Web Application Firewall (WAF) Features

Read what people say are the most valuable features of the solutions they use.
Yousef Altaj says in a Fortinet FortiWeb review
Tech Manager at Global tec
FortiWeb offers machine learning in the latest product. Before that, there was an auto-learning feature. This fixed many problems. There are no false negatives now. Fortinet FortiWeb now has artificial intelligence and machine learning. View full review »
E Beernink says in a Fortinet FortiWeb review
Netwerk and Security Specialist at a healthcare company with 501-1,000 employees
It's the extra security that is the most valuable feature. You have insight into your traffic. There are some great insights into what utilities hackers are trying to exploit. It blocks a lot of stuff from the internet. View full review »
Solutiond87c says in a F5 BIG-IP review
Solutions Architect at a tech services company with 5,001-10,000 employees
We had a problem where customers were doing transactions in our system, pulling health records, and the system had to be shut down for maintenance. Unfortunately, we wouldn't know that the system was being shut down, and we would lose that information. Then, the customer would get upset. Using the F5, we were able to build rules to detect that the shutdown was occurring, then begin to route people elsewhere, so we didn't have any outages or downtime. This made customers a lot happier, and it made us a lot happier. View full review »
Director1e9d says in a F5 BIG-IP review
Director Public Sector at Smart Tronix Inc
We have found the consistency of the application always being the way it is supposed to be as its most valuable feature. View full review »
Paula Wong says in a Fortinet FortiWeb review
CEO at a tech services company with 11-50 employees
The most valuable feature is the web application firewall (WAF). View full review »
NetworkS4e03 says in a Fortinet FortiWeb review
Network System Administrator at a tech services company with 201-500 employees
All of its feature are valuable to us. If you ask me which is the most valuable, it is the load balancing, then I would say the security features. Publishing OWA is also a good feature. View full review »
FabiolaOliveros says in a Fortinet FortiWeb review
Technology Consultant at a tech services company with 11-50 employees
High-performance and detection engines, because of their high rate of exposure of web attacks. View full review »
Sanaz Afshar says in an Imperva Incapsula review
System Administrator at a tech services company with 51-200 employees
* I like to see the security. On the site security, I can see which countries have incidents, whether it was a robot attack, a real human user, or non-human user. For this feature, I like it because I can see information quickly without going into long logs and details. It is very comprehensive regarding what is going on behind the scenes on the website traffic. * The option saying activity launch. On the activity log, I can see the exact details, the visit, and the threat. If I click on the details, it shows me exactly where it came from, who the user agent is, and what page they tried to enter. Then, it gives me the session. Also, I have the option to put them on the blacklist or the white list. Therefore, I like this option because it is more detailed. If someone causes more than one of the incidents, then they are maybe suspicious, and we want to learn more about it. Here we can get the data, and under the data, we can see the IP addresses, therefore tracking and copying that IP address and putting it under IP lookup. * The dashboard is good and user-friendly. You can easily understand it, even if you don't have any prior knowledge. Looking at it, you can easily see what is happening because it is a very user-friendly menu and user interface. I don't come from this exact background, but it seems I am supposed to manage and work with this stuff. Because of the user interface, I can understand even without having prior knowledge or education of it. * The real-time option is cool as well. On the real time, you can see live traffic, which is flowing into our website. View full review »
Rehan Ghayyur Khan says in a F5 BIG-IP review
Technical Product Manager at IIPL
It has so many features. First of all, it has a full proxy architecture, it has multiple modules. The best feature is the WAF, the web application firewall module. It also has cashing type capabilities. It has all kinds of load-balancing algorithms based on your IT requirements. So the WAF and load balancing. Both are core features of BIG-IP. In every environment, you have a Web application firewall, you have internet firewalls. Then, traffic comes into your datacenter so that you have datacenter firewalls. F5 has everything. It provides first-tier firewalling, for you application. And it provides server load-balancing, it provides optimization, and it provides a proxy feature, where your users cannot directly access your server. It acts as a fully proxy architecture. It has client-side and server-side connections, both, and they're separate. It also has an AVR feature: application, visibility, and recording. It's good for customers looking for what is actually happening in their network and where the latency is. If I'm using iDirect, the bank branch is connecting to my core banking application, but if the clients are finding that the application is slow, it has TCP LAN and WAN optimization features. It has has caching. View full review »
RaynielBadiola says in a Radware AppWall review
Technical Manager at a tech services company with 11-50 employees
The features that mitigate attacks are very valuable. View full review »
PatrickMoshe Perelsztejn says in a Reblaze review
Infrastructures Security & Cyber Project Manager at El Al
We have found it extremely valuable in blocking huge botnet Layer 7 attacks on our website. It has been very successful in doing so. I very much like the elastic search and reports, allowing us to have a 360-degree view of the customer's activities and enabling us to track down any suspicious bots. The real-time reporting is very good. The monitoring is also working very nicely and very smoothly, in almost real-time. View full review »
JeffGrayson says in a Reblaze review
Principal Security Engineer at a leisure / travel company with 1,001-5,000 employees
Definitely the DDoS solution is always good to have. We have actually had a few tests done against them, unannounced, to simulate a DDoS, and they reacted very quickly. In our business, it costs us $52,000 a minute if we are down. So it is very important that we are up. We also use their WAF extensively, with their automated blocking mechanisms and some of the heuristics that they have internally. They are the ones who monitor the vast majority of it. We use them as an MSSP so they are the first line of defense. The real-time monitoring and reporting are very good. There are information updates in their portal every two minutes. They also have the ability to spill it into Sumo Logic, for example. It's very easy to use. We have the VPC feature inserted in front of our casino product and they are deployed in a hybrid fashion. They are deployed to protect our casino product in AWS and in Google. And then the actual infrastructure is sitting in the data center. We use the geo-blocking feature to block out areas that we're not authorized to have people betting from, or other geographies that are hostile like China, Russia, etc. View full review »
reviewer1089651 says in a Citrix NetScaler AppFirewall review
Senior Sales Engineer at a wholesaler/distributor with 10,001+ employees
I think that the work balancing applications are the most valuable feature. The licensing model that Citrix has implemented is very good. It's a pay-by-use system. View full review »
YacovHabusha says in a Reblaze review
Network and Security Department Manager at a non-tech company with 501-1,000 employees
The most valuable features were the real-time monitoring and the management. With this kind of product, you need a very good management system to allow you to see false positives in real-time; to see what's happening in real-time. If you have a block, you need to understand what is being blocked and why. You need a very good management system to support that. The clarity stood out. It was very visible and very easy to navigate; very easy to find the data we were looking for. View full review »
reviewer1217637 says in a Reblaze review
VP Security at a financial services firm with 11-50 employees
Everything is valuable. It's a WAF. The main feature is using the rules and being able to see the traffic. It helps us find malicious traffic. We use the real-time monitoring and reporting a lot. We can see where it's disabling users. View full review »
SnirDaan says in a Reblaze review
CTO & Product at Eloan
Reblaze knows how to manage security. For me as, someone who knows little about security, it's good that I have a firm that optimizes everything according to their standards. It's their responsibility and they are fully hands-on. They know what they're doing so, if there's a risk of something, they report it to me. They tell me, for example, "Listen, we have an IP that has been trying to contact you too many times. Do you know this IP or do you want to close it?" They take care of everything. They provide a one-person contact who can help you manage your service better and the traffic that goes in and goes out. View full review »
Head of IT at a tech services company with 11-50 employees
The dynamic profiling of websites is the solution's most valuable feature. The security is also good. View full review »
CTO - Consulting Services at a tech services company with 51-200 employees
This product has a logical perspective of negative and positive security. Negative meaning all of the blacklisted websites, and the positive is the profiling of the website itself. Impera can see and activate the policy, based on what it has learned. Imperva learns things like how dynamic content is dealt with, and what the permitted values are. When you combine these two perspectives, the negative and the positive, you get the optimal protection of the application. View full review »
Security / Network Engineer at a tech services company with 11-50 employees
Attack prevention is the most valuable feature of this solution. View full review »
Chief Information Security Consultant at V-Tech
Data masking is the most valuable feature of this solution. View full review »
reviewer1139526 says in a F5 Advanced WAF review
Technical Team Leader at a tech services company with 201-500 employees
This solution is an enterprise-class firewall that provides both load-balancing and security. Once it's deployed, it works smoothly and without issue. View full review »
Cloud Solutions Architect at a tech services company with 11-50 employees
Data marking is the solution's most valuable feature. View full review »
Shiran Cohen says in a F5 Advanced WAF review
Cyber & Security Application Delivery Expert at Hewlett Packard Enterprise
The anti-bot protection is the solution's most valuable feature. Safe-guard or credential staffing are also useful features. View full review »
User54664 says in a F5 Advanced WAF review
User at a financial services firm with 10,001+ employees
This solution inspects your traffic and based on that, automatically create distinct qualities for you, so you can add this to the policy already created. That's what I like most. View full review »
Security Engineer at a tech services company
I think the biggest value comes from the ability of Web Application Firewall to perform analysis of attacks that are registered by it, as well as its ability to analyze source code of those attacks and all traffic that is captured by Web Application Firewall. The basic functionality of the Web Application Firewall is pretty good. Therefore in comparison with CloudFlare, Barracuda has significant powerful instruments for analysis of main traffic of requests that we get on the application. If however, we try to compare Barracuda and F5, F5 is more powerful than Barracuda. In any case, it's very hard to make these comparisons, because one product has more powerful features from one point of view, while the other product is better from another point of view. I can say that it's good only in comparison with some products. All products have approximately the same functionality, but some products are more powerful in certain aspects. View full review »
Sign Up with Email