Igor-BashtovyiSecurity Engineer at a tech services company
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"It's very simple and predictable, because Barracuda provides a vision of the current state of your application. It gives you an understanding of what is happening on your site and any attempts against you at your source. This is the main value that Web Application Firewall provides our company. These aspects are also the main reason for this documentation process."
"The most valuable features are the client VPN and content filtering."
"You don't need help from Barracuda to help with the deployment. The deployment is easy."
"The stability of the solution is good. I don't think we've experienced bugs, crashes, or glitches."
"The solution offers multiple security features. There are machine learning features and great URL encryption. It also offers multi-protocol support against DDoS attacks."
"Its recommendation about the probabilities on the website is great. It also has free probability managers for the website, which is really helpful. The protection engine, signature-based protection behavior, and analysis features are also great. It also has an ATP module for sandbox scanning and behavior analysis for file uploads."
"The initial setup is pretty straightforward, especially if you enlist assistance."
"We use Barracuda to protect the application. That's the main feature we use it for."
"The work balancing applications are the most valuable feature."
"The stability is good. If there is a problem, the load will be shifted to other sites automatically, which has been a good experience for us."
"I think the main area for improvement in this product is learning it, as can be seen when comparing it to the F5 web application firewall. F5 has a very powerful learning phase when you start using your web application firewall against your site. Barracuda has something like this, but not with the same functionality from my point of view."
"The incident reporting needs to be improved."
"They could improve their performance, support, and their upgrades. Their updates used to be good. Their improvements were right on the money but nowadays, the updates are minor."
"The reporting aspect of the solution needs improvement. I don't find that it's very good. They could do some work on it to make it much better. It's not that the reporting isn't secure. It's just that I would prefer to store my reports for an extended period of time. Right now, that's not possible and I'd prefer it if that could change. I also would say that the reports themselves are expensive."
"The documentation is lacking. It's not like what you'd get if you were using Juniper or Cisco. They need to expand on it and make it more useful."
"Its interface can be better. It is not very friendly."
"We've had some blocks of the application and some false positives."
"Sometimes when we put it in action, we have some blogs that appear as false positives. I think that it's improving. Barracuda should minimize false positives."
"The product could be improved by making it easier to use and easier to implement."
"The reporting is not so good. They don't have an application to connect the logs."
"Barracuda costs us $8,000 per year. Barracuda costs $20,000 for a full subscription, when you try to protect multi-site infrastructure, in different geographical zones and for different data centers. If you have only one site, Barracuda will be cheaper."
"The price of this solution is okay."
"The price of the solution is a little expensive. There is a license for this solution and it can be purchased every one, two, or five years."
"While I would have to check on the price of the solution, I feel it to be okay and it matches the market price."
"The price is reasonable, more so than other products."
"We have all the features and functions of Citrix because we have a premium license."
"For partners, NetScaler is not as expensive price-wise versus F5."
Earn 20 points
Barracuda Web Application Firewall is the ideal solution for organizations looking to protect web applications from data breaches and defacement. With the Barracuda Web Application Firewall, administrators do not need to wait for clean code or even know how an application works to secure their applications. Organizations can ensure robust security with a Barracuda Web Application Firewall hardware or virtual appliance, deployed either on-premises or in the cloud.
Citrix Web App Firewall is a web application firewall (WAF) that protects web applications and sites from both known and unknown attacks, including application-layer and zero-day threats. Despite an ever-evolving threat landscape, Citrix Web App Firewall delivers comprehensive protection without degrading throughput or application response times. Available as a cloud solution or integrated within the Citrix ADC platform, simplified configuration controls further mitigate risk. Our pooled licensing options allow you to grow incrementally and scale on demand.
Barracuda Web Application Firewall is ranked 6th in Web Application Firewall (WAF) with 13 reviews while Citrix Web App and API Protection is ranked 16th in Web Application Firewall (WAF) with 2 reviews. Barracuda Web Application Firewall is rated 7.8, while Citrix Web App and API Protection is rated 8.0. The top reviewer of Barracuda Web Application Firewall writes "Gives an understanding of what is happening on your site and any attempts on your source". On the other hand, the top reviewer of Citrix Web App and API Protection writes "Offers valuable work balancing applications and assists with the customer's communication requirements". Barracuda Web Application Firewall is most compared with Microsoft Azure Application Gateway, F5 BIG-IP Local Traffic Manager (LTM), Fortinet FortiWeb, HAProxy and AWS WAF, whereas Citrix Web App and API Protection is most compared with F5 Advanced WAF, Microsoft Azure Application Gateway, Fortinet FortiWeb, F5 BIG-IP Local Traffic Manager (LTM) and Cloudflare. See our Barracuda Web Application Firewall vs. Citrix Web App and API Protection report.
See our list of best Web Application Firewall (WAF) vendors.
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.