We performed a comparison between Barracuda Web Application Firewall, Checkmarx One, and Citrix NetScaler based on real PeerSpot user reviews.
Find out what your peers are saying about Amazon Web Services (AWS), Microsoft, F5 and others in Web Application Firewall (WAF)."The volumetric DDoS defense is very good because I had a problem with a lot of volumetric DDoS attacks on my servers. After using Barracuda, those attacks have stopped and all the traffic is going smoothly to my servers and the system is working really well."
"Its recommendation about the probabilities on the website is great. It also has free probability managers for the website, which is really helpful. The protection engine, signature-based protection behavior, and analysis features are also great. It also has an ATP module for sandbox scanning and behavior analysis for file uploads."
"This product gives us visibility into what is going on in two servers, including connections and sessions, real-time alerts, very good reporting, and KPIs. It makes managing security of a critical server very easy, with a friendly GUI."
"The installation is straightforward."
"Barracuda Web Application Firewall provides optimized performance, a user-friendly environment, helpful dashboards, and is simple to use."
"The product has fantastic support services."
"There is no one special feature, but the WAF itself is valuable: user-friendly protection against web attacks etc., authentication, reporting, accountability, alerting, and hardened OS."
"Has a good dashboard."
"The report function is the solution's greatest asset."
"Overall, the ability to find vulnerabilities in the code is better than the tool that we were using before."
"The solution is always updating to continuously add items that create a level of safety from vulnerabilities. It's one of the key features they provide that's an excellent selling point. They're always ahead of the game when it comes to finding any vulnerabilities within the database."
"We use the solution for dynamic application testing."
"It's not an obstacle for developers. They can easily write their code and make it more secure with Checkmarx."
"The process of remediating software security vulnerabilities can now be performed (ongoing) as portions of the application are being built in advance of being compiled."
"The value you can get out of the speedy production may be worth the price tag."
"One of the most valuable features is it is flexible."
"It's very easy to configure."
"We appreciate that this solution facilitates our access to Citrix internet."
"Scalability is great. One of the best features of NetScaler is that it can scale out."
"It is a very stable solution."
"Most of the functions are user-friendly and great."
"I like app flows and custom flows. They integrate with multiple flows."
"Global load balancing between data centers."
"The best feature of Citrix is its track record of stability in its features."
"An area for improvement in Barracuda Web Application Firewall is attack identification. Other banks identified attacks and tracked logs that the solution wasn't able to identify because of its ready-made rules pre-deployed by the vendor. My organization raised this issue with the technical support team. Another area to improve in Barracuda Web Application Firewall is its service desk. The team resorted to stonewalling because they couldn't accept that a feature was missing in the solution, and it was only after a lot of drilling down that the service desk team accepted that, and would be adding that feature in the future. My organization had to submit a report to the Reserve Bank of India with information on the logs identified and the attacks that happened, and that there was a failure on the part of the Barracuda Web Application Firewall. The Reserve Bank of India conducts a tri-monthly cyber risk audit in all Indian banks. Even smaller banks identified and caught attacks that my organization wasn't able to do, so I was looking into other solutions that competitor banks could be using because Barracuda Web Application Firewall failed to identify some of the attacks."
"I would like to see an improved capacity to store logs so that they will be available for a longer time."
"Its interface can be better. It is not very friendly."
"Barracuda Web Application Firewall's load balancing feature could be improved."
"The solution needs to leverage some additional features to a broader scale of software-defined networks."
"If you know nothing about networks, then you can't set it up."
"Barracuda Web Application Firewall’s scalability needs improvement."
"There are issues when upgrading firewalls and we experience different issues across customers."
"The pricing can get a bit expensive, depending on the company's size."
"In terms of dashboarding, the solution could provide a little more flexibility in terms of creating more dashboards. It has some of its own dashboards that come out of the box. However, if I have to implement my own dashboards that are aligned to my organization's requirements, that dashboarding feature has limited capability right now."
"They should make it more container-friendly and optimized for the CI pipeline. They should make it a little less heavy. Right now, it requires a SQL database, and the way the tool works is that it has an engine and then it has an analysis database in which it stores the information. So, it is pretty heavy from that perspective because you have to have a full SQL Server. They're working on something called Checkmarx Light, which is a slim-down version. They haven't released it yet, but that's what we need. There should be something a little more slimmed down that can just run the analysis and output the results in a format that's readable as opposed to having a full, really big, and thick deployment with a full database server."
"The reports are good, but they still need to be improved considering what the UI offers."
"You can't use it in the continuous delivery pipeline because the scanning takes too much time."
"The plugins for the development environment have room for improvements such as for Android Studio and X code."
"Micro-services need to be included in the next release."
"They can support the remaining languages that are currently not supported. They can also create a different model that can identify zero-day attacks. They can work on different patterns to identify and detect zero-day vulnerability attacks."
"The solution is a bit more expensive than some of the available solutions in this region. One solution in particular that I noticed was cheaper was Kemp."
"Citrix ADC can be really complex. It isn't very simple like some other appliances that I've worked with. You need a lot of skill and experience to manage it. I'm not talking about a year or two. You need at least four years to understand it very well. It is not that easy to learn. They should make it a lot simpler for users to understand the management of it. They can also provide some additional training. The material they have on the site is not sufficient enough for you to understand how to manage it. Their training is expensive, and not everyone has the funds and experience for it. Citrix isn't very popular around these parts of the world. So, it can use some more marketing, sales, enlightenment, and advertisement. These could bring more market for them. Basically, there are just a few companies that really go for Citrix. Most of the companies go for VMware because they marketed themselves more than Citrix. There isn't much difference between Citrix and VMware. VMware is a little more robust than Citrix. Citrix has focused more on desktops rather than server virtualization, and that's the advantage VMware has over Citrix. Citrix also needs to educate and inform users about the infrastructure that is supported with a version. Currently, if the customers don't look at the datasheet, they might miss this important information."
"The technical support could be improved. They do not respond or assist customers in a timely manner."
"In every release - and it doesn't matter if it's a minor release or a major release - they keep moving things around and they keep changing the mechanism. So certain things can work in one version one way, and everything works really well, then when you upgrade it to the next version, it breaks everything because they have a new way of doing it."
"The technical support could be better. Whenever I contacted support, I rarely got the solution that we needed. And most of the time, I finished fixing the problem by looking on the internet or by finding documents about the problem on Google."
"The vendor provides frequent patches, however, the security of the website has room for improvement."
"The main areas for improvement would be around documentation and support. If a feature can be used in two or three ways, show that feature being used in all of those ways. Documentation seems to only cover the primary use case and leaves you to either run through trial and error or consult the user community. In terms of support, I have never actually had them solve any of my issues. I have always solved them myself and then provided the resolution to support."
"We would like to see some fairly large scale improvement in the configuration process for this solution."
More Barracuda Web Application Firewall Pricing and Cost Advice →
