AWS WAF Reviews & Product Details

The best part of this tool is that its easy to deploy,always on top to release new signatures for zero days. Review collected by and hosted on G2.com.

I am not happy with the number of false positives they generate and feel the product is priced a bit high as compared to others. Review collected by and hosted on G2.com.

Amazon WAF(Web Application Firewall) offers best security over the applications that are being deployed in specific instances of the client. The client instances in which the Amazon WAF is installed, will act like a Proxy security system, thus securing all the activities from outside parties. Review collected by and hosted on G2.com.

The thing which I dislike in Amazon WAF is that, it offers security only to the web applications., that too., Those applications which are deployed only on AWS can be protected from third party vendors. Review collected by and hosted on G2.com.

Extremely fast & easy to setup

Wide range of rules available through marketplace

Highly scalable & no downtime

Pay as per you use model with reasonable charges

Excellent support Review collected by and hosted on G2.com.

Logging functionality is limited

Bot protection is not upto the mark

Since there is no managed services available, the in house teams have to be technically well versed in aspects like sql queries etc when hunting for events Review collected by and hosted on G2.com.

This application fireball is used for API gateway protection against threats or exploitation. It protect against malicious traffic to the front end application. Review collected by and hosted on G2.com.

Nothing to dislike if there is no price issue. Review collected by and hosted on G2.com.

The peace of mind knowing that the WAF is helping to block malicious activity on our applications. Review collected by and hosted on G2.com.

It was slightly difficult to set up if you don't have much experience with it. Review collected by and hosted on G2.com.

It is so easy to implement all the required features with very more minor steps Review collected by and hosted on G2.com.

Writing some exceptions is a little bit tough, but in a way, it's a good thing to be more careful what you are avoiding Review collected by and hosted on G2.com.

AWS WAF is a very versatile and useful tool when it comes to protecting the infrastructures of our applications and this is because it allows users to establish rules according to their needs and vulnerabilities that they wish to stop, their costs are applied according to the number of rules that are established and the severity of them, that is why I consider it a great solution to protect any environment of web applications at the enterprise level. Review collected by and hosted on G2.com.

You must know how to manage, because if you do not do it, you can generate a very excessive and unnecessary amount of expenses. Review collected by and hosted on G2.com.

I like AWS WAF because it is simply a powerful protector against web attacks, for it allows developers or users to establish personalized security rules with which you can control the traffic of all applications, as well as attacks on these, since today one of the worst enemies are such attacks that tend to damage the infrastructure of the applications that is why WAF is ideal to avoid this and the best thing is that although it offers many advantages does not mean that its costs are very high, because we only have to pay only for what we use. Review collected by and hosted on G2.com.

Establishing rules tends to be somewhat limited because the more rules are established the more costs will rise, however it is worth it because it is really useful for the protection of web applications. Review collected by and hosted on G2.com.

It is a great solution that allows protecting the environment of web applications of different types of attacks such as xss scripting, injection sql and the entire vulnerability map defined in the owasp project (Open Web Application Security Project).

With this solution you can define a set of rules that allow you to filter web traffic in order to mitigate the exposure gap when exploiting vulnerabilities in web applications. Review collected by and hosted on G2.com.

In this case, I do not have articles that I do not like about this solution, the embargo to be able to configure the rules is important to have knowledge about the vulnerabilities that extend the web applications in order to determine which is the package of rules that adapts, of otherwise, false positives would be generated once the service is enabled. Review collected by and hosted on G2.com.

It's WAF as code when implemetned with cloudformation, making it a quick and repeatable WAF implementation. One of the biggest issues with typical WAF products is that they're placed inline and costly, or are host based and are a suck on the instance resources. Being able to apply your WAF rule at the edge (cloudfront) is vastly better than letting malicious traffic travel deep into the environment. Review collected by and hosted on G2.com.

Almost impossible to setup without using the AWS provided cloudformation template. However, once the template is used it's rather trivial to add in your own custom rules. My biggest dislike would be -> I honestly dont think the 3rd party tie-ins do anything. I would also like to see lower rate based options, 2k is rather high for a minimum. Review collected by and hosted on G2.com.