Barracuda Web Application Firewall Reviews

People who host their applications on the cloud, global servers, on-premises, or various locations may encounter issues related to IT threading as well as volumetric attacks. To address these challenges, we provide the Barracuda Web Application Firewall. The most significant advantage of the Barracuda Web Application Firewall is that it offers a single subscription for Active DDoS protection.

There are two types of DDoS attacks: active DDoS and offline DDoS. With Barracuda Web Application Firewall, we only need one subscription to be protected against both. In contrast, other solutions and competitors often require separate subscriptions for DDoS protection, making their offerings more expensive.

When it comes to a comprehensive web application firewall solution, Barracuda stands out by providing an affordable and end-to-end approach. In comparison, other market solutions typically consist of separate boxes for different features, leading to higher pricing.

We only need one subscription to be protected against both active DDoS and offline DDoS attacks.

In the Barracuda Web Application Firewall, there should be more affordable options for WAF as a service. These options should cater to smaller businesses, with a focus on single-size configurations for fewer users and cloud applications. We currently offer WAF as a service for cloud-deployed applications, but the pricing is somewhat on the higher side. To enhance the service, I suggest that they work on improving their pricing strategy. It's crucial to provide competitive pricing in comparison to other competitors in the market.

I am currently using the Barracuda Web Application Firewall.

I give Barracuda Web Application Firewall nine out of ten for stability.

I give Barracuda Web Application Firewall nine out of ten for scalability.

I would rate the initial setup a ten out of ten for its ease.

Usually, deployment takes three to four weeks because it depends on the customer and what we can observe from their side. What SLA or scope of work have they shared with the partner? In essence, we are not a direct partner of Barracuda; instead, we serve as the brand custodian for multiple brands such as Sophos and Barracuda. During the deployment phase, we are not directly involved with the customers. Sometimes, the queries pertain to deployment issues or technical problems. For such cases, we typically respond within two to four hours, or at most, one to two days, depending on our schedule. Since we cater to multiple brands and settings, we are not exclusively focused on one particular brand. Our role involves supporting multiple brands and setting up various solution abilities or designs.

For instance, if a customer approaches us for web services, we can offer Sophos Firewall web services. However, if they require a dedicated web solution, we provide them with a Barracuda solution. In cases where the customer has budget constraints, we try to migrate them to cloud-based solutions. Consequently, we refer to them as end customers or partners as per the situation.

In most cases, we are not directly involved in the deployment phase, the configuration process, or the setup. However, we usually gather feedback from our partners or new partners, and based on that, I can estimate that the deployment will take around two to three weeks. The timeline depends on the specific requirements or wishlist of the end customer.

The Barracuda Web Application Firewall is quite expensive. The license is available on an annual or three-year term, with no monthly, quarterly, or semi-annual options. There is a bigger discount applied when a customer signs up for a three-year term.

I would give Barracuda Web Application Firewall nine out of ten.

Barracuda Web Application Firewall is marketed for the enterprise segment because of its high cost.

Barracuda Web Application Firewall is a comprehensive and dedicated web application firewall, and I highly recommend it.

We used Barracuda Web Application Firewall to protect the banking system. There were cyber drills where we had to find some logs, share those logs, and identify the attacks.

What I like most about Barracuda Web Application Firewall is its availability. I also like that it's an easy-to-use solution.

An area for improvement in Barracuda Web Application Firewall is attack identification. Other banks identified attacks and tracked logs that the solution wasn't able to identify because of its ready-made rules pre-deployed by the vendor. My organization raised this issue with the technical support team.

Another area to improve in Barracuda Web Application Firewall is its service desk. The team resorted to stonewalling because they couldn't accept that a feature was missing in the solution, and it was only after a lot of drilling down that the service desk team accepted that, and would be adding that feature in the future.

My organization had to submit a report to the Reserve Bank of India with information on the logs identified and the attacks that happened, and that there was a failure on the part of the Barracuda Web Application Firewall. The Reserve Bank of India conducts a tri-monthly cyber risk audit in all Indian banks. Even smaller banks identified and caught attacks that my organization wasn't able to do, so I was looking into other solutions that competitor banks could be using because Barracuda Web Application Firewall failed to identify some of the attacks.

I've used Barracuda Web Application Firewall for six months in the past year.

Barracuda Web Application Firewall is a stable product.

Barracuda Web Application Firewall is a scalable product. Scaling it up isn't an issue.

I wasn't happy with the technical support for Barracuda Web Application Firewall, particularly because of the intentional stonewalling by the team. The support team should accept if a threat wasn't caught by the solution. Support should accept that there's a problem in Barracuda Web Application Firewall and improve or fix that problem. My organization had to do a lot of drilling down before the technical support team accepted that the solution was lacking, and that was frustrating.

My rating for the Barracuda Web Application Firewall technical support team is a two out of five.

Barracuda Web Application Firewall was easy to set up. It's a physical appliance, and I only needed one engineer to do the setup. My support engineer set the product up remotely, and it wasn't difficult.

I don't remember how long the deployment took for Barracuda Web Application Firewall because it was done by one of my engineers, but the solution was easy to deploy.

Barracuda Web Application Firewall was implemented by a support engineer from my organization.

I don't remember which version of Barracuda Web Application Firewall I used, but it was the latest at the time.

My organization has a few people using Barracuda Web Application Firewall. Only four or five people use the product.

What I would tell people to do before using Barracuda Web Application Firewall is to first have a POC with different vendors and solutions and even use one or more open source firewalls and WAFs before making a decision. You have to first do a lot of research before installing Barracuda Web Application Firewall because even some open source WAFs can identify some attacks that Barracuda isn't able to identify.

My rating for Barracuda Web Application Firewall is six out of ten.

I'm a product user and not a reseller or partner of Barracuda Web Application Firewall.

We are using the Barracuda Web Application Firewall for website content and front-end web application protection.

I have been using Barracuda Web Application Firewall for a few years.

I have found F5 more stable than Barracuda Web Application Firewall. They should improve the stability.

Barracuda Web Application Firewall has been scalable in my experience.

I have used similar solutions to Barracuda Web Application Firewall, such as F5 and there are not any major differences between them.

The installation is straightforward.

We need a minimum of three to four people to do the implementation and maintenance of the solution.

I rate Barracuda Web Application Firewall a seven out of ten.

The solution is user-friendly and easy to set up.

There should be some some simple case settings offered, as well as documentation and video. 

As most people are aware, the implementation is not easy. 

We implemented Barracuda Web Application Firewall around four years ago. 

The product is stable. We have encountered no issues in this regard. 

The technical support is quite good. 

We have primarily been working with Barracuda Web Application Firewall, as we have not yet done much testing of other products. 

It is not easy to implement the solution, although its duration varies with the number of applications that one wishes to deploy. We are talking about a maximum of one hour for a basic configuration. 

The price is reasonable, more so than other products. 

The solution looks good to me. We find that its features provide us with solutions for practically all our needs. 

Our customers run the gamut from small, medium to enterprise. 

I rate Barracuda Web Application Firewall as an eight or nine out of ten. 

Our customers value the solution's simplicity. 

Occasionally, upon installation of the Energize Updates, the plans will go off track, something which necessitates us calling up their support team for another update. 

The frequency of the release of the updates is also an issue. In the production environment, Firmware cannot be frequently updated. It would be better if their updates would be released annually. 

We have been dealing with Barracuda Web Application Firewall for more than four years.

The solution is stable.

The solution is scalable. 

Our experience with technical support has been very positive. 

The initial setup is easy.

While I would have to check on the price of the solution, I feel it to be okay and it matches the market price.

F5, Imperva and RedBear are the main competitors of Barracuda in our area.

I do not know if they possess certain features which Barracuda Web Application Firewall lacks. I would have to check. 

I would recommend the solution to someone looking for a new web application firewall.

I rate Barracuda Web Application Firewall as an eight out of ten. I do not give the product a higher rating because there are other solutions in Sri Lanka of which the vendors are aware through the Gartner Reports. I believe the solution is not not counted amongst the Gartner leader Quadrant.

We primarily use this solution for security purposes. We use it as a firewall.

The interface is great. It's one of the most valuable aspects of the solution. 

The visibility we are able to achieve is quite good. 

The traffic monitoring is very helpful and the URL filtering has been excellent.

Even when we were upgrading to a new OS, we didn't have any difficulties with the product. The stability is good.

We have found that the technical support is very good.

The pricing of the product isn't overly expensive. 

While the UI is good, it can get a little bit complicated. It's not like Next-Gen Firewalls. I need to remember all of the tabs. The sub-tabs should be at the right as they are in the Next-Gen. Mostly, Next-Gen firewalls have everything on the left panel and it will reappear. It would be nice if there was a little more consistency.

I only really have one year of experience with the solution. Therefore, it's hard to discuss missing features. I need more time to explore the product first. 

I have been using the solution for one year.

We haven't had any issues with the stability or the performance, even when switching to a new OS. It's reliable. There are no bugs or glitches. It doesn't crash or freeze. 

While the solution may be scalable, I don't have enough background to really comment. I haven't been involved in scaling. 

Technical support is quite good. That's the main reason everyone is shifting to Barracuda.

It's from India. I'm in the Middle East. Even though the product is from the UAE, the Middle East, the support is from India. They have good engineers that are well-trained. That said, if you need an L3 issue resolved, those engineers are from other regions. Typically an Indian tech will communicate with the other region directly. The support in the case of L3s likely comes from Europe. In any case, everyone is very helpful and responsive, and we are satisfied with the level of support.

The initial setup is not overly complex or difficult. It's easy enough to execute. That said, the burden has to be getting a bit of the knowledge in regards to routing. That's a tricky area. However, it's pretty much the same as a Next-Gen Firewall configuration.

The pricing is okay, however, there are a few other competitors that are a little bit lower. It's still reasonable. 

I'm an end-user and a customer. 

I would rate the solution at an eight out of ten. Sometimes the solution can be tricky around filtering, which is why I don't give it perfect marks.

Our clients are using the solution for internal banking software and website protection.

Barracuda Web Application Firewall provides optimized performance, a user-friendly environment, helpful dashboards, and is simple to use.

I have been using this solution for approximately three years.

The solution has been stable in our experience.

We have four clients using the solution.

The technical support is very good. They were responsive and provide one of the best support in the market. They will assist you with any issues you might be facing.

The installation was straightforward.

The price of the solution is a little expensive. There is a license for this solution and it can be purchased every one, two, or five years.

I have evaluated other solutions.

I would recommend this solution to others.

I rate Barracuda Web Application Firewall an eight out of ten.

Typically these web application firewalls act as an additional layer primarily for traffic. The web application firewalls are more of a safeguard if a company still has legacy technologies, for which they don't have the patches. It's basically used for the protection and security of web applications.

The solution has been quite stable. It's reliable.

The initial setup is mostly straightforward.

I wouldn't say that the solution is flexible. The technology is moving towards having the firewall, which is distributed to each workload, rather than having a static firewall pertaining to a particular application or a cohort of applications. There are other solutions that are much more flexible in this regard. VMware, for example, gives good flexibility in this regard.

The solution needs to leverage some additional features to a broader scale of software-defined networks.

Given the distributed computing and decentralized architecture with people working in hybrid modules, there'll be lesser and lesser control. People would like to have, for example,  edge computing, et cetera, which is going to be the future for computing. Hence every organization would like to scale the design to the extent where they would like to have their defenses also go along with their workloads. 

If, for an SDN, I need to go to VMware, and, for WAF, I need to go to Barracuda, or different other firewalls, the company is losing market share. They need to increase flexibility, agility, scaling, et cetera, as that is going to be the new normal, maybe in the next two to five years. 

We've been using the solution for close to two years at this point.

The solution is quite stable. There are no bugs or glitches. It doesn't crash or freeze. It's reliable.

I'm not sure about the scalability. I would need to explore it more. The most scalable products are likely VMware's NSX, as it is a company that's bit on cloud migration cloud transformation strategies. They'd like to ensure their workloads are safe and secure. I don't see this in traditional RAFs or even firewalls. 

It's difficult to found how many users are on the solution at this time as we use multiple web application firewalls on different applications. It is not every application however, there would be certain applications that would have a WAF. Likely, it's around 10,000 users across applications.

We do plan to continue to use the solution into the future.

We haven't really had to engage with technical support. I can't speak to how helpful or responsive they are in general.

We did use a different solution before switching to Barracuda. Typically, we run a POC first before moving onto anything new, which is what happened in this case.

The initial setup is pretty straightforward. However, it does help to have some depth of knowledge with the solution. 

I cannot recall the exact amount of time the deployment took.

While I don't have dedicated staff on the solution to handle maintenance, I have about six people on my team that can cover whatever needs to be done when something arises.

Licensing is something the procurement team takes care of. I don't have any insights in terms of the licensing agreement or costs that may be involved.

We are customers and end-users.

Typically, we keep updating our infrastructure, and therefore, we are likely using the latest version of the solution, however, I do not have the version number on-hand.

I would recommend the solution to other organizations.

Overall, we've been quite satisfied with the capabilities of this product. I would rate it at an eight out of ten.

We use Barracuda for all the cloud applications in Azure. 

We use Barracuda to protect the application. That's the main feature we use it for. 

Sometimes when we put it in action, we have some blogs that appear as false positives. I think that it's improving. Barracuda should minimize false positives. 

They should make it easier to learn how to use applications. 

I have been using Barracuda Web Application for five years. 

The stability is okay. We haven't had any issues with stability. 

We don't really scale it. We have around 500 users. 

We don't have issues with support. I had an issue with the console where I could not access the console from the inside network. When I accessed it from the inside network, they kicked me. I opened the case with support, we checked the perimeter firewall, and we tried to fix the problem, but it's still the problem.

Support wants me to check the firewall. I checked the administrator for the perimeter firewall and put all the rules for the communication but they told me to upgrade the version. I did and the problem still persisted.

I would rate their support an eight out of ten. 

We had a partner who did the installation. 

I would rate Barracuda an eight out of ten. 

The solution is our WAF for Azure. It is for operation for Transit CAS applications.

We primarily use the solution for the protection of the active WAF. It offers quite good security.

The solution is stable.

The initial setup is pretty straightforward, especially if you enlist assistance.

We've had some blocks of the application and some false positives. Barracuda needs to ensure there are fewer false positives in general. There also needs to be less of a learning curve on the application in general. That might help us eliminate false positives as well. Basically, they need to help new users better learn and understand the solution.

I have an issue with the console currently. I cannot access the console from inside the network. When I access the entire network, it kicks me off all the time. I opened a case with technical support. We've checked the firewall the perimeter firewall, and we've tried to fix that problem, however, it's still the problem. I have to access the console from outside all the time to this day.

I've been using the solution for a while now. It's been about five years.

The stability is okay. We don't have issues with the reliability of Barracuda. There aren't bugs or glitches. It doesn't crash or freeze at all. I'd describe it as stable for the most part.

The scalability may be okay. However, we have only one Barracuda gateway. We don't really need to scale the solution fight now.

We might have about 500 users within our company using the solution right now.

I've reached out to technical support in relation to a console problem and they have yet to fix the issue for us. All they've done is told me to check the firewall, which I have, and to install a new version. I upgraded the version, however, the issue persists. They haven't been extremely helpful and I'd have to say that I am disappointed with their level of service so far.

Overall, I would rate the support at an eight out of ten.

We also use Imperva. We use both solutions at once.

I'm not the administrator of the installation process. Therefore, it's hard for me to say if it was difficult or complex. I can't really comment on the initial implementation.

That said, it's my understanding, from talking to the administrator in the past, that it wasn't too complex.

I'm not sure how long the deployment took. I only really deployed the last application protection.

We had the support of the partner for the implementation, which helped iron out any difficulties.

We're just a transportation company. We're a customer. We don't have a business relationship with Barracuda.

I recommend the solution to other organizations for protecting applications specifically in Azure.

Overall, I would rate the solution at a nine out of ten.