We performed a comparison between Barracuda Web Application Firewall and HAProxy based on real PeerSpot user reviews.
Find out what your peers are saying about Amazon Web Services (AWS), F5, Microsoft and others in Web Application Firewall (WAF)."The installation is straightforward."
"If an attack is coming continuously, you can ask the device to block it temporarily for two to three minutes. F5 has not provided us with an option to block certain IPs for some time. Barracuda can help you block someone if the source is from a different IP. You can apply the rule to the device and block it for whatsoever time you want. The solution will unblock the IP after the prescribed time as well."
"This product gives us visibility into what is going on in two servers, including connections and sessions, real-time alerts, very good reporting, and KPIs. It makes managing security of a critical server very easy, with a friendly GUI."
"There is no one special feature, but the WAF itself is valuable: user-friendly protection against web attacks etc., authentication, reporting, accountability, alerting, and hardened OS."
"Barracuda Web Application Firewall provides optimized performance, a user-friendly environment, helpful dashboards, and is simple to use."
"The most valuable feature is the automatic content filtering."
"The solution offers multiple security features. There are machine learning features and great URL encryption. It also offers multi-protocol support against DDoS attacks."
"It is stable and the performance is good."
"Advanced traffic rules, including stick tables and ACLs, which allow me to shape traffic while it's load balanced."
"The anti-DDOS PacketShield filtering solution (embedded in the physical appliances) as well as the BGP route injection are great features and heavily used."
"I can't speak to all of the HAProxy features because we don't use them all, but load balancing is very good."
"Stability is number one."
"It is stable. Period. Will not fail unless you do something wrong."
"The solution is user-friendly and efficient."
"We were able to use HAProxy for round robin with our databases, or for a centralized TCP connection in one host."
"HAProxy's TCP load balancer is excellent and super stable."
"There are issues when upgrading firewalls and we experience different issues across customers."
"The platform's pricing needs improvement."
"The solution could use more reports."
"I would like to see better controlling of the traffic."
"An area for improvement in Barracuda Web Application Firewall is attack identification. Other banks identified attacks and tracked logs that the solution wasn't able to identify because of its ready-made rules pre-deployed by the vendor. My organization raised this issue with the technical support team. Another area to improve in Barracuda Web Application Firewall is its service desk. The team resorted to stonewalling because they couldn't accept that a feature was missing in the solution, and it was only after a lot of drilling down that the service desk team accepted that, and would be adding that feature in the future. My organization had to submit a report to the Reserve Bank of India with information on the logs identified and the attacks that happened, and that there was a failure on the part of the Barracuda Web Application Firewall. The Reserve Bank of India conducts a tri-monthly cyber risk audit in all Indian banks. Even smaller banks identified and caught attacks that my organization wasn't able to do, so I was looking into other solutions that competitor banks could be using because Barracuda Web Application Firewall failed to identify some of the attacks."
"As most people are aware, the implementation is not easy."
"The documentation is lacking. It's not like what you'd get if you were using Juniper or Cisco. They need to expand on it and make it more useful."
"There are some vulnerabilities that are reported across the tools offered by Barracuda for some devices, which need to be taken care of from an improvement perspective."
"HAProxy could do with some good combination integrations."
"The basic clustering is not usable in our very specific setup. The clustering is mainly a configuration replication and is great in a case of active-passive usage. In the case of an active-active (or with more than two nodes) where the configuration is not fully identical, it cannot be used as-is."
"The visibility could be improved."
"Documentation could be improved."
"If nbproc = 2, you will have two processes of HAProxy running. However, the stats of HAProxy will not be aggregated, meaning you don't really know the collective status in a single point of view."
"We've changed solutions as it doesn't fit with our current needs."
"There is room for improvement in the pricing model. It could be cheaper."
"I would like to evaluate load-balancing algorithms other than round robin and SSL offloading. Also, it would be helpful if I could logically divide the HAProxy load-balancing into multiple entities so that I would install one HA Proxy LB application which could be used for different Web servers for different applications. I am not sure if these features are available."
More Barracuda Web Application Firewall Pricing and Cost Advice →
Barracuda Web Application Firewall is ranked 15th in Web Application Firewall (WAF) with 38 reviews while HAProxy is ranked 3rd in Application Delivery Controllers (ADC) with 41 reviews. Barracuda Web Application Firewall is rated 8.2, while HAProxy is rated 8.2. The top reviewer of Barracuda Web Application Firewall writes "Provides strong issue discovery capabilities; enhance the security parameters of web applications and suitable for medium to large enterprises". On the other hand, the top reviewer of HAProxy writes "Useful for for small and quick load-balancing tasks". Barracuda Web Application Firewall is most compared with Fortinet FortiWeb, F5 Advanced WAF, Microsoft Azure Application Gateway, Kemp LoadMaster and Radware Alteon, whereas HAProxy is most compared with Microsoft Azure Application Gateway, NGINX Plus, Kemp LoadMaster, Citrix NetScaler and Avi Networks Software Load Balancer.
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
