AWS WAF Pros and Cons

It can be easily associated with any Cloud front or CDN and using web ACL we can define very condition easily and can be customized and highly scalable rules which will help web application hosting content can be secured from web attacks Review collected by and hosted on G2.com.

Once the rules are configured it takes time to get live and sometimes if you put more rules, it could also raise certain performance problems as well, which they can improve Review collected by and hosted on G2.com.

Few months back, when log4j issue was there, multiple applications and services were down, whereas AWS WAF has already upgraded itself, to avoid any loss. Moreover, it is convenient to use. Review collected by and hosted on G2.com.

The AWS console for WAF settings changes is good, but when it comes to IAAC updation, I find it a little challenging.

I think, AWS has to work on this WAF settings change by using Code. Review collected by and hosted on G2.com.

The best part of this tool is that its easy to deploy,always on top to release new signatures for zero days. Review collected by and hosted on G2.com.

I am not happy with the number of false positives they generate and feel the product is priced a bit high as compared to others. Review collected by and hosted on G2.com.

Amazon WAF(Web Application Firewall) offers best security over the applications that are being deployed in specific instances of the client. The client instances in which the Amazon WAF is installed, will act like a Proxy security system, thus securing all the activities from outside parties. Review collected by and hosted on G2.com.

The thing which I dislike in Amazon WAF is that, it offers security only to the web applications., that too., Those applications which are deployed only on AWS can be protected from third party vendors. Review collected by and hosted on G2.com.

Extremely fast & easy to setup

Wide range of rules available through marketplace

Highly scalable & no downtime

Pay as per you use model with reasonable charges

Excellent support Review collected by and hosted on G2.com.

Logging functionality is limited

Bot protection is not upto the mark

Since there is no managed services available, the in house teams have to be technically well versed in aspects like sql queries etc when hunting for events Review collected by and hosted on G2.com.

This application fireball is used for API gateway protection against threats or exploitation. It protect against malicious traffic to the front end application. Review collected by and hosted on G2.com.

Nothing to dislike if there is no price issue. Review collected by and hosted on G2.com.

The peace of mind knowing that the WAF is helping to block malicious activity on our applications. Review collected by and hosted on G2.com.

It was slightly difficult to set up if you don't have much experience with it. Review collected by and hosted on G2.com.

It is so easy to implement all the required features with very more minor steps Review collected by and hosted on G2.com.

Writing some exceptions is a little bit tough, but in a way, it's a good thing to be more careful what you are avoiding Review collected by and hosted on G2.com.

AWS WAF is a very versatile and useful tool when it comes to protecting the infrastructures of our applications and this is because it allows users to establish rules according to their needs and vulnerabilities that they wish to stop, their costs are applied according to the number of rules that are established and the severity of them, that is why I consider it a great solution to protect any environment of web applications at the enterprise level. Review collected by and hosted on G2.com.

You must know how to manage, because if you do not do it, you can generate a very excessive and unnecessary amount of expenses. Review collected by and hosted on G2.com.

I like AWS WAF because it is simply a powerful protector against web attacks, for it allows developers or users to establish personalized security rules with which you can control the traffic of all applications, as well as attacks on these, since today one of the worst enemies are such attacks that tend to damage the infrastructure of the applications that is why WAF is ideal to avoid this and the best thing is that although it offers many advantages does not mean that its costs are very high, because we only have to pay only for what we use. Review collected by and hosted on G2.com.

Establishing rules tends to be somewhat limited because the more rules are established the more costs will rise, however it is worth it because it is really useful for the protection of web applications. Review collected by and hosted on G2.com.