Imperva Cloud Application Security Reviews

Thanks to incapsula I can control all types of attacks against the security of our digital platforms, it is a perfect tool for web protection, since it has a highly effective system against all types of attacks, it should be noted that while Incapsula is running on On the website, this does not produce effects for the performance of the website in question, which is a point in favor of this application, since there are other applications, which offer a very complete protection, but usually affect the performance and functioning of the websites, something that with Imperva Incapsula does not happen, that's why it is our preferred security platform.

You have to be honest, and this is not what I say, many colleagues think the same, this application is too expensive, there are many options in the market, and I do not know why they do not analyze costs, other applications, and they adapt a little to the prices that can be found in other programs that provide the same service, is a very good application, but the price can be a great reason, so that not everyone uses it.

As I said before, the price is somewhat expensive, taking into account other similar services, so a reduction would not be bad, in this way, customers with whom they already have, can be optimistic in a longer renewal.

Well, it complies with what it promises, we hire this service, to have greater security in our virtual platforms and so far all right, we have not been with it for a long time, a little over a year, but until now no problem has been presented, nor an attack that significantly affects our websites, so we have protected all our platforms, with the highest security, even until we have a real and dangerous attack, we cannot know the full effectiveness of the application.

*** STAY AWAY !!! ***

Absolutely NOTHING! There is nothing special about this product at all, and we've been counting the days till the end of our contract with them only a week into it, after they lied to us to get us to sign up. Google complaints about them, and you'll find hundreds of others with the same complaint. They lie and cheat you just to get you in the door, and then REALLY screw you after that.

*** STAY AWAY!!! ***

*** STAY AWAY !!! ***

They are WAY over-priced BLOATWARE, and their sales weasels are a bunch of lying scumbags who pull a bait & switch on almost everyone. Just expect to pay double whatever they promise, and don't expect a whole lot more than what you can get from CloudFlare for a 3rd of the price. What a total rip off!

*** STAY AWAY!!! ***

Quit lying to people just to lure them into your crappy, barely mediocre service!

*** STAY AWAY !!! ***

They only problem I'll be solving will be getting away from these thieves on June 11, 2017! They did nothing at all for us that CloudFlare was not already doing for us, but lied and deceived us to get us to move away from them. Absolutely NO gain in any way, except for them with our money!

*** STAY AWAY !!! ***

I like the UI of Incapsula, and how easy it is to understand. Every element has helpful descriptions, and the layout of the platform is very clean. Every screen has a wealth of functionality, but it is all very easy to digest and move through.

Managing wildcard domains through Incapsula is a little cumbersome in their setup, but its not a major issue. It just took a couple extra steps.

Make sure to take it for a trial run and push it to its limits in order to understand how much of the platform is useful to you. There are a lot of features to dig into.

We solved a need to move from a hardware Web Application Firewall to a cloud based solution. We also needed a way to start caching resources to decrease the workload on the web servers.

The CDN allowed us to cut costs at our data center to such an extent that it offset the cost of the service meaning the DDoS mitigation that brought us to Incapsula in the first place is almost a free bonus. I cannot say enough about the ease of implementation and fast response from their support teams

We occasionally have an issue when we relaunch a site with a new design with their caching setup, but this is a minor inconvenience in the end.

If you think you need their service, you do, so don't delay in signing up

Bandwidth conservation and DDoS mitgation. In the two weeks before signing up with Incapsula, we were victims of 3 DDoS attacks and starting to lose client confidence. Incapsula has completely eradicated that worry. It has also cut our bandwidth cost at our data center by over 20%

Incapsula can protect your website from hacker, help webmaster blocked many attack like SQLinjection, XSS, make the websites become stable and block bad bots connect (anti ddos)

WAF of Incapsula is the best which not make the false block on ddos, your website will never get down because of ddos if you can hide your IP

don't need to wait 5second like 'other service'.

its will have a little popup at the bottom-right of the websites, which i don't want it to show up (only show up at some sites i don't understand why)

need to relogin everytime you press homepage, that make my angry.

recommend nothing, just use it, its perfect for make your website become stable and secure.

Incapsula help me block DDoS and bad bots which make server get down, hide the IP, make my server lighter with customers load, faster and strong.

In the middle of a DDOS attack we found Incapsula. While expensive we had little choice. The setup was very fast, very simple and very painless. The user interface is hands-down super simple to use, yet there's a lot of horsepower available if one cares to dig deeper. The biggest surprise was how much faster our site operates and how much less bandwidth hits our server now due to the CDN. We signed up for DDOS protection, but we use the web application firewall and CDN on a daily basis.

The price. I don't know if it honestly costs what they charge to provide the service, but when a person is in the middle of a DDOS attack it feels a bit like they have you over a barrel. Having said that, if I recall correctly, their attitude at the time was, "Let's get you online again and then we'll figure out the money." So, while I dislike the price, their focus was very much on service.

Ask for pricing up front - it's possible to unwind the Incapsula service later on if it's too spendy, but it's not trivial. Also: If you think you don't need this service, you're wrong. You do.

We need 100% uptime (who doesn't?) Incapsula is a big part of our overall strategy to achieve that. We have increased our site security through the use of the Incapsula web application firewall and our site operates much faster now and uses far less bandwidth due to the CDN.

Technological Advancement of the system. Mostly thinking about future proof system and Incapsula made it possible which is definitely superior than the competitions. The Reseller portal is very user friendly. Wish to see some more benefits out of it and also, pricing should be more practical for the third world countries specially poor to mid earning countries where price is the main barrier to make Incapsula popular.

Further improvement can be done if the technical audit team can work together with the customers, where the problem they are facing and where the service should from back to square. Last three years support experience only shows that you don't find any problem at your end. Which indicates clearly that some robotic human is doing service in Incapsula who does not think about the technology rather pass day to day job with number of tickets to solve and thus to increase the KPI, not considering the sufferings of the customer. Not only that if a second level or 3rd level technical people talks to the customers sometime will definitely increase the market acceptance.

I just got some good news that Incapsula will take part in our drive to popularise Incapsula in our community. I really appreciate that. Also, like to see Incapsula Technical ambassadors to publish/speak to the technical community of the very stablished NOGs and Conferences like APRICOT, APNIC, SANOG and many other world recognised events. The competition is really aggressive in these events and getting very good response from there. It is also recommended that some very innovative promotional activities should be run on a regular basis in such events or some specific or individual events.

Support Staff. Too bookish.

Can not protect from Syn Flood.

Improve the support system by engaging some serious tech people who thinks the company as their own.

Internet Security is optimised.

They offers free plan get to benefit from a full fledged Web Application Firewall. And have a trial plan that like a pro feature that you can try.

I compare with others CDN, it seem free plan of Incapsula have more features. Also Incapsula have a smart tool to block ddos and bad bots.

Cost of incapsula more expensive compare others CDN with the same features. But i know, good support need high cost.

Have much ddos problem or bad bot or bad visitor, just using Incapsula now and problems will dissapear.

Incapsula accelerate websites and more secure my websites than before. I can view how much the bad bots or bad visitors that threaten my websites. And their CDN make my websites faster 20% than before using it. Impressive.

Security and speed. The core for imperva is very impressive. The stuff that is all in the background runs well and stumps security professionals. We actually give them vpn access to test us from internal due to how well imperva stumps them. This allows us to stay up to standards in case we need to change services for any reason (though we wouldnt want to).

I was kind of annoyed about the nearly complete API. I was unable to get something that was available to resellers only which did not seem to be reasonable.

Imperva is very impressive for its core feature set. Imperva has made security analysts scratch their heads and have us allow them in from inside so they can actually hit something worth while. We are very confident in the reports we get from imperva and its bot identification has allowed us to plan for bandwidth appropriately. Identification for good bots (people who hit our site using automation, but for good business reasons) has allowed us to work with our customers who use our services in new ways.

We have solved:

Increased Security, External Cache/Proxy, Simplified management including certificates, load balancing.

I've used Incapsula at my current and prior job. I setup the Enterprise plan at my last job and loved the WAF features and detection. As a hotel industry site, it was constantly getting scraped for rates by bots good and bad. We suddenly had an extreme spike in server activity from PhantomJS based bots sourced from AWS. We were able to use Incapsula to quickly shut them down from reaching the origin servers.

As a CDN, we were able to tune it for our assets and load to get close to 70% cacheability. Nothing else to say other than it worked well and helped some of our out-of-country guests have a better experience.

At my current job, we are using the Professional version, which is perfectly good in its own rights. It's taking care of the common attack vectors and has some minor tuneability of the CDN. We were able to keep common attack countries away easily without impacting our actual customers.

I wish the Professional version had some more of the features that Enterprise did, particularly the IncapRules. I was spoiled. Also, the custom SSL is a terrible price point that puts it out of range for our clients. If they need custom or EV SSL, they are paying significantly more than their overall hosting.

If you don't have custom SSL, get it!

Provides great out of box WAF protection and CDN, with easy setup. Never really had DDOS concerns for any of my implementations, so it's not been in my consideration set one way or the other.

The interface is very intuitive to use and it is very straight forward to set up, Seeing the amount of bad traffic that is blocked and the easy customization features makes it great for static content. The custom outage pages for when the application is down and being able to limit traffic by geo-location with custom error pages is also a great touch.

The biggest problem that I have had with incapsula is that it does not work well with very dynamic content and websites. We currently have a windows authorization implementation on many of our web applications and incapsula does not function with these particular authentication calls. We have also run into a plethora of problems related to having multiple applications all using the same login system but when behind incapsula only some of them work and some of them do not. This makes incapsula almost completely unusable unless we have developers building there web applications with incapsula in mind. This makes it almost impossible to go back and change what breaks with a dynamic application behind incapsula without having your development team buy in on why we need incapsula for our applications.

The only other smaller gripes is that it does not work well with platforms such as drupal because of the third party plugins and it does not work at all with host header rewrites with some of our unique applications.

Lastly the custom error page only gives 1 error page for your entire account instead of each application, making it complicated for large complex environments.

My recommendation is that if you have a single web application with not huge amounts of kerberos or other types of authentication, this product will work well for you. Large sites with many sub applications I would recommend to steer away from this platform.

Our primary business purpose is to secure all of our public facing applications behind Incapsula so that we can prevent hacker attempts from our front and circumvent DDOS attacks. We have seen benefits by being able to visualize how much traffic our sites actually receive and how much "bad" traffic comes through the pipeline which is really cool to visualize and see that it is actively working.

Incapsula helps you protect your website from hackers, from hacker shell scripts and backdoor tools, you will be notifited by email if you have infected files in your hosting account. And of course the primary activity and the best of this software is to speed up the operation of your site and enable detail statistic visit (more realistic than awstat and webalizer)

We had a problem that it was impossible to connect to the server, we had to insure that our ip address was not blocked on the server before we modified incapsula files. it took some time resolved it. Official support forum was helpful at the time. The price is also a bit high but there is a free trial to try it (as usual) before you buy it.

As noted above, we used Incapsula to speed up website and to protect it against DDoS attacks. i highly recommended to try it because it is really good.

It is a very powerful and wide solution, but the interface is very, very compact and all the features are easy-to-go. Scriptable security rules, which are activating super fast (hello, Akamai), the real-time dashboard is easy to use and very informative

Actually, I can't find any serious troubles during our experience. Especially for such price

Really nice for the sites, which are not really heavily using from all over the world, but from the specific regions

Attack protection, cache, ability to easy change the origin servers

The ease with which the solution can be implemented, in addition to the identification of search traffic to the websites.

The load balancing allowed us to be able to efficiently deliver customer services, reducing the likelihood of unavailability, on the internet front.

DDoS protection, helped us to support large queries from non-malicious robots and mitigate suspicious requests without presenting false positives.

If the infrastructure in which the websites are located needs to distribute their processing, or if any of the data center links require adjusting the bandwidth used, you can not configure a percentage of load balancing to the websites, both from local or data center.

To considerably reduce the availability of web content and services to the public from the public segment.

Identifying in real time, the behavior of the requests with the details of the customers that consumed them.

The simplicity of implementing WAF, but still maintaining the option to do the more advanced configurations.

Very strong DDoS protection capabilities,at both network and application level, always evolving to meet the next level of threats.

Very good dashboard with very fast management capabilities (the time since you make the change until it's implemented).

Could do better on web sockets security.

Can add some more advanced CDN features in the field of TCP optimisation and content routing.

just try it and see for yourself.

Incapsula allows full trials that are very easy to setup and test.

DDoS attacks are a huge concern to any online business.

Same goes for web security.

Dedicated customer support person and minimal dashboard but has everything you need in it.

I don't like the price but if you need it you will pay for it.

The price is a little steep but doesnt compare to losing clients over something like a ddos attack.

DDoS attacks were bringing down all 300+ of our clients sites and almost made us lose business.

is a cloud -based distribution platform applications. Uses a network of global content delivery to provide website security , DDoS protection , load balancing and failover services to customers

nothing bothers me about this network as a cloud delivery platform -based applications. Uses a network of global content delivery to provide security on the website, and all your content protegue other malicious files that can be found on the internet

100 % recommended because it is very safe and radida and other protegue your information so many malicious virus that can be looked up on the internet

It solves many problems in the market for internet networks because it helps a content delivery majora and prevents infection of malicious files and more users increases the use of small and large companies in the network market

They deliver what they advertise, but at a price. The caching works very well in serving content up and not having to hit the origin servers which reduces the load on our servers and allows us to host more sites.

Incapsula is very expensive since they charge you based on how much bandwidth you use. They also don't have a API for clearing the cache when the content gets changed, so you end up with a very short cache time or you have to manually clear the cache.

I would recommend that you also compare Cloudflare, we are currently in the process of testing it out and thinking whether to switch over to it.

Need caching and DDOS protection.

Incapsula is the best way to protect Web sites of ours customers,,is easy to implement that in a few minutes are ready to protect, time and costs are excellent reasons to chosse Incapsula in the first place.

Well maybe that if we need to customize some waf policy, we need to send a request to incapsula and in some occasions this process delay

That if they search protection in Web sites, DNS and DDoS Incapsula is the better option. Low costs, high benefits.

Currently we use Incapsula to protect Web sites and we can see a big change when review the before and after, and ours customers feels safer with Incapsula

Getting Incapsula setup was very easy and had an immediate benefit to our website. One very nice feature is the Geo-IP blocking, which we can use to cut down on bot traffic coming from many foreign countries. As a local business, our users are almost always within the country.

It's hard to find something wrong with the product. However, if there was an area that could be better, it might be the ability for the WAF to customize security header values to something that would allow for easier security hardening. Right now, we can pass through values from the host, but sometimes the header values are lost until a cache refresh.

DDoS protection was the main catalyst to get started, while the other security features we enabled in WAF have provided immediate value.

It is fast, and easy to be setup, and the dashboard is easy to access and give very much information, such as traffic by sites, traffic by date, traffic by weeks, months,etc.

Further more, it offer a free CDN services for personal and low end users. It is very good for beginning users to run in and run services.

The dislike thing is SSL support is not good. For example, I have an orgin website without SSL support, However, I want to allow my users to access our website via CDN via SSL support. Which means:

1) Between CDN server and origin servers, the traffic is NOT SSL (http only);

2)Between CDN server and end users, the traffic is SSL support (both https and http).

using this method will save SSL key for us and is already able to provide enough security to us.

I want to implement the above requirement.

We want a low cost worldwide CDN server for small static files (including small mp4 streaming files).

Was really easy to setup and implement. The reports and alerts provided great detail on the threats that we were facing and what settings we could tune to better optimize or enhance our use of the product.

The error pages, which you can only have one brand per account caused much frustration and confusion for both our internal and external business customers which was unacceptable. As well the caching system can be overly aggressive at times and clearing the cache was something that i and others would just spam to try and get things out. It should have been clear that NTLM / Kerberos is not supported, as we had our team place some sites behind it only to realize that everyone logging into the site was sharing logins of others that were logged in.

Works as most every other caching / cdn system does these days with low cost and ease of use. That said there is still room for improvement, like the error pages of which you can only have one brand per account and a caching system that can be overly aggressive at times.

Our main fix was to stop users from outside of the us being able to reach products that were not available in their location. We then moved this into place in front of our main public website, which then provided a drastic gain in performance as well as visibility it just how many attacks we were being presented with.

I like the ease in setting new sites up behind Incapsula. During our first migration, a support person walked me through the process in a few minutes. It was much simpler than I imagined.

My one and only complaint revolves around SSL hardening. When I disabled the weak ciphers on my web server to force TLS 1.2 connections, my site won't be accessible through Incapsula until Incapsula support makes a change on their side. While minor, since they handle it so quickly, it does require involving them for each server that is hardened.

Pay attention to what it's blocking right up from. We had developers deal with tech support on a website issue to find out it was Incapsula blocking a potential cross site scripting attack. A quick whitelist entry and it was fixed.

The immediate problem we were trying to solve was a DDoS attack, which quickly subsided the moment the site went behind Incapsula. Other unexpected, but welcomed, benefits were quickly realized. Our sites became more responsive and we saw a decrease in our bandwidth attributed to Incapsula's caching. The WAF capabilities also addressed a PCI Compliance requirement that allowed us to retire some hardware appliances.

WAF : ability to configure traffic filtering rules to a very granular level at the same time immediate applications. Also it has an easy to use panel. The bot rate and stammers drastically reduced by 94% in a week's time.

CDN: nearly a free CDN worked wonders for my applications that were not CDN fronted like our SSO

Could do a ton more on the reporting and filtering.

Reasonable price descent feature list and service

Secure our login and voting apps by reducing bots and stammers at the same time maintaining a good ux for subscribers.

Optimize applications without fancy CDNS

Secure our WordPress blogs with their 2AF

The protection Incapsula offers give confidence for the services you spend all day developing and deploying. Having been on the receiving end of a bad DDoS attack in the past (which inspired us to adopt Incapsula), we know only too well the effects it can have on a business.

Great GUI. Quick to protect sites, and good real-time analysis make it a great product.

Relatively frequent routing issues in the Incapsula Frankfurt datacenter means sometimes our websites are inaccessible from the UK, but are fine from the US. Set's off unneccessary alarms and anxiety at times. Support can also be slow.

DDOS protection. Realtime traffic analytics. BOT analytics.

Best features: definitely caching/CDN, real-time statistics and ease of use.

Great product in general.

Caching rules interface can be improved, more options/flexibility to be added.

Regarding downtime.. once and ~30 minutes in the past 18 months, support team was responsive and pro-active.

We are running 100+ high load (ecommerce) websites with Incapsula.

Incapsula helps us to:

- protect our websites from all the different vulnerability scanners and DDOS attacks

- reduce load on our infrastructure (caching and CDN)

Using the caching feature we have managed to reduce load like 10 times.

So only 10% of requests are reaching our servers!

The imperva incapsula solution is easy to implement with any type of architect and it is intelligent enough to detect bad traffic by itself without defining any rules.

The service is unstable sometimes. The console UI can be enhanced for sure. The billing features can be included in the console .

We are providing service to people who look for renting or buying property. We had this problem that competitors scrap our listings and just put in their website. Incapsula helped us fighting the problem and it is successful for 80% of the hits.

Its quick procedure to secure from DDOS attack , bandwidth management reduced tension , reduced cost , more safer feel when imperva is working

SOMETIME OVERLOOKED IP , OR POPUPS are really pissing . but its not in most of cases . false positive ratio is very low

I wuld suggest to first do your work on it , if satisfied go for it, because of your requirement , may vary

DDOS ATTACK, BANDWIDTH MANAGEMENT

Excellent protection from DDOS.

Cache feature is awesome.

IncapRules we used a lot, it works really good.

Nice dashboard. Real time tab is also useful for us.

Good support team.

We are happy with the service, but you can work on logs a little bit.

It's excellent service. Suggest for everybody.

We are now under protection, we fill safe. With Cache option our sites are working faster. That's all we need right now.

Speed is good. Good bot security. All countries servers

We have registered our client to the services. After some time we decided to give payed membership a try. Everything was fine untie one day our site was down... This was because our mai failed to get messages. Incapsula management decided to delete our account instead of downgrading it back to free membership as all respected services do when something is wrong with payment.

There are a lot of information about us, as phone number, site, my name, nobody tried to reach us, instead they just deleted dns record and customer site is down

I can understand that company is interested in getting payed. Each company decide what to do with their client, delete them and make them financial damage or try to reach people if there is something wrong...

Site development

Incapsula is very flexible, I quickly find a lot of solutions for common security concerns or issues we are having.

It would be nice if they can have a more modern looking UI.

We are using Incapsula to make our clients platforms and websites much more secure, it helps us to deal with common internet vulnerabilities such as DDoS, SQL Injections and more. It is also application aware so if we protected a Wordpress site, Incapsula has the best practices to protect common open source platforms.

The customer support/service is some of the best I have seen in the industry. Each time I call in with a question I have my answer in no time. I have not had to sit on hold for a long time whenever I have called in.

The cost is slightly high, but as they say you get what you pay for, and Incapsula delivers every time.

You won't be disappointed.

Web site traffic monitoring. We no longer have bad traffic clogging up our web servers.

Very easy to use and intuitive. The interface is simple. The protection is invaluable especially the DDOS volumetric protection

Would like to have as an onsite appliance; however, this is not possible dues to the nature of product.

Go for it, very easy to use product with amazing results

Wanted to protect websites and internet connection, these have been fully provided.

Incapsula has ten of ten points about WAF cloud protection and DDoS protection, the results are amazing, really fast implementation, protection and traffic performance increased.

I want to include Incapsula in Securesphere gui

the best and easy deployment protection

Performance, attack protection

Have been using Incapsula for ~1 year now, and couldn't be happier.

Haven't had a single issue, except when we migrated out SSL certificate. Even then, support fixed out issue ASAP during our nightly update process.

Minimum price is a bit high, but is definitely affordable for any company, either performance, or security oriented.

Increased security, increased networking performance using caching.

Also, weekly emails regarding intrusion are very helpful.

What I like best is, primarily, the ease of implementation. It took no time at all to get up and running versus the days or weeks from the competitor we switched from.

The thing I like least is the lack of reporting options. I would like to be able to generate reports for different periods of time besides the one weekly report that gets sent. Would also like the ability, through the GUI to copy settings from one site to another..

Do your research, conduct a proof of concept, then go with Incapsula.

The business problems solved are a basic layer of additional security before traffic ever touches my network.

I like on facility that the console presented to adminstrators all features of my plan.

Facility to put another site in the air and enabled new features.

Don´t have details about my plan and how much of custom or contact of my sales contact.

I have WAF with DDOS protection.

The quick and easy going support of the company! Its so basic and straightforward to contact the company.

Well the thing i really don't like is competing in contests!

Well i'm solving and have solved DDoS attacks with ease; but the side things are that it works wonders.

The WAF service is simple but a great solution and the CDN works just fine as well as the content purging from cache.

The UX in the administration panel is a little problem and not so clear.

We added Incapsula to our stack to avoid DDoS and exploits.

it just works, once you set it up.

reporting is easy to read

setup is too simple and dont offer alot of options

waf

The security of Incapsula is amazing and unmatched even in the free account. Setup took minutes and I was up and running in no time.

I do not have any complaints with Incapsula.

I am increasing my sales projections by 100%

easy integration and easier to automate.

logging, why is it paid. Missing plugin for splunk. Apart from that nothing much, covers everything that we need.

not really, you know more about the space than I do

security , that is a critical problem that we are shooting for. We want to make sure the product that we provide has the best security.

nothing, they are the worst company I ever dealt with.

unprofessional account managers, ages until they get back to you - I have a funny call recording with one of their sales agents if you are interested if you would like to better understand how bad they are.

Don't use it, black lotus, cloud flare and many others are much better and much cheaper.

that every ddos protection service in the market is better than Incapsula.

Easy to set up and good service with workable price.

TSL cert generation automation tends to hang every now and then.

We mainly benefit from the performance the CDN brings but having PCI compliant WAF is a great extra!

The fact that Imperva Incapsula is able to look at and filter the traffic incoming to our web sites and prevent our pipe from being filled when an attack is attempted.

It's interesting to see the traffic that is filtered, but much of the email alerts are bothersome.

Our web presence is kept up and available by using this product.

Ease of deployment and quick to apply changes.

Landing pages for master site lists needs filtering ability.

Lack of security on our web applications.

It's an easy, fast and strong option to secure your website or application

it's kinda limited, i d like to use incapsula data on our monitoring sollution

Banking and fintech, a secure and stable website

Caching, threat protection, redundancy - total confidence in my sites' safety. We've been very satisfied with this product.

I don't dislike anything at all. This has been exactly what I was hoping for.

It's a fantastic service. Highly recommended.

We've sped up our sites by leveraging the caching, and we've been alerted to threats in real time.

ddos protection, waf, ssl certificates and http2

needs improvement in customer support /tech support

easly manageable ddos protection

HTTP2

SSL Certificates for all the services behind it

CDN in good locations

We're now sure that our web services can't be exploited remotely because of the WAF feature, also we can chose to whitelist/blacklist network(s) access to specific services/resources.

What I like about Incapsula is that one can protect an online app in full.

Not only the web app itself (WAF) but also its platform (DDoS/Infrastructure Protection) and DNS service.

A major problem we see in Incapsula projects is the missing on-prem appliance for local DDoS protection and automatic switch-over to cloud-based scrubbing centers.

Ask an external expert, not just the vendors ;)

The main focus is security, both on the application layer (WAF) and on infrastructure level (IP traffic). CDN is a nice addition, as well as global load balancing mechanisms.