Personally I struggle with console interfaces and don’t like writing commands or code in general. This is why I always avoided hardware-based firewalls, and even simple operations take a lot of time and effort. I was delighted to discover cloud-based solutions, and I really enjoy using the Wallarm firewall due to its simplicity and excellent design. The web interface is clean and easy to understand at first glance. Review collected by and hosted on G2.com.

It takes some time to install and configure it, but I managed to do it with support from the Wallarm team. Review collected by and hosted on G2.com.

Our engineers didn’t have any problems with WAF module installation at our CentOS 8 server. It took some time to synchronize local rules with the cloud and get familiar with the logic of this product. Once you get used to it, the WAF node works like a clock and provides a good level of protection. Review collected by and hosted on G2.com.

The biggest problem is the absence of full SELinux support. You either have to tweak it or disable it completely. Review collected by and hosted on G2.com.

Wallarm is one of the best cloud WAF for web applications.

The advantages over the rest are a quick and easy way of integration, effective protection mechanisms against Brute Force attacks, good technical support, which is always ready to go to a meeting and help in solving issues of any complexity. Review collected by and hosted on G2.com.

Lack of full-fledged bot detection. But I know that Wallarm is actively developing this solution, and this month will be beta testing. Review collected by and hosted on G2.com.

Scalable WAF protection that allows to increase number of requests gradually without complicated adjustments, cluster support, is also available by default

- Built-in libraries with predefined attacks which help to significantly decrease total number of false positives

- Vulnerability scanner with a validation option is available out of the box Review collected by and hosted on G2.com.

Attack rechecker requires some fine tuning in order to prevent it from rechecking itself, this definitely should be improved in the next stable version Review collected by and hosted on G2.com.

Detects and blocks the most popular types of attacks such as SQL injections, XML external entities, cross-site scripting and many others

Real-time control and monitoring with a reporting system, all accessible from a web interface

Easy integration with other cybersecurity solutions and load balancing functionality Review collected by and hosted on G2.com.

Subscription-based payment model, that means your company can’t just buy a full license and use it indefinitely. Limited standalone performance when there’s no active link to the cloud Review collected by and hosted on G2.com.

API security easily integrates into our production system to prevent attacks. Convenient visualization of data in a dashboard on the main page of our personal account. Review collected by and hosted on G2.com.

System takes some time to synchronize rules during deployment. Technical support team however is very friendly and provided great feedback and help with configuration. Review collected by and hosted on G2.com.

Can work in parallel with your infrasctucture/services and if Wallarm endpoint for some reason falls down (never happened to the extent of my knowledge), your infrastructure/services keeps working (without the WAF protection of course) because it is not like a proxy but a modified web server with an extension to analyze the traffic and block it when rules match. Review collected by and hosted on G2.com.

Rule creation feature is a bit confusing for newbies. Must carefully read the documentation to understand the syntax. Review collected by and hosted on G2.com.

Complex protection from different attacks with active threat verification.

Full integration with CI/CD release cycles, perfect for Devops teams.

Impressive toolset with triggers and rules that allows to define and block even unusual types of attacks. Review collected by and hosted on G2.com.

Right now defense against code injection attacks is much stronger than defense against bots and DoS attacks. I hope developers are aware of this problem and already plan some improvements. Review collected by and hosted on G2.com.

Deployment is possible on both physical servers and cloud solutions

Built-in integrations with DevOps systems and SIEM

Configurable notifications in Slack and Telegram Review collected by and hosted on G2.com.

Some configuration steps require advanced knowledge of Linux systems, and I had to google some information to progress outside of Wallarm documentation. Once the WAF node was deployed though, there were no significant problems Review collected by and hosted on G2.com.

- Amazing firewall that can work as a standalone proxy server, filter all incoming HTTP requests and block attacks

- Supports integration with other proxy servers and postanalytics nodes

- Real-time control over incoming traffic with detailed statistics Review collected by and hosted on G2.com.

- Bruteforce and DDOS attacks can't be blocked immediately, system needs some time to find a pattern

- Not exactly cheap if there are a lot of attacks, price is calculated from the total number of requests Review collected by and hosted on G2.com.