AWS WAF Reviews
- Highest Rating
- Lowest Rating
- Review Length
Showingreviews based on the current filters.
Jul 09 2020
What is most valuable?There are two models. One is, you can use the free services which you can download from the AWS website. There is also a paid version, where you can go for individual vendors, like Impala, Fortinet, and different vendors, which helps you to… more»
What needs improvement?There isn't room for improvement per se. the cloud is constantly evolving and changing however, so we'll see what the future brings. When users choose the free service, there isn't great support available to them. This is because, when it… more»
What's my experience with pricing, setup cost, and licensing?There are two versions of the solution available, one of which is free, which is the version we use, so we don't pay for anything.
Which solution did I use previously and why did I switch?We've only used AWS for a few customers. Usually, we recommend a different solution. However, it depends on the client and the type of budget that they have. As one version of AWS is free, sometimes that is the only option.
What other advice do I have?We're using the latest version of the solution. When customers tend to use multi-cloud vendors and multi-cloud environments, they want solid security protection. That's where the third party comes into the purchase. If any customer is… more»
Mar 20 2019
What is most valuable?The most valuable feature is the security, making sure that files are protected, preventing unauthorized users from accessing the system. These are the best.
How has it helped my organization?It has improved our organization a lot because before we were having problems with access management. Things have gotten better using this product. It's protecting the files. It has been the best step… more»
What needs improvement?I would like them to fortify the system more. In every software platform there are issues or bugs, even though presently, there aren't many known and it is running without problems. They have to do… more»
What's my experience with pricing, setup cost, and licensing?It's an annual subscription. There are no additional fees beyond the standard licensing.
Which solution did I use previously and why did I switch?Our company didn't have structured security controls before this. We were encountering a lot of problems when it came to security, protection of the documents and system. They restructured the whole… more»
What other advice do I have?Everybody handles their own platform differently. Some people love what they have but haven't necessarily experienced anything else. This platform is a good one. If you have your own platform and you… more»
Learn what your peers think about AWS WAF. Get advice and tips from experienced pros sharing their opinions. Updated: July 2020.
430,745 professionals have used our research since 2012.
Sep 08 2019
What is most valuable?The ability to take multiple data sets and match those data sets together is the solution's most valuable feature. The data lake that comes with it is very useful because that allows us to match data sets with different configurations that we wouldn't normally be able to match. The AI functionality… more»
What needs improvement?The solution is cloud-based, and therefore the billing model that comes with it could be more intuitive, in my opinion. It's very easy to not fully understand how you tag things for billing and then you can quite easily run up a high bill without realizing it. The solution needs to be more intuitive… more»
Which solution did I use previously and why did I switch?Previous to this solution, we used Microsoft Azure. Amazon allows you to provision more services once you have the initial platform in place. Using Amazon Marketplace, it's so simple to provide additional services and functionality so it allows you to grow the capability of the platform with very… more»
What other advice do I have?We use the public cloud deployment model. We use the Amazon cloud. From a technology perspective, Amazon is very simple. It requires, in order for it to run effectively, quite a mature cloud-based culture within your organization, however. My advice to others would be to get their operating model… more»
Dec 09 2019
Provides good OWASP top 10 protection but needs improvement in security efficiency related to bad bots
What is most valuable?The best features are the security firewall and the features that protect against database injections or scripting, and against overall OWASP top 10, but I have concerns about the cloud front which doesn't handle bot attacks properly, so it's not as effective as I would like it to be.
What needs improvement?A significant improvement would be built in bots protection enhancement, or seamless integration with other products. For now, there are limited feature to protect against an attack from the bad bots so users go to third party solutions, which just complicates integration and operation. A helpful… more»
What's my experience with pricing, setup cost, and licensing?The price of the product is fair enough and one of the product's advantages. Their price is good compared to other vendors.
What other advice do I have?The main difference with other similar products is the security efficiency against the type of attacks because normally Amazon works with certain types of attacks and is unable to deal with most of the more sophisticated new attacks that are now the market. So if you compare AWS WAF to the leaders… more»
Sep 05 2019
What is most valuable?Fast deployment and auto-manage are the most valuable aspects of the solution. The auto-manage primarily reacts and has to do all the little things like putting in the ACL, etc.
What needs improvement?The solution could be faster in detecting threats. They should work to define more threats, add more security, and make it more compliant with more security companies. The solution could always be more automated.
Which solution did I use previously and why did I switch?I previously used a different solution. The complex setup and installation were the main differences between that and WAF. I've worked with system compliance for many years, and it usually involves complex solutions. You have to know the CLF, etc. Cisco, for example, is so complex that you need to… more»
What other advice do I have?We use the public cloud deployment model. I use everything AWS. I need it to work for me, and it does. I hope that the solution continues to improve, but for me, it's perfect right now. For those considering implementing the solution, I would advise that they understand how networks work because… more»
Mar 24 2019
What is most valuable?The most valuable feature is the way it blocks threats to external applications.
How has it helped my organization?We do have a lot of external applications which are exposed to the internet and WAF provides protection for them. We haven't seen a decrease in the mean time to respond to threats because it has… more»
What needs improvement?In a future release I would like to see automation. There's no interaction between the applications and that makes it tedious. We have to do the preparation all over again for each of our other… more»
What's my experience with pricing, setup cost, and licensing?There are no costs in addition to the standard licensing fees.
Which solution did I use previously and why did I switch?Our previous solution was also a WAF but it was not a scalable environment like the cloud is. Everybody is moving to the cloud. We were stuck on an appliance in our data center and we decided to move… more»
What other advice do I have?My advice is "go for it, use it." In terms of our security program's maturity, we're just beginning so we are still like a baby. But we are trying to get all the new stuff and improve altogether.
Feb 07 2020
What is most valuable?The most valuable feature is the scalability because it automatically scales up or scales down as per our requirements.
What needs improvement?I would like to be able to view a graphical deployment map in the user interface that will give me an overview of the configuration and help to determine whether I have missed any steps.
Which solution did I use previously and why did I switch?We have changed solutions because the choice of product depends on the customer's preferences and requirements. When I am working on a contract, I am required to use whatever they ask me to. If I already have the experience then I apply it. Otherwise, I learn what I need to, which sometimes involves… more»
What other advice do I have?My advice for anybody who is implementing this solution is not to simply look it up on Google before starting to use it. I would suggest taking some training courses, start to understand how it works internally, and then begin using it. Overall, it is a good product and it generally fits well for my… more»
Mar 26 2019
What is most valuable?* It's simple, easy to use. * Integration.
How has it helped my organization?Because it integrates with the existing AWS solution, we get a lot of support without having to do much extra work. It has helped increase staff productivity and has probably saved at least one… more»
What needs improvement?The user experience, the interface, is lacking. Sometimes it's hard to find certain areas that it has alerted on. Also, more fine-tuning would be convenient.
What's my experience with pricing, setup cost, and licensing?There are different scale options available for WAF.
Which solution did I use previously and why did I switch?We were using just the built-in Amazon intrusion detection stuff. Then we decided to go for an actual full-blown WAF. We weren't using any actual WAF before. WAF is a general solution that we knew… more»
What other advice do I have?The integration with AWS is simple and can get you off the ground and going quickly. But you could, over time, outgrow it. We're working on having a more mature security portfolio. This allows us to… more»
See 3 More AWS WAF Reviews
User Assessments By Topic About AWS WAF
AWS WAF Questions
What is AWS WAF?
AWS WAF is a web application firewall that helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. AWS WAF gives you control over which traffic to allow or block to your web applications by defining customizable web security rules. You can use AWS WAF to create custom rules that block common attack patterns, such as SQL injection or cross-site scripting, and rules that are designed for your specific application. New rules can be deployed within minutes, letting you respond quickly to changing traffic patterns. Also, AWS WAF includes a full-featured API that you can use to automate the creation, deployment, and maintenance of web security rules.
Also known asAWS Web Application Firewall
AWS WAF customers
eVitamins, 9Splay, Senao International