of load balancers."
"The initial setup is straightforward; Azure Firewall does not have a complex implementation process. It is very simple; you just need to enable the service within Azure. It does not require any maintenance because it is managed by Microsoft, that is, it is a fully managed service."
"The visibility could be better. We would like to have better metrics, so we could see all the information in a central place."
"Sometimes, it is hard for our staff to keep track of changes (in the GUI) between different projects, because there are constant changes. As a result, it is hard to manage, recall, and see all the features because they have been moved from one place to another."
"The implementation of Azure DDoS Protection results in a decrease in our bandwidth capacity and should be optimized to reduce resource consumption."
"The reporting aspect and dashboard management monitoring need improvement."
"The UI needs to be improved."
"Azure DDoS Protection could improve on the reporting."
"The interface could be improved, it's not very user friendly."
"There should be better monitoring and logging. Currently, it is put in Sentinel. It should be more seamless and from the interface."
"The reporting, logging, and monitoring features, as well as the flexibility of the policies, need to be improved."
"It needs a lot of improvement, especially on intruder detection. They are working hard on that."
"This solution is not mature when it comes to handling perimeter traffic like internet browsing."
"Azure Firewall has limited visibility for IDPS, no TLS inspection, no app ID, no user ID, no content ID, no device ID. There is no antivirus or anti-spyware. Azure Firewall doesn't scan traffic for malware unless it triggers an IDPS signature. There is no sandbox or machine learning functionality, meaning we are not protected from Zero-day threats. There is no DNS security and limited web categories."
"Azure has new versions including a premium firewall. But I would like to see them not put the premium features on Azure Firewall Premium alone because it is quite expensive."
"You have to have a defined IP range within your network to associate it with your network. The problem is you have to plan ahead of time if you expect to use the firewall in the future so that you don't have to reconfigure your subnets or that specific IP range. Other than that, I don't any issues. I use it for basic configuration for a single application, so I really don't try to leverage it for multiple applications where I might find some complexity or challenges."
Azure DDoS Protection is ranked 18th in Microsoft Security Suite with 6 reviews while Azure Firewall is ranked 14th in Microsoft Security Suite with 33 reviews. Azure DDoS Protection is rated 8.6, while Azure Firewall is rated 7.2. The top reviewer of Azure DDoS Protection writes "Offers superior protection, prevents malicious traffic, and has good visibility". On the other hand, the top reviewer of Azure Firewall writes "Easy to use and configure but could be more robust". Azure DDoS Protection is most compared with Azure Front Door, AWS Shield, Cloudflare, Arbor DDoS and Microsoft Defender for Cloud, whereas Azure Firewall is most compared with Fortinet FortiGate-VM, Palo Alto Networks NG Firewalls, Microsoft Defender for Cloud, Palo Alto Networks VM-Series and Azure Bastion. See our Azure DDoS Protection vs. Azure Firewall report.
See our list of best Microsoft Security Suite vendors.
We monitor all Microsoft Security Suite reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.