AWS WAF vs Radware Cloud WAF Service comparison

Cancel
You must select at least 2 products to compare!
Amazon Web Services (AWS) Logo
17,303 views|13,553 comparisons
82% willing to recommend
Radware Logo
1,527 views|481 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between AWS WAF and Radware Cloud WAF Service based on real PeerSpot user reviews.

Find out in this report how the two Web Application Firewall (WAF) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed AWS WAF vs. Radware Cloud WAF Service Report (Updated: March 2024).
772,649 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The product’s availability, ease of configuration, and documentation are valuable.""The ability to take multiple data sets and match those data sets together is the solution's most valuable feature. The data lake that comes with it is very useful because that allows us to match data sets with different configurations that we wouldn't normally be able to match.""AWS WAF is something that someone from a cloud background or cloud security background leverages. If they want to natively use a solution in the cloud, AWS WAF comes in handy. It's very useful for that, and the way we can fine-tune the WAF rules is also nice.""Their technical support has been quite good.""This is not a product that you need to install. You just use it.""The most valuable feature is the security, making sure that files are protected, preventing unauthorized users from accessing the system.""It is Amazon. Everything is scalable. It is beyond what we need.""Stable and scalable web application firewall. Setting it up is straightforward."

More AWS WAF Pros →

"Geo-blocking is one of the most valuable features we use the most; most of our users are in North, Central, and South America, so we use geo-blocking to block access from other countries.""One of the most valuable features we have found in the solution is protection against attacks from botnet networks and the requests that these remote networks can generate that are blocked from our servers. That frees us from having to deal with that traffic.""The solution requires very little maintenance; we install it, it works without any problems, is reliable, and we can almost forget about it.""What makes this a comprehensive offering from Radware is that it combines WAF, ADA, bot management, and API protection, which is not currently available from any other provider in the market.""The most valuable feature of Radware Cloud WAF Service is the visibility into attacks that are being cut off instantly.""The solution offers good protection.""The most valuable feature is the monitoring dashboard that we access through the portal.""Radware Cloud WAF Service has several valuable features, with good support and a user-friendly GUI."

More Radware Cloud WAF Service Pros →

Cons
"The product should improve the DDoS-related features.""It would be better if AWS WAF were more flexible. For example, if you take a third-party WAF like Imperva, they maintain the rule set, and these rule sets are constantly updated. They push security insights or new rules into the firewall. However, when it comes to AWS, it has a standard set of rules, and only those sets of rules in the application firewalls trigger alerts, block, and manage traffic. Alternative WAFs have something like bot mitigation or bot control within the WAF, but you don't have such things in AWS WAF. I will say there could have been better bot mitigation plans, there could have been better dealer mitigation plans, and there could be better-updated rule sets for every security issue which arises in web applications. In the next release, I would like to see if AWS WAF could take on DDoS protection within itself rather than being in a stand-alone solution like AWS Shield. I would also like a solution like a bot mitigation.""We need more support as we go global.""On the UI side, I would like it if they could bring back the geolocation view on the corner.""An improvement area would be that it's more of a manual effort when you have to enable rules. That's one of the downsides. If that can be done in an automated way, it would be great. That's a lagging feature currently.""It would be good if the solution provided managed WAF services.""One area for improvement in AWS WAF could be the limitation on the number of rules, particularly those from third-party sources, within the free tier.""While the complexity of the installation can vary from one service to another, overall, I would say that it and the configuration and navigation are somewhat complex."

More AWS WAF Cons →

"Our only complaint is the reporting on the DDoS side. We also use Radware for on-premises DDoS protection and their Vision product. I just want to give paint you an example. We face so many Layer 3 and Layer 4 DDoS attacks on Cloud WAF. The reporting on those types of attacks can be improved.""We've had some issues with putting certificates in.""The lower-level technical team at Radware could improve their approach to problem-solving as they sometimes are very slow.""It would be ideal if Radware could offer a bundled package that includes Cloud WAF, web DDoS protection, bot manager, and Alteon for a more comprehensive security solution.""Radware does not have much online training available to help customers get the most out of this solution.""The Cloud Portal has room for improvement.""There is a lot more that is expected from Radware's automated analytics for looking at events. There needs to be more context of where protection is required these days.""The connection between the front and back ends could be improved."

More Radware Cloud WAF Service Cons →

Pricing and Cost Advice
  • "It's an annual subscription."
  • "There are no costs in addition to the standard licensing fees."
  • "There are different scale options available for WAF."
  • "AWS is not that costly by comparison. They are maybe close to $40 per month. I think it was between $29 or $39."
  • "It has a variable pricing scheme."
  • "We are kind of doing a POC comparison to see what works best. Pricing-wise, AWS is one of the most attractive ones. It is fairly cheap, and we like the pricing part. We're trying to see what makes more sense operation-wise, license-wise, and pricing-wise."
  • "It's quite affordable. It's in the middle."
  • "The pricing should be more affordable, especially as it pertains to small clients."
  • More AWS WAF Pricing and Cost Advice →

  • "The pricing is fair; it's neither particularly cheap nor expensive."
  • "If you plan to deploy Cloud WAF, keep in mind that the product is priced based on the megabits of traffic that pass through and the number of transactions. You should get your requirements correct up front. The active attackers feed and CDN services cost extra, so you need to negotiate these features upfront."
  • "The pricing is fair. We compared Radware to others using industry reviews and Radware is at the top right now."
  • "I believe the prices are fair."
  • "The price is a bulk average."
  • "We are paying $20,000 annually for six licenses that provide basic WAF functionality."
  • "We evaluated other options and, if I remember correctly, one of them was Fortinet, but they didn't seem as effective as Radware. But the price was the biggest difference. Radware had the best price for our type of network and level of scaling."
  • "We are based in El Salvador and don't have a direct license with Radware; we purchase the license through resellers. The pricing is reasonable, as I managed an Akamai product in a previous position, and Cloud WAF is competitively priced."
  • More Radware Cloud WAF Service Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
    772,649 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Hi Varun I have had experienced with several WAF deployments and deep technical assessments of the following: 1. Imperva WAF 2. F5 WAF 3. Polarisec Cloud WAF Typical limitations on cloud WAF… more »
    Top Answer:Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft Azure Application Gateway web application firewall software was the better fit for… more »
    Top Answer:The most valuable feature of AWS WAF is its highly configurable rules system.
    Top Answer:One of the most valuable features we have found in the solution is protection against attacks from botnet networks and the requests that these remote networks can generate that are blocked from our… more »
    Top Answer:For the current market, the price for Radware Cloud WAF Service is exactly where we want it to be. We are using two services, WAF and CDN, and we have a three-year contract for these services.
    Top Answer:We have had difficulties with the configuration of rules when it comes to allowing connections and having a list of IPs that are authorized to use a specific service. We have not been able to make a… more »
    Ranking
    Views
    17,303
    Comparisons
    13,553
    Reviews
    30
    Average Words per Review
    415
    Rating
    8.4
    Views
    1,527
    Comparisons
    481
    Reviews
    15
    Average Words per Review
    1,269
    Rating
    8.6
    Comparisons
    Also Known As
    AWS Web Application Firewall
    Learn More
    Overview

    AWS Web Application Firewall (WAF) is a firewall security system that monitors incoming and outgoing traffic for applications and websites based on your pre-defined web security rules. AWS WAF defends applications and websites from common Web attacks that could otherwise damage application performance and availability and compromise security.

    You can create rules in AWS WAF that can include blocking specific HTTP headers, IP addresses, and URI strings. These rules prevent common web exploits, such as SQL injection or cross-site scripting. Once defined, new rules are deployed within seconds, and can easily be tracked so you can monitor their effectiveness via real-time insights. These saved metrics include URIs, IP addresses, and geo locations for each request.

    AWS WAF Features

    Some of the solution's top features include:

    • Web traffic filtering: Get an extra layer of security by creating a centralized set of rules, easily deployable across multiple websites. These rules filter out web traffic based on conditions like HTTP headers, URIs, and IP addresses. This is very helpful for protection against exploits such as SQL injection and cross-site scripting as well as attacks from third-party applications.
    • Bot control: Malicious bot traffic can consume excessive resources and cause downtime. Gain visibility and control over bot traffic with a managed rule group. You can easily block harmful bots, such as scrapers and crawlers, and you can allow common bots, like search engines and status monitors.
    • Fraud prevention: Effectively defend your application against bot attacks by monitoring your application’s login page with a managed rule group that prevents hackers from accessing user accounts using compromised credentials. The managed rule group helps protect against credential stuffing attacks, brute-force login attempts, and other harmful login activities.
    • API for AWS WAF Management: Automatically create and maintain rules and integrate them into your development process.
    • Metrics for real-time visibility: Receive real-time metrics and captures of raw requests with details about geo-locations, IP addresses, URIs, user agents, and referrers. Integrate seamlessly with Amazon CloudWatch to set up custom alarms when events or attacks occur. These metrics provide valuable data intelligence that can be used to create new rules that significantly improve your application protections.
    • Firewall management: AWS Firewall Manager automatically scans and notifies the security team when there is a policy violation, so they can swiftly take action. When new resources are created, your security team can guarantee that they comply with your organization’s security rules.

    Reviews from Real Users

    AWS WAF stands out among its competitors for a number of reasons. Two major ones are its user-friendly interface and its integration capabilities.

    Kavin K., a security analyst at M2P Fintech, writes, “I believe the most impressive features are integration and ease of use. The best part of AWS WAF is the cloud-native WAF integration. There aren't any hidden deployments or hidden infrastructure which we have to maintain to have AWS WAF. AWS maintains everything; all we have to do is click the button, and WAF will be activated. Any packet coming through the internet will be filtered through.”

    Radware’s Cloud WAF provides enterprise-grade, continuously adaptive web application security protection. Based on Radware’s ICSA Labs certified, market-leading web application firewall, it provides full coverage of OWASP Top-10 threats and zero-day attacks, while implementing both negative and positive web application security models to automatically adapt protections to evolving threats and protected assets.

    Radware’s Cloud WAF offers full web security protection including OWASP Top-10 coverage, advanced attack protection and 0-day attack protection by implementing both negative and positive web application security models. It provides organizations “frictionless” application protection by automatically detecting and protecting new web applications as they are added to the network through automatic policy generation technology.

    Sample Customers
    eVitamins, 9Splay, Senao International
    Information Not Available
    Top Industries
    REVIEWERS
    Computer Software Company25%
    Manufacturing Company13%
    Energy/Utilities Company8%
    Media Company8%
    VISITORS READING REVIEWS
    Computer Software Company17%
    Financial Services Firm13%
    Manufacturing Company7%
    Insurance Company6%
    REVIEWERS
    Financial Services Firm29%
    Computer Software Company24%
    Comms Service Provider18%
    Transportation Company12%
    VISITORS READING REVIEWS
    Computer Software Company17%
    Retailer15%
    Manufacturing Company10%
    Financial Services Firm10%
    Company Size
    REVIEWERS
    Small Business37%
    Midsize Enterprise20%
    Large Enterprise43%
    VISITORS READING REVIEWS
    Small Business23%
    Midsize Enterprise14%
    Large Enterprise63%
    REVIEWERS
    Small Business30%
    Midsize Enterprise30%
    Large Enterprise40%
    VISITORS READING REVIEWS
    Small Business35%
    Midsize Enterprise9%
    Large Enterprise56%
    Buyer's Guide
    AWS WAF vs. Radware Cloud WAF Service
    March 2024
    Find out what your peers are saying about AWS WAF vs. Radware Cloud WAF Service and other solutions. Updated: March 2024.
    772,649 professionals have used our research since 2012.

    AWS WAF is ranked 1st in Web Application Firewall (WAF) with 52 reviews while Radware Cloud WAF Service is ranked 11th in Web Application Firewall (WAF) with 17 reviews. AWS WAF is rated 8.0, while Radware Cloud WAF Service is rated 8.8. The top reviewer of AWS WAF writes "A highly stable solution that helps mitigate different kinds of bot attacks and SQL injection attacks". On the other hand, the top reviewer of Radware Cloud WAF Service writes "Serves as a comprehensive solution for both our current and prospective customers, generating revenue for us". AWS WAF is most compared with Azure Web Application Firewall, Microsoft Azure Application Gateway, F5 Advanced WAF, Imperva Web Application Firewall and Fastly, whereas Radware Cloud WAF Service is most compared with Cloudflare Web Application Firewall, Prisma Cloud by Palo Alto Networks, Imperva Web Application Firewall and Imperva DDoS. See our AWS WAF vs. Radware Cloud WAF Service report.

    See our list of best Web Application Firewall (WAF) vendors.

    We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.