Imperva Incapsula WAF is an awesome solution for implementing a WAF with good support and reliable hardware performance.

We're an end-to-end Imperva partner. We're an Imperva reseller.

We're building an MSP at the moment, and it starts with a number of solutions. We then add on for those that have cloud exposure. We’ve added CloudWave DDoS and the API Protection and Bot Protection, and then for companies that have GDPR requirements, we've got the database side.

We use a cloud deployment with a variety of cloud providers. The telco, for example, is on the Equinix cloud. They're on a variety of data center sites. A lot of it is Equinix. I can't remember the name of the other providers, however, that's not relevant to us particularly since we are bringing in another Telco partner.

I’d rate the solution eight out of ten.

We are just customers and end users.

We're using the WAF. It's the web-based version. Whatever's the current and newest version is what we're using.

I'd advise potential new users to not believe salespeople. That's kind of a standard thing across the industry, however, we were told one thing at the sales side, and then, after we purchased, it was not true what they said. That's extremely disappointing as it actually costs us tens of thousands of dollars more due to the fact that what they said could happen, how their licensing model works, doesn't work the way the sales guy said. That's a giant disappointment.

Overall, the solution does what it says it will do. I'd rate it at an eight out of ten.

Imperva DDoS has helped maintain website availability during an attack because we didn't even know there was an attack. Imperva DDoS was integrated into our existing security measures by using the easy configuration, which was making use of cloud platforms. All the SOC and SIEM integrations and notifications to instant response teams were easily integrated by email.

The solution's real-time threat detection works well and lets me know if something is happening on the management interface, where I spend most of my time.

The solution's scalability supported our client company's growing traffic needs. It started with a medium-sized web presence of 7,00,000 queries per second globally and has moved into tens of millions of queries per second. They are really benefiting from having to keep on spinning up additional security services rather than spinning up operational services.

The solution's reporting and analytics features have helped in understanding attack patterns. The solution helps in understanding who is targeting companies and from where. The solution also helps understand the types of attacks.

Some attacks are investigations where people search to see what is available. On other occasions, people try to write specific scripts to attack the front end to see if they can gain access to the back end. With the solution's reports, you can learn about the attacks and improve security where it's needed.

My experience in setting up and configuring Imperva DDoS for our client's environment was very good. I would recommend the solution to other users.

Overall, I rate Imperva DDoS a nine out of ten.

Imperva DDoS is deployed on-cloud in our organization.

I would recommend Imperva DDoS to users because it's a fairly stable product.

Overall, I rate Imperva DDoS an eight out of ten.

I have some advice for people who are considering using Imperva. When onboarding an application, they need to be careful with their other infrastructure and systems. The concern is in part to make sure they do not have conflicts. There has to be proper authentication for authorization and the RSA (Rivest, Shamir, and Adelman, data security). During the execution of the task of onboarding, they need to be a little careful to make sure that is not creating an outage.  

So what I would recommend to anyone onboarding an application is that they need to go through the architecture of the application thoroughly before implementing the solution. Do not rush to the end to get it done.  

The best way to implement anything is by taking steps to avoid problems beforehand to end up with a result that has fewer issues.  

On a scale from one to ten (where one is the worst and ten is the best), I would rate Imperva Incapsula as the number one solution. There is not too much to know about it but that it is one of the best products of this type that you can get. But on a scale of one to ten, I give it a nine-out-of-ten because it is not perfect, as good as it is.  

Imperva has a very impressive core feature set. Imperva has made security analysts scratch their heads. We allow them in from the inside so they can actually hit something worthwhile.

We are very confident in the reports we get from Imperva. Its bot identification has allowed us to plan bandwidth appropriately.

Identification for good bots (people who hit our site using automation, but for good business reasons) has allowed us to work with our customers who use our services in new ways.

I advise others to study their requirements while choosing DDoS protection thoroughly. They should know if the CDN is limited to their region or has a global reach. Also, DDoS attacks appear in different ways every single time. Thus, it is challenging to implement. It is crucial to know its surface, nature, and how to implement the security measures.

I rate the solution an eight out of ten.

I would recommend this solution to others. It has been working fine for us, and it has all the features that we need. I would advise others to know the exact bandwidth that is required for the project because the cost is based on the bandwidth. You must evaluate the required bandwidth beforehand.

I would rate Imperva Incapsula a nine out of ten. Technically, it is a very good solution.

I would recommend this solution because I have also used different WAF and DDoS solutions. For me, it is the best solution available. It is quite simple to do the configuration. You can do whatever you want. If you know the product, you can do fine-tuning and have the configuration that you need. You need the knowledge to do this, but you can do this, and it works. Even though it is a high-cost solution, it is easy for me to sell it to customers because I know it will work. I get a little bit stressed about some of the other solutions because I don't trust those solutions like I trust Imperva. 

I would rate Imperva Incapsula an nine out of ten. It is quite a good solution. They can do some improvements, but it is quite a good solution.

Incapsula:

You need to understand how DNS works (e.g., A records vs CNAME, TXTs etc.), how SSL works and how to set it up, and how web servers work with domains and proxy servers. It is not for the layman, as the dashboard assumes some level of understanding in these topics. Some settings can break your site, so do perform some tests on a development site before turning features on/off in the dashboard. The good thing is that most settings are reversible and take effect quite quickly, so if things do go wrong, it will not stay broken for too long.

Also, use extra caution when dealing with TLDs, as the product does not handle your DNS, so for onboarding of domains using A records, you may need to ask Incapsula support for advice and assistance as it requires assigning the A record to a CNAME or IP address (network folks might understand the problem here).

CloudFlare:

You need to understand how DNS works (e.g., A records vs CNAME, TXTs etc.), how SSL works and how to set it up, and how web servers work with domains and proxy servers. It is not for the layman, as the dashboard assumes some level of understanding in these topics. Some settings can break your site, so do perform some tests on a development site before turning features on/off in the dashboard. The good thing is that most settings are reversible and take effect quite quickly, so if things do go wrong, it will not stay broken for too long.

This is very simple to install. Websites that use SSL should pre-export their certificates and be ready to import them into Incapsula.

I would rate this solution 9 out of 10.

Because of all these services, you need to look at the company's services budget. If you have the budget and you can implement the web application for tech, or if you just want to move to the cloud, or you're just using your own firewall to do all those protections, Incapsula is a good option. This one just depends on the IT infrastructure budget in your own company or environment.

I would rate Imperva DDoS a nine on a scale of one to ten.

I would rate this solution an 8 out of 10.

Overall, I am really happy with this solution. This includes the features and capabilities, as well as the cost. It fits our requirements, as well as our budget.

I would rate this solution a nine out of ten.

I rate this solution eight out of 10. 

Only configure it by enabling all protections. This is very important for preventing attacks.

I cannot provide a comparison because I have not worked with any other vendors.

I would recommend this solution to others because it is pretty simple to implement, and you don't need a dedicated WAP technician to maintain this solution. 

Anyone in the organization can easily implement it, and it can be maintained with a little application knowledge. On the application side, you do not need to be a subject matter expert it is not necessary.

I would rate Imperva Incapsula a nine out of ten.

I would encourage people to implement Imperva Incapsula. I think it is a very mature, easy to use, and reliable solution.

I am not an expert in every solution of this type, but I have a pretty good idea of what makes them work as a good solution based on customer needs. I do not do the implementation because I am more in a position of doing pre-sales and consultancy.  

I would highly recommend Imperva Incapsula especially for customers who want extra security for their web presence.  

On a scale from one to ten where one is the worst and ten is the best, I would rate the Incapsula product overall as a nine-out-of-ten.  

Because we are resellers, we prefer that our customers use it. But even if I wasn't a reseller, I would still recommend it. I love the solution's capabilities and the ease of the installation. 

In the future, I would like to see better pricing. E.x. the additional bandwidth packages are higher than our needs so we end up paying for data that we don't use. I want them to provide me with the particular quantity of megabytes I need. I don't want to pay extra money for megabytes that I will not use in the future.

I rate this program nine out of ten.

Don't wait till you've been hacked; get protected now. It'll cost you at least a year of Incapsula fees to recover from website hacking. And if your website is running slow, Google is probably already penalising your site, when the fix is so easy. Incapsula is by far the fastest fix for both website speed and security.

I would say compare it to other solutions in the marketplace feature by feature and see how Incapsula reporting and analytics dashboards compare and bot control compares – their solution for bot control is pretty good – and check those features with other enterprise level solutions, you get a lot for your money.

Go for it if you’re looking into it – they are a good solution and are trustworthy people. Just really works.

Do it on a Sunday in case there is down time. I would ask for support after implementation, and check that the site speed is as fast as it should be.

We are Imperva partners, so we work with clients that use different deployment models, including on-premises and cloud.

I'd recommend to those considering implementation to look at your organization's requirements and then compare your options.

I would rate the solution 7.5 or eight out of ten.

Basic setup is simple but, as with any caching/WAF setup, there are tricks you need to learn. But it works really nice out of the box!

I think it’s a leading product, a market leader; that’s how it feels to us. But I don’t think it would be a good product if i'ts mission critical. You'd need to proceed with a certain amount of caution because we haven’t had 100% uptime.

I would rate this solution a nine out of 10. 

I'm a distributor for this product.

With the ease of implementation, I think is a good product. A lot of the other products need a lot of professional services to make it work. With this solution, it's very, very easy to implement, which is a strong selling point.

They also have a good range of products that they sell.

I would rate the solution seven out of ten. It's more than one issue that has me rating it at seven. It's quite a big solution, so it's hard to get a smaller company to buy it. They don't have people in Sweden either. That's really important for us, because it's harder for Swedish companies to be serious about the product when there's a lot of other vendors that have local people, and that's preferred by clients.

If you don’t have a strong IT team for security, Incapsula is a good starting point for outsourcing your internet-facing security issues.

The product experience is really easy, therefore you should go and experience it.

I would rate this solution a seven out of ten.

I highly recommend Incapsula for anyone that is looking to integrate a WAF and DDoS protection into their environment.

On a scale from one to ten where one is the worst and ten is the best, I would rate the Incapsula platform as somewhere between an eight to nine. The obvious fault is the lack of better reporting. However, it is a good, functional product and we recommend it to clients who will not have to do very much to maintain the product.

Do a proof-of-concept. It’s quick and easy to set up, and you’ll have Incapsula support to help you if needed. Embrace the ease-of-use of the administrative interface and marvel “can a WAF really be this easy?!”. Monitor the dashboard and enjoy the results. The ease of testing Incapsula and then implementing it into production is one of the most remarkable product experiences in my IT career. It’s clear that Incapsula engineers are busy behind the scenes, which is in contrast to my appreciation of what I would otherwise be doing tuning other WAF options.

We're resellers of the solution.

Typically the solution is deployed with the help of DNS.

It's a good product. It's one of the best on the market. If a company can afford the solution, they should try it out.

I'd rate the solution eight out of ten.

My best advice could be, if you don't have the staff to carry out security in a proper way, have a tool do it, but use a specialized tool like this one, and don't re-invent the wheel.

Also, in our case, we soon realized that we needed an expert to fine tune it and to obtain all the features we wanted.

Great product, it will not let you down!

If you are looking for efficiency and the best technology, you should use Imperva. If you have a limited budget, however, then this is not a suitable solution for you.

I would rate Imperva Incapsula at eight on a scale from one to ten.

We're simply a customer. We don't have a business relationship with the company at this time. We use the product ourselves. We aren't resellers or integrators.

I'd advise other companies, based on the scale of the organization and complexity, that if one has to choose a product, a company cannot choose a product from someone else's say so. It would depend on how complex their network design is. If it's fairly simple, then there's only one thing they need there. Multiple layers mean that this solution may not be the right product. A company has to do the research to find out if there are other products that are offering more of what they want, according to their unique requirements.

I'd rate the solution eight out of ten. If the solution was a bit more complete, and offered, for example, perimeter protection, I would give it higher marks.

Check the SLAs carefully.

Keep your sites strongly secured but sleep easier knowing Imperva Incapsula continuously baffles our penetration testers.

It is an excellent product.

Go for it and request a free trial.

Make sure you use a premium DNS provider. We had to move from a basic DNS provider to a more complex one to get it work with Incapsula 100%.

Try it for 30 days, it will amaze you.

I would recommend this solution to others who are interested in using it.

I would rate Imperva Incapsula an eight out of ten.

You can safely implement it irrespective of your application usage size.

Try it.