Imperva DDoS Reviews

We use it for protection. For example, for one of our banking clients, we use it to protect their mobile and website applications.

Imperva is really amazing, feature wise and performance wise.

Integration with IBM AS/400 and Db2 is okay.

The cost could be lower; our end clients need to have a high budget to purchase this solution.

We have been a partner for Imperva Incapsula for two years.

It's stable.

It's a scalable solution.

Technical support is provided by a distributor, and sometimes, there's a delay.

I would rate the technical support at four on a scale from one to ten.

Neutral

The initial setup is easy because it's a plugin; it's an appliance. That means that there is a predefined setting.

Even with the professional service, it does not take a long time. It takes a few days, and everything is done.

For the professional service, usually one person from the distributor is required for deployment.

We have an issue with Imperva Incapsula in the Iraqi market because of the high price.

If you are looking for efficiency and the best technology, you should use Imperva. If you have a limited budget, however, then this is not a suitable solution for you.

I would rate Imperva Incapsula at eight on a scale from one to ten.

We are using the solution as a WAF. Beyond that, I can't divulge too much information about the details surrounding how we use the solution as part of a confidentiality agreement we're under with clients.

The solution's most valuable aspect is that it is easy to configure. 

The solution keeps itself up to date itself and there's no customization that we need to do. It makes it extremely easy and cut back on the amount of work required, and saves us on man-hours.

The initial setup is fairly easy.

The log analytics interface within Incapsula isn't really good. For example, if you have to get all logs from there, it's a very cumbersome process.

The solution doesn't seem to come with any other additional features. There are other products in the market today that give you an overall network perimeter protection. Incapsula is good for what it is, but it can expand its horizon a lot if it decides to include more network perimeter protection features and capabilities. It needs items, for example, at endpoints and some sort of firewall that can work at multiple levels. Items of that nature will really bump up the security and make it a much better product.

We've been using the solution for a while now. It's been about three or four years at least.

The solution is fairly stable. I don't think we've had to deal with crashes of the system. There aren't bugs and glitches. We find it to be reliable.

We haven't had any issues with the scalability the solution provides. If a company needs to scale this product they can do so pretty easily.

I've never contacted technical support, and I'm unsure if anyone on my team has, either. I wouldn't be able to speak to the quality of service they provide.

The initial setup was not complex at all. It was pretty straightforward.

The deployment of the solution, which included the design phase of the process, took a few months to complete.

We have our own in-house team that handles any maintenance that needs to happen on an ongoing basis.

We're simply a customer. We don't have a business relationship with the company at this time. We use the product ourselves. We aren't resellers or integrators.

I'd advise other companies, based on the scale of the organization and complexity, that if one has to choose a product, a company cannot choose a product from someone else's say so. It would depend on how complex their network design is. If it's fairly simple, then there's only one thing they need there. Multiple layers mean that this solution may not be the right product. A company has to do the research to find out if there are other products that are offering more of what they want, according to their unique requirements.

I'd rate the solution eight out of ten. If the solution was a bit more complete, and offered, for example, perimeter protection, I would give it higher marks.

We use Incapsula as a firewall on our website which can block any suspicious attempts from the outside of the company. For example, if someone is trying to hack our website or put malware on it, it blocks them.

When I joined the company, one of our websites was hacked by malware (somebody put it on our website). The website went down for a long time. It took two weeks to clear the server and move everything: all the content, clean it, bring it up, and start again. By using this application, the firewall is blocking every suspicious activity and event. Now, we are safe. We have peace of mind that nobody will use malware on us or try to hack our website. With this application, we have some peace of mind that everything is blocked by Incapsula. 

1. I like to see the security. On the site security, I can see which countries have incidents, whether it was a robot attack, a real human user, or non-human user. For this feature, I like it because I can see information quickly without going into long logs and details. It is very comprehensive regarding what is going on behind the scenes on the website traffic.
2. The option saying activity launch. On the activity log, I can see the exact details, the visit, and the threat. If I click on the details, it shows me exactly where it came from, who the user agent is, and what page they tried to enter. Then, it gives me the session. Also, I have the option to put them on the blacklist or the white list. Therefore, I like this option because it is more detailed. If someone causes more than one of the incidents, then they are maybe suspicious, and we want to learn more about it. Here we can get the data, and under the data, we can see the IP addresses, therefore tracking and copying that IP address and putting it under IP lookup.
3. The dashboard is good and user-friendly. You can easily understand it, even if you don't have any prior knowledge. Looking at it, you can easily see what is happening because it is a very user-friendly menu and user interface. I don't come from this exact background, but it seems I am supposed to manage and work with this stuff. Because of the user interface, I can understand even without having prior knowledge or education of it.
4. The real-time option is cool as well. On the real time, you can see live traffic, which is flowing into our website. 

I am not sure if this application has a policy where you can create your custom policy and run it as our firewall. We should have some ability to also create some custom policy, then run it as a firewall. Maybe it is not relevant, but I think this would be a good option.

Some things previously happened where we moved one of our websites to a new host and new server, then we had difficulty putting in our user credentials to Incapsula because we could not find them. My boss was aggravated with the issue. I believe he contacted Incapsula and found out how to use the credentials for the website. They had changed the user interface a couple months ago. It was different than now. We had to put some information from the website domain to Incapsula login order to activate it, because they had changed the user interface.

It is a stable product.

It is not used at a high level, but we just put it in and configured it with our website. So, for the things that we have to run, it works just fine. I have no idea about any other scalability. However, it is just fine for the reason that we are using it.

I have never had a ticket with technical support, but I believe that they are supportive.

I was not involved with any solution in the company prior to Incapsula. When I came to this company, we were using this solution.

Someone else set it up.

Infrastructure protection (anti-DDoS): Imperva anti-DDoS protection has the well-known value of having lots of distributed nodes around the world, making it the best value for DDoS protection. They also include protection against almost all known DDoS attack methods.

The product has given us DDoS protection.

The management interface needs improving. Even with a recent version of the interface, you cannot do all the changes that you would like. As an example, if you want to change one of your protected public IP addresses, you need to request this from support, and it takes a long time.

I have used it for 10 months.

There were stability issues. One node went down and we completely lost the connectivity of our public IP addresses.

We have not encountered any scalability issues.

We rate technical support as really bad. It took one month to solve an issue with one node and give us an alternative solution. Apart from the management interface, support service has to improve their response times (based on our experience with them).

We did not previously use any other solutions.

Initial setup was simple, except for the GRE tunnel issues and MTU tuning.

We think that this product is fairly priced considering other products.

We evaluated Arbor Networks.

Check the SLAs carefully.

The added security is the biggest bonus feature, as our websites are not usually under extreme load but do have highly sensitive data. A good WAF can be difficult enough to configure even without many of the advanced security features that Imperva Incapsula includes: SQL injection prevention, bot attack recognition and notification, and DDoS.

Our audit experience is made much more simple due to having this solution. It is an answer to many security issues. We have all of the same sites available and audited internally. This extra layer of security helps with the external 'monitoring and alerting' and keeps that heavy administration portion to those who can handle it at scale a lot easier.

The API is lackluster but especially for 'customers'. The only thing we wanted to use the API for was only available to resellers.

I have been using it for 5+ years.

I have not encountered any stability issues at all.

We have a multitude of DNS names for essentially the same site. Despite that, we have to pay for each of these separately as different sites. This model is unfortunate for us but we find the service to be worth it. I could see this being a potential issue, while it is not yet.

I have had to contact support only once for API support and it was a good experience.

Initial setup was simple but admittedly handled by a different person. I have set up and decommissioned sites with ease.

You get a better bang for your buck with converged DNS site names. If you use separate DNS for smaller portions of a site, it will increase your licensing cost.

Before choosing this product, I did not evaluate other options.

Keep your sites strongly secured but sleep easier knowing Imperva Incapsula continuously baffles our penetration testers.