What is our primary use case?
Currently in my present company, we do not use Imperva Application Security Platform. However, during my co-op position, we used it as part of a web application firewall. I cannot provide a specific example since I cannot disclose any information, but we used it for daily operations to check the traffic, the attack, and the impact of any external traffic occurring on our websites.
What is most valuable?
The most helpful feature of Imperva Application Security Platform that we have been using is the dashboard, especially the alerts and the traffic reporting. We used it to provide a specific report and summary of what we saw on the specific website, specific attacks, and specific activities or events that were unusual or common. This allowed us to know if we needed to investigate something or if it was just a common occurrence.
Imperva Application Security Platform did improve our efficiency, especially during calls and meetings. We could provide a specific summary of reporting that we could share with the board or stakeholders to show what we saw every single day and what we were dealing with. They could see the clearer picture and bigger picture of what we were dealing with every single day, especially in terms of Imperva or the web application platform.
Based on the reporting that Imperva Application Security Platform provided us, it really did help save time. We were able to provide summarized reports, especially to the VP of the cyber security department who is not into the more technical aspects and wants to have a clearer picture through graphs. Imperva was able to provide specific graphs for each day. We could show him that there was a spike specifically for this website, and he could ask what about the other days and other times, and we could clearly show it to him. This gave him a clearer idea of the traffic or the incidents we were dealing with related to Imperva.
What needs improvement?
I ran into some false positives with Imperva Application Security Platform, but I think that was because of our configuration and the company's configuration. However, the majority of the time, it was accurate. We saw the unusual events, the amount of traffic that was going on, and the websites that we needed to focus on more, or the specific websites we needed to monitor rather than other websites, because those were the common websites that received specific alerts, specific incidents, or events.
Based on what I have seen and used during that time, Imperva Application Security Platform was very easy to use. I was satisfied with how I used it before, so I do not have anything else to add about the features.
Based on my experience with Imperva Application Security Platform, there were some missing features when it comes to details in the alerting. Sometimes I was not sure if that was the configuration of our company or a vendor issue. Based on what I heard, it is good, and based on what I used, it is good. I think overall it is a great product.
Regarding improvements in terms of integration with Imperva Application Security Platform, perhaps it could be integrated into the SIEM, though I am not certain about this.
For how long have I used the solution?
I have been using Imperva Application Security Platform ever since I started my co-op, but I was very familiar with Imperva from 2020 when I worked at a different company. I am not really sure how to accumulate that time or the exact month, but I have been working with it for quite some time.
What do I think about the stability of the solution?
There are times that I noticed when I was getting reports at a specific time, maybe a month or two, that Imperva Application Security Platform gets laggy and sometimes it goes to the point where it does not load and you have to restart it. I was not sure if it was us or a part of Imperva's issue.
There are times that we experienced downtime or crashes with Imperva Application Security Platform. I think this happened when the company, because I worked with Cineplex, experienced times where traffic went really strong or fast because people tried to get tickets. There were times that it crashed, it did not load, and we had to wait until it was fine.
Based on what I experienced with Imperva Application Security Platform, there were times that it reached the limit. When I tried to extract specific events from two months, it crashed. Sometimes it did not load and I had to repeat it multiple times just to get the specific or accurate report on that specific time frame.
How are customer service and support?
I experienced something when I was working with the company, but it was not me who reached out to customer support for Imperva Application Security Platform. One of my colleagues reached out and they said it takes time. The customer support is fine, but the requests they were asking for took too much time, which slowed us down in terms of operations.
How was the initial setup?
Based on what I heard, the initial setup of Imperva Application Security Platform was very straightforward. When I came to the company, it was already there, so I think it was very straightforward and very easy for the team because I did not see or hear any issues with them discussing this.
What's my experience with pricing, setup cost, and licensing?
I am not sure about the cost since Imperva Application Security Platform was already there when I arrived. However, based on what I have heard, observed, and seen, they are doing fine. The licensing is fine, the pricing is fine. Based on what I heard, they just had their contract extension, so I guess it is fine.
Which other solutions did I evaluate?
Here at the company that I used, I have never heard of other solutions being used. However, I think I worked with AWS WAF before and also with Cloudflare. If I heard correctly, the company did try other solutions. I think they came from Cloudflare and also tried AWS. I think they also tried evaluating Fortinet.
What other advice do I have?
Based on what I observed when I used Imperva Application Security Platform, it is very useful and the features are great. It is very helpful in terms of operations. There are flaws, and I mean there is no perfect platform, but I can recommend Imperva Application Security Platform to my colleagues and other people because it is a very good product. Imperva Application Security Platform is one of the good tools I have used ever since I started working. My review rating for this product is 9 out of 10.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.