Web Application Firewall (WAF) Questions
Steven Mooney
User at ODS
Feb 05 2021

Has anyone ever heard of secureaccess.com? 

The service they are offering appears to tick all the boxes that I'm after.

Any other companies do something remotely similar or the same thing?

I'm going to list a few things that I'm after...

  • I need a service that shields the connection between my employees and the web applications that we use.
  • permission management for individual web applications at both user and group level
  • SSO and 2FA
  • Integrated WAF
  • Integrate LDAP

Thanks

Menachem D Pritzker
Director of Growth
IT Central Station

There are so many products in the market today. Who are we going to be talking about 3-5 years from now?

Fortweb677Netscope, Zscaler if they continue route they are on now. FIrewalls needs great… more »
Lipaz HesselWell with the SD-WAN raising it is common to see cloud firewall implementations… more »
Nehad ElkordiCisco Portfolio is focusing on total security inside and outside including cloud… more »
Rony_Sklar
IT Central Station

It seems that there is some overlap between these two types of solutions - how do Bot Managers and WAF differ? How can they work together to improve security?

Oluwatosin OmojolaA Bot manager differs from a WAF in that it focuses on the management of Bots… more »
Mike KajubiWhat’s the Difference Between a WAF and Bot Blocking Solution? The main… more »
Robert FalboBot solutions offer much more targeted protection against Bit traffic vs a WAF… more »
SERGIO BALTAZAR
Chief of Technology with 501-1,000 employees

Today I use Fortinet for both VPN SSL and WEB SSL. I'm considering returning to Citrix (Netscaler) but the products have changed so much that I no longer know what each one is for.

Is Citrix ADC a good solution for web app firewall? App delivery management? Gateway? There are so many out there, I'm not sure which is right. Fortinet seems to be used more by communications people. Citrix seems more for administrators.

Moiz RassiwalaCitrix and is one of the leading product holders in the SSL VPN. l would… more »
Girim OhjigooI'm a Citrix Engineer and I supply CITRIX products to companies in Korea. Both… more »
SaurabhPalFor SSL VPN fortinet firewall is OK. Any firewall will use specific link for… more »
Rony_Sklar
IT Central Station

Is a WAF the best defense against a DDos attack? What are the most effective ways of protecting a business against DDoS attacks? 

ALAIN BARADEL
User at CORA INFORMATIQUE

My company has 18,000 employees.

I am busy comparing WAF solutions for a retail e-commerce site. Our strategic choice is to orient us towards a SaaS solution.

I have shortlisted F5 Silverline and Imperva.

I'm trying to identify what justifies the decline of F5 in the Gartner Magic Quadrant:

  • F5 is "leader" in 2017
  • F5 is between "leader" and "challenger" in 2018
  • F5 is "challenger" in 2019
  • Meanwhile Akamai and imperva have consolidated leading positions

What are the reasons for this decline ?

JimDavisThere are a number of factors that go into the ratings, ranging from product… more »
Prasert Mahapol
Sales Director with 51-200 employees

I am a Sales Director at a company with less than 1,000 employees. 

I am researching Web Application Firewalls (WAF). I am considering R&S (DenyAll) and Imperva. Which would you recommend? 

Are there others I should consider?

JimDavisImperva is a strong choice, given their security focus and ongoing R&D into the… more »
Sujit Sharma
Information Security Engineer at a tech services company with 1,001-5,000 employees
Mar 03 2021

We required a 24/7 automated vulnerability monitoring tool for securing our web applications. We are looking for options like Sitelock and Immuniweb.

it_user218361I haven't heard about SiteLock or Immuniweb, but I have used Qualys Web… more »
it_user550380In my experience the best option is to make dast and sast before each change of… more »
it_user648771While Cloudflare and AWS offer similar solutions, they do not have the scale, or… more »