I previously used Barracuda Web Application Firewall. I hope that Azure Web Application Firewall will look at other products and replicate some of their functionality. Azure WAF is doing great because it is designed to host web applications in Azure. However, it can be improved with other services. Barracuda is the most advanced firewall in the industry, so Azure WAF could pick some of its features and replicate them into its own application firewall. Barracuda WAF was deployed in parallel to the traffic. Azure WAF should not be deployed in the middle of the traffic. It should support both public and private points of presence. Additionally, like Barracuda, Azure WAF should have an inspection engine that covers not just Microsoft products, but also products from other manufacturers. This would be a great addition to the product and would increase its security functionality.

Improvement-wise, for the solution, Azure needs to create some plans, which are like mid to small-level companies since their premium plans are very costly and pricing, and not everybody would be able to afford them. Also, the need to consider that sometimes, the solution's troubleshooting and documentation can be confusing.

I haven't had any issues and can't speak to any areas needed for improvement. 

From a reporting perspective, they could do more there. They could make the reporting features more robust. 

The documentation needs to be improved. It's not ideal. 

There are multiple deployment options. However, there is a lack of clarity around them. There's no real community to reach out to and no videos or tutorials that can explain how to deploy. Users have to figure it out on their own. It took me, for example, two days to do a simple web app since I had trouble understanding what I needed to do. 

Support could always be improved. 

The support for proxy forwarding could improve.

Any new security features that are released in the future will help us.

The management can be improved.

I think deployment should be simplified so that a non-techie can handle it. I also have concerns about the impact of the firewall on performance. I haven't fully experienced the solution yet, but it's an issue with every firewall and something that needs to be evaluated. 

There is a need to be able to configure the solution more.

In the future, I would like to see the ability to activate using a public or private IP.