Microsoft Entra ID, previously known as Azure AD (Active Directory), is Microsoft's cloud-based identity and access management (IAM) solution. Designed to help organizations of all sizes manage user identities and create an intelligent security perimeter around their cloud and on-premise resources. Microsoft Entra ID or Azure AD is integral to the Microsoft 365 and Azure ecosystems. It provides a robust set of capabilities to manage users and groups and secure access to applications in a centralized, streamlined manner.
Microsoft Entra ID (Azure AD) is a login system, morphing into a sophisticated identity and access management (IAM) solution for the modern, hybrid workplace. Imagine a single vault for all your digital keys – that's the essence of Entra ID's identity management. It acts as a central repository for user identities, encompassing usernames, passwords, and even additional attributes like department or employee role.
These capabilities enabled simplified administration using a unified platform for adding, modifying, and deleting user accounts. Users no longer need to remember login credentials for a plethora of applications. Entra ID streamlines access by using the same identity across various cloud services and on-premises resources (if integrated). Centralized identity management allows for stricter enforcement of security policies and password complexity requirements across the organization.
Authentication sits at the heart of the solution, ensuring only authorized users gain access to sensitive resources. It employs a multi-pronged approach:
For organizations with on-premises infrastructure, Microsoft Entra ID (Azure AD) offers hybrid identity options. This allows for a smooth integration between on-premises Active Directory and Entra ID, providing a consistent identity for users across both environments. It enables organizations to leverage their existing investments in on-premises infrastructure while taking advantage of cloud scalability and flexibility.
In conclusion, Microsoft Entra ID (Azure AD) is a comprehensive IAM solution that addresses the complex challenges of managing and securing identities in a cloud-centric world. Its blend of ease of use, security, and integration capabilities makes it an essential component of modern IT infrastructure, supporting both operational efficiency and strategic business objectives.
The licensing cost is a bit prohibitive.
Licensing is easy.
The licensing cost is a bit prohibitive.
Licensing is easy.
Microsoft Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution that lets you see and stop threats before they cause harm. Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response. Eliminate security infrastructure setup and maintenance, and elastically scale to meet your security needs—while reducing IT costs. With Microsoft Sentinel, you can:
It comes with a Microsoft subscription which the customer has, so they don't have to invest somewhere else.
The licensing requirements are not very clear from the outset.
It comes with a Microsoft subscription which the customer has, so they don't have to invest somewhere else.
The licensing requirements are not very clear from the outset.
Prisma Cloud offers competitive pricing with comprehensive security capabilities and excellent customer service. Users value its automated compliance assessment and threat detection features but suggest improvements in integration, documentation, and UI. Azure Front Door is praised for its robust security measures, efficient content delivery, and flexible pricing and licensing options. Users appreciate its website optimization tools but suggest enhancements in documentation, UI, and customer support.
The purchasing process was easy and quick. It is a very economical solution.
Our licensing fees are $18,000 USD per year.
The purchasing process was easy and quick. It is a very economical solution.
Our licensing fees are $18,000 USD per year.
Microsoft Defender for Cloud is a comprehensive security solution that provides advanced threat protection for cloud workloads. It offers real-time visibility into the security posture of cloud environments, enabling organizations to quickly identify and respond to potential threats. With its advanced machine learning capabilities, Microsoft Defender for Cloud can detect and block sophisticated attacks, including zero-day exploits and fileless malware.
I'm not privy to that information, but I know it's probably close to a million dollars a year.
We are using the free version of the Azure Security Center.
I'm not privy to that information, but I know it's probably close to a million dollars a year.
We are using the free version of the Azure Security Center.
Microsoft Azure Key Vault is a cloud-based data security and storage service that allows users to keep their secrets safe from bad actors.
The cost of the Azure Key Vault is very high and the pricing model is based on the number of keys that you store and retrieve.
Pricing is quite reasonable and support is included, although premium support is available for an additional fee.
The cost of the Azure Key Vault is very high and the pricing model is based on the number of keys that you store and retrieve.
Pricing is quite reasonable and support is included, although premium support is available for an additional fee.
Azure Firewall is a user-friendly, intuitive, cloud-native firewall security solution that provides top-of-the-industry threat protection for all your Azure Virtual Network resources. Azure Firewall is constantly and thoroughly analyzing all traffic and data packets, making it a very valuable and secure fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability. Azure Firewall allows users to create virtual IP addresses and provides for secure DDoS protection for the virtual machines on your network. It also provides fast and efficient east-west and north-south traffic security.
Azure Firewall is a managed, cloud-based network security service built to protect your Azure Virtual Network resources. It is a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.
Azure Firewall is quite an expensive product.
The licensing module is good.
Azure Firewall is quite an expensive product.
The licensing module is good.
Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Traditional load balancers operate at the transport layer (OSI layer 4 - TCP and UDP) and route traffic based on source IP address and port, to a destination IP address and port.
It is not expensive.
Every solution comes with a license and cost. Microsoft provides the license and the total cost is for the maintenance every year.
It is not expensive.
Every solution comes with a license and cost. Microsoft provides the license and the total cost is for the maintenance every year.
Cloudflare is a highly-regarded Content Delivery Network (CDN) and a Distribution Denial of Service (DDoS) protection solution. The robust global cloud platform that is Cloudflare ensures users are able to connect to the internet quickly, securely, and reliably. Cloudflare is one of the world's largest networks in the marketplace today. Using Cloudflare, businesses, educational entities, NGOs, vloggers, bloggers, and anyone else with an internet presence can use the solution and experience more secure, faster websites and applications.
So far I use free tier and happy with it. You can subscribe to business package if needed.
There are no additional costs beyond the standard licensing fees.
So far I use free tier and happy with it. You can subscribe to business package if needed.
There are no additional costs beyond the standard licensing fees.
Microsoft Defender for Cloud Apps is a comprehensive security solution that provides protection for cloud-based applications and services. It offers real-time threat detection and response, as well as advanced analytics and reporting capabilities. With Defender for Cloud Apps, organizations can ensure the security of their cloud environments and safeguard against cyber threats. Whether you're running SaaS applications, IaaS workloads, or PaaS services, Microsoft Defender for Cloud Apps can help you secure your cloud environment and protect your business from cyber threats.
We have an educational licensing agreement. It's a customer agreement for multiple years.
This product is not expensive.
We have an educational licensing agreement. It's a customer agreement for multiple years.
This product is not expensive.
AWS Web Application Firewall (WAF) is a firewall security system that monitors incoming and outgoing traffic for applications and websites based on your pre-defined web security rules. AWS WAF defends applications and websites from common Web attacks that could otherwise damage application performance and availability and compromise security.
There are no costs in addition to the standard licensing fees.
There are different scale options available for WAF.
There are no costs in addition to the standard licensing fees.
There are different scale options available for WAF.
Fortinet FortiWeb is a Web Application Firewall (WAF) that protects your web applications and APIs from attacks targeting known as well as unknown vulnerabilities. As the surface of your web applications evolves with each change of existing features and deployment of new features, your APIs are left exposed. Fortinet FortiWeb provides the board protection capabilities required to protect web applications without sacrificing performance or manageability.
Cheaper than others.
FortiWeb can be purchased in VM mode for a lower price and the same features.
Cheaper than others.
FortiWeb can be purchased in VM mode for a lower price and the same features.
F5 Advanced WAF is a web application security solution for financial and government sectors, e-commerce, and public-facing websites. It offers protection against various attacks, including botnets, web scraping, and foreign entities. The solution can be deployed on-premises or in the cloud and is often used with other security tools. Its most valuable features include DDoS and DNS attack protection, SSL uploading, anomaly detection, and the ability to input custom rules.
The pricing is too high.
I think the price is very high.
The pricing is too high.
I think the price is very high.
Imperva Web Application Firewall is a versatile solution that protects web applications and databases from various attacks, including DDoS, cross-site scripting, and SQL injection attacks. It offers data security, availability, and access control and can be deployed on-premises or on the cloud.
Everybody complains about the price of this solution.
The cost of this solution depends on the platform.
Everybody complains about the price of this solution.
The cost of this solution depends on the platform.
Imperva DDoS is a solution that offers protection for web applications and websites and all their associated business-critical data from cyberattacks. The cloud-based application delivery service helps improve user experiences by improving their performance. Through its security platform, Imperva DDoS also provides DDoS mitigation, a web application firewall, and a global load balancer, and includes a content delivery network — all designed to maximize performance.
For enterprise contracts you will be in touch with a dedicated account manager who will guide you regarding licensing.
Although the pricing can be a little high, it is worth the protection and security that it offers.
For enterprise contracts you will be in touch with a dedicated account manager who will guide you regarding licensing.
Although the pricing can be a little high, it is worth the protection and security that it offers.
Cloudflare Web Application Firewall's intuitive dashboard enables users to build powerful rules through easy clicks and also provides Terraform integration. Every request to the WAF is inspected against the rule engine and the threat intelligence curated from protecting over 27 Million websites. Suspicious requests can be blocked, challenged or logged as per the needs of the user while legitimate requests are routed to the destination, agnostic of whether it lives on-premise or in the cloud. Analytics and Cloudflare Logs enable visibility into actionable metrics for the user.
The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage.
We pay $210 per month for CloudFlare WAF.
The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage.
We pay $210 per month for CloudFlare WAF.
Akamai App & API Protector brings together web application firewall, bot mitigation, API security, and Layer 7 DDoS protection into a single solution. It quickly identifies vulnerabilities and mitigates threats across your entire web and API estates — even for the most complex distributed architectures. Recognized as the leading attack detection solution on the market, App & API Protector is easy to implement and use. It delivers automatic updates for security protections and provides holistic visibility into traffic and attacks.
Akamai is very expensive.
There is no license at all for Akamai. They are going to charge us only for the usage.
Akamai is very expensive.
There is no license at all for Akamai. They are going to charge us only for the usage.
Akamai is a powerful solution that aims to enhance the performance and reliability of websites and applications. With features like excellent performance, robust security measures, and efficient content delivery, it optimizes user experience. It also offers bandwidth optimization, caching, online asset security, and protection against DDoS attacks. Users value its wide network coverage and reliable customer support.
This is a very expensive solution but it works well.
Quite high in price, but equivalent to other enterprise products on the market
This is a very expensive solution but it works well.
Quite high in price, but equivalent to other enterprise products on the market
Amazon CloudFront is a global content delivery network (CDN) service that accelerates delivery of your websites, APIs, video content or other web assets. It integrates with other Amazon Web Services products to give developers and businesses an easy way to accelerate content to end users with no minimum usage commitments. Amazon CloudFront can be used to deliver your entire website, including dynamic, static, streaming, and interactive content using a global network of edge locations. Requests for your content are automatically routed to the nearest edge location, so content is delivered with the best possible performance. Amazon CloudFront is optimized to work with other Amazon Web Services, like Amazon Simple Storage Service (Amazon S3), Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Load Balancing, and Amazon Route 53. Amazon CloudFront also works seamlessly with any non-AWS origin server, which stores the original, definitive versions of your files. Like other Amazon Web Services products, there are no long-term contracts or minimum monthly usage commitments for using Amazon CloudFront – you pay only for as much or as little content as you actually deliver through the content delivery service.
Its price is really on the high side. It should be cheaper in general.
As a managed service, you pay for what you use.
Its price is really on the high side. It should be cheaper in general.
As a managed service, you pay for what you use.
Azure Web Application Firewall (WAF) provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit commonly known vulnerabilities. SQL injection and cross-site scripting are among the most common attacks.
We have an enterprise agreement with Microsoft and the pricing is good.
The price is for this solution is fair and there is a license needed.
We have an enterprise agreement with Microsoft and the pricing is good.
The price is for this solution is fair and there is a license needed.
NGINX App Protect application security solution combines the efficacy of advanced F5 web application firewall (WAF) technology with the agility and performance of NGINX Plus. The solution runs natively on NGINX Plus and addresses some of the most difficult challenges facing modern DevOps environments:
The licensing fees for this solution are pretty expensive for what it does, but there is no alternative.
Our licensing costs are about $40,000 a year.
The licensing fees for this solution are pretty expensive for what it does, but there is no alternative.
Our licensing costs are about $40,000 a year.
Radware Alteon is an application delivery controller (ADC) solution that provides global load balancing for all web, cloud and mobile-based applications. The solution is designed to help your organization simplify operations while ensuring resilience and SLA. It manages application traffic across both data and cloud center locations, optimizing availability and performance. In addition, Radware Alteon integrates multiple application protection services to provide protection against an array of cyberthreats.
It has a good price point and is more reasonable than other comparable products
Radware Alteon is less expensive than many of the other competitors.
It has a good price point and is more reasonable than other comparable products
Radware Alteon is less expensive than many of the other competitors.
Barracuda Web Application Firewall is a game-changing cloud-connected security solution that enables organizations to safeguard both their applications and their data from an ever-growing array of advanced cyber threats. It offers protection from cyber attacks that target not only data and applications stored on the cloud but also those that are housed on web servers. 43% of the time a breach takes place via a compromised application. Barracuda Web Application Firewall prevents these types of breaches from occurring.
The pricing is less compared to other web applications.
They have competitive pricing.
The pricing is less compared to other web applications.
They have competitive pricing.
Azure DDoS Protection, combined with application design best practices, provides defense against DDoS attacks.
The pricing is quite high. It is a monthly subscription that costs about $2,000 per month, depending on the user sizes.
The pricing is good but is not the best. It could be improved so that middle-sized organizations, such as startups, can benefit from it.
The pricing is quite high. It is a monthly subscription that costs about $2,000 per month, depending on the user sizes.
The pricing is good but is not the best. It could be improved so that middle-sized organizations, such as startups, can benefit from it.
AWS Global Accelerator is a service that improves the availability and performance of your applications with local or global users. It provides static IP addresses that act as a fixed entry point to your application endpoints in a single or multiple AWS Regions, such as your Application Load Balancers, Network Load Balancers or Amazon EC2 instances.
F5's Silverline Managed Services is a SaaS solution delivering DDoS protection, managed Web Application Firewall (WAF) services, and managed Shape Security Fraud and Anti-bot solutions.
The price of F5 Silverline Managed Services could be reduced.
The product’s pricing is reasonable.
The price of F5 Silverline Managed Services could be reduced.
The product’s pricing is reasonable.
In my opinion, Fastly is priced competitively.
It is an expensive solution.
In my opinion, Fastly is priced competitively.
It is an expensive solution.
Azure Bastion is a service you deploy that lets you connect to a virtual machine using your browser and the Azure portal. The Azure Bastion service is a fully platform-managed PaaS service that you provision inside your virtual network. It provides secure and seamless RDP/SSH connectivity to your virtual machines directly from the Azure portal over TLS. When you connect via Azure Bastion, your virtual machines do not need a public IP address, agent, or special client software.
Azure Bastion's pricing is good.
It does not save money for us.
Azure Bastion's pricing is good.
It does not save money for us.
Its license cost depends on the amount of data transferred.
The solution's price is above the medium range.
Its license cost depends on the amount of data transferred.
The solution's price is above the medium range.
I’d simply say it’s really worth it.
Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from.
I’d simply say it’s really worth it.
Sucuri offers different plans, both the standard plan and an advanced plan. So there are different plans to choose from.
Citrix Web App Firewall is a web application firewall (WAF) that protects web applications and sites from both known and unknown attacks, including application-layer and zero-day threats. Despite an ever-evolving threat landscape, Citrix Web App Firewall delivers comprehensive protection without degrading throughput or application response times. Available as a cloud solution or integrated within the Citrix ADC platform, simplified configuration controls further mitigate risk. Our pooled licensing options allow you to grow incrementally and scale on demand.
We have all the features and functions of Citrix because we have a premium license.
For partners, NetScaler is not as expensive price-wise versus F5.
We have all the features and functions of Citrix because we have a premium license.
For partners, NetScaler is not as expensive price-wise versus F5.
When I modeled it out, we are spending somewhere between $600 to $800 a month with Verizon EdgeCast.
Be careful about the options because to have all the features can be very expensive.
When I modeled it out, we are spending somewhere between $600 to $800 a month with Verizon EdgeCast.
Be careful about the options because to have all the features can be very expensive.
Microsoft Entra External ID, part of Microsoft Entra, provides highly secure digital experiences for partners, customers, citizens, patients, or any users outside your organization with customization controls. Combine external identities and user directories in one portal to seamlessly manage access across the organization.
Barracuda WAF-as-a-Service is a comprehensive solution designed to provide application security, DDoS protection, SSL authentication, protocol support, and application delivery. It is a plug-and-play solution with automated policies, simple configuration, and easy rule creation.
It's very difficult for me to give an estimate of the cost. All I know is that we sell the box itself as a service.
The product is expensive but it offers flexible pricing. It could be affordable.
It's very difficult for me to give an estimate of the cost. All I know is that we sell the box itself as a service.
The product is expensive but it offers flexible pricing. It could be affordable.
F5 Distributed Cloud Services are SaaS-based security, networking, and application management services that enable customers to deploy, secure, and operate their applications in a cloud-native environment wherever needed–data center, multi-cloud, or the network or enterprise edge.
Radware Kubernetes WAF is a comprehensive and highly scalable web application security solution for CI/CD environments orchestrated by Kubernetes. In addition to marketleading data and application protection, Radware Kubernetes WAF is designed to natively fit these environments, meeting the required levels of automation, flexibility and elasticity.
FortiWeb web application firewall (WAF) protects business-critical web applications from attacks that target known and unknown vulnerabilities. Advanced ML-powered features improve security and reduce administrative overhead. Capabilities include anomaly detection, API discovery and protection, bot mitigation, and advanced threat analytics to identify the most critical threats across all protected applications.
FortiWeb Web Application Firewall's pricing is suited for small or medium organizations.
It is a cost-effective product. If you need an extra module in the product, there will be an extra cost in addition to the licensing fee.
FortiWeb Web Application Firewall's pricing is suited for small or medium organizations.
It is a cost-effective product. If you need an extra module in the product, there will be an extra cost in addition to the licensing fee.
