We performed a comparison between Azure DDoS Protection and Azure Firewall based on real PeerSpot user reviews.
Find out in this report how the two Microsoft Security Suite solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."DDoS Protection is simple to deploy and integrates seamlessly with the Azure environment. Ease of deployment is a crucial feature for us."
"I like the user interface, documentation, and support. Azure DDoS Protection is one of the most valuable solutions for any endpoint that is publicly reachable through the internet. It will automatically secure all your endpoints from third-party attacks, cyber attacks, or phishing attacks."
"This solution is the best option for us because we use a lot of Microsoft products. So, it is easy for us to deploy or integrate any features or products."
"The most important feature is that the solution continuously monitors traffic by inbuilt rules to identify preconfigured attacks."
"The most valuable feature of Azure DDoS Protection is that it performs well."
"Azure DDoS Protection offers superior protection against denial-of-service attacks."
"The SIEM that Azure Firewall provides us is very robust."
"The firewall policy control, URL content control, and antivirus are all the most valuable aspects. Threat prevention is as well quite good."
"It's helped us improve our security posture."
"I can easily configure it."
"The initial setup is straightforward; Azure Firewall does not have a complex implementation process. It is very simple; you just need to enable the service within Azure. It does not require any maintenance because it is managed by Microsoft, that is, it is a fully managed service."
"Azure Firewall's feature that I have found most valuable is its scalability."
"The feature that I have found the most valuable is the control over the network permissions and the network."
"It is easy for me to protect certain ports or even the IP addresses, as well as do whitelisting, blacklisting, and the FQDN when we want virtual machines connected and to protect certain websites."
"The visibility could be better. We would like to have better metrics, so we could see all the information in a central place."
"Sometimes, it is hard for our staff to keep track of changes (in the GUI) between different projects, because there are constant changes. As a result, it is hard to manage, recall, and see all the features because they have been moved from one place to another."
"The implementation of Azure DDoS Protection results in a decrease in our bandwidth capacity and should be optimized to reduce resource consumption."
"Azure DDoS Protection could improve on the reporting."
"The UI needs to be improved."
"The reporting aspect and dashboard management monitoring need improvement."
"Currently, it only supports IP addresses, so you have to be specific about the IPs that are in your environment."
"There is room for further integration of AI into the system."
"You have to have a defined IP range within your network to associate it with your network. The problem is you have to plan ahead of time if you expect to use the firewall in the future so that you don't have to reconfigure your subnets or that specific IP range. Other than that, I don't any issues. I use it for basic configuration for a single application, so I really don't try to leverage it for multiple applications where I might find some complexity or challenges."
"The development area and QA area could be improved. With those improvements, we can improve projects and take even less time to implement them."
"It's a little heavy compared to a FortiGate or other firewalls."
"Azure should be able to work better as a balancer also, instead of just being a firewall. It should have a wider mandate."
"It has fewer features than you can get from other firewalls, like anti-spam and anti-phishing. Those kinds of things are not included. It only includes IDS and IDB."
"There should be better monitoring and logging. Currently, it is put in Sentinel. It should be more seamless and from the interface."
Azure DDoS Protection is ranked 18th in Microsoft Security Suite with 6 reviews while Azure Firewall is ranked 14th in Microsoft Security Suite with 33 reviews. Azure DDoS Protection is rated 8.6, while Azure Firewall is rated 7.2. The top reviewer of Azure DDoS Protection writes "It's simple to deploy and integrates seamlessly with the Azure environment". On the other hand, the top reviewer of Azure Firewall writes "Easy to use and configure but could be more robust". Azure DDoS Protection is most compared with Azure Front Door, AWS Shield, Cloudflare, Arbor DDoS and Microsoft Defender for Cloud, whereas Azure Firewall is most compared with Fortinet FortiGate-VM, Palo Alto Networks NG Firewalls, Microsoft Defender for Cloud, Palo Alto Networks VM-Series and Azure Web Application Firewall. See our Azure DDoS Protection vs. Azure Firewall report.
See our list of best Microsoft Security Suite vendors.
We monitor all Microsoft Security Suite reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.