The firewall has rate-limiting, managed, and custom firewall rules.

Some of the features we’re using to a limited extent because they require an extra subscription. We have just the basic one. For example, advanced rate-limiting features are available, but we only use basic rate-limiting. 

We mainly use custom and managed firewall rules, which work well for us. We also use DDoS protection, which is probably one of the main features of the Cloudflare solution. DDoS protection was the initial thing we signed up for Cloudflare to protect our exposed web services and sites.

We also use Cloudflare DNS, logs, and analytics.

The integration of Cloudflare with Cloud Suite is its most valuable feature. This is where it stands out, as it can be integrated according to multiple scenarios.

The solution protects our application, which runs on the HTTP protocol, from DDoS attacks.

I'm highly satisfied. It's remarkably user-friendly, enabling me to quickly identify issues, and deploy solutions, and it offers the necessary features. This ease of use makes it efficient in resolving our problems. 

The Cloudflare Web Application Firewall's most valuable feature is its ease of configuration.

Cloudflare provides packaged OWASP rulesets and Cloudflared managed rulesets. Cloudflare provides weekly scheduled rule updates or emergency rule updates. Both rulesets seem very accurate, does not generate much false positives. Before the deployment, I was concerned about how many false positives I have to deal with daily. Very glad the WAF rulesets works out of box, and requires very little tuning or maintenance. 

The product has a valuable security control functionality. It monitors authorization processes to identify and address potential errors. We can view different components and prerequisites simultaneously, including time stamps, peak time, load time, etc. We only have to ensure that we have scaled all the authentication measures as per requirements.

This solution does a good job of preventing web application attacks, SQL injections, and cross-site scripting attacks. We know it's doing a good job because we've tested it. 

The solution is easy to use.

In general, it's a very good product.

The solution is very stable. The performance is great.

The product offers very good scalability.

The pricing is very reasonable.

The installation is very straightforward. It's quite simple.

Technical support has a very fast response time and they are helpful.

We never had any issues with the analytics, dashboards, or monitoring.

We like that everything is covered under one solution instead of having to buy multiple solutions and put them together. 

We like that there's load balancing, firewall capabilities, DDoS protection, et cetera, all covered by Cloudflare. 

Cloudflare has multiple caller sites and many PoPs. Whenever a user tries to get a webpage or any application, all the pages will be scanned with the nearest location data center or on a near-based, performing locally in the data center only. Other vendors have different services in different data centers. In Cloudflare, every data center has all the services. 

Currently, Cloudflare is growing. They are exploding their data centers, which is great for clients. Previously it was 25, and now it's 28 or 30. 

They are good at managing rules. 

The WAF is working fine.

We find the reporting to be very granular. It's quite good. 

I'm happy with whatever features are currently on offer in Cloudflare.

The solution is stable.

It's scalable.

It is an easy-to-set-up solution. 

Technical support has been very good. 

We find the solution competitively priced. 

The enterprise bundle includes a variety of features, such as a Web Application Firewall, rate limiting, CDN, DDoS protection, remote management, performance monitoring, and more. It is a really nice product.

Caching is the most valuable feature of Cloudflare Web Application Firewall.

The most valuable part of the solution for us overall is exactly that it is a Software-as-a-Service product. It fits our use needs because it is configurable via API.