Try our new research platform with insights from 80,000+ expert users

AWS WAF vs NetScaler comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare Web Application ...
Sponsored
Ranking in Web Application Firewall (WAF)
5th
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
24
Ranking in other categories
No ranking in other categories
AWS WAF
Ranking in Web Application Firewall (WAF)
2nd
Average Rating
8.0
Reviews Sentiment
7.6
Number of Reviews
59
Ranking in other categories
No ranking in other categories
NetScaler
Ranking in Web Application Firewall (WAF)
14th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
107
Ranking in other categories
Application Delivery Controllers (ADC) (1st), Network Management Applications (6th)
 

Mindshare comparison

As of August 2025, in the Web Application Firewall (WAF) category, the mindshare of Cloudflare Web Application Firewall is 7.3%, up from 6.5% compared to the previous year. The mindshare of AWS WAF is 8.9%, down from 13.1% compared to the previous year. The mindshare of NetScaler is 3.3%, down from 3.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF)
 

Featured Reviews

SachidDoshi - PeerSpot reviewer
Offers a huge signature repository and is superiorly effective in mitigating DDoS attacks
The solution's learning curve can still be further reduced, which presently stands at two or three months. The product has a custom rule set that users can modify and manifest as needed. The vendor can probably shorten the learning curve using cutting-edge technologies like AI. The solution provider can also work around the web applications and identify the toolset that needs to be implemented to deploy the solution in less time. The vendor has launched a SASE product that can function with Cloudflare Web Application Firewall, but many improvements are needed in terms of features, such as the web filtering feature, and CASB has not yet been added.
Kavin Kalaiarasu - PeerSpot reviewer
AWS's cloud-native security simplifies rule enforcement but needs better DDoS integration
The dashboarding could be improved, and the default metrics provided by AWS WAF could be upgraded. The rate at which AWS updates their managed rule sets could be better. Features like bot protection or DDoS mitigation, available with other WAF vendors, do not come natively with AWS WAF. Instead, they are part of AWS Shield. Providing DDoS protection as part of their WAF solution would be beneficial.
DEMİRHAN ÇAVUŞOĞLU - PeerSpot reviewer
A tool for centralized management including inventory and sales tracking
Citrix ADM has the ability to implement policies to tighten security. For instance, you can restrict access to your network from outsiders or lack necessary security measures such as antivirus programs. Additionally, there's the Delivery Controller, which allows for comprehensive monitoring and management tasks such as remote restarts, maintenance, and registration. Another essential component is the Director, which provides detailed insights into sessions, including identifying session failures, connection issues, user lockouts, etc. It presents a list of problems to address, enabling you to click on them and resolve them efficiently.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product has improved our security posture by blocking bad actors."
"There is a huge signature repository"
"The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10."
"It is configurable via API."
"Technical support has a very fast response time and they are helpful."
"The solution protects our application, which runs on the HTTP protocol, from DDoS attacks."
"Some of the most valuable features of Cloudflare Web Application Firewall include its DNS zone setup and the zero trust policy."
"The rate limiting features and customizations in terms of URL match and applying policies are valuable to me."
"AWS WAF is something that someone from a cloud background or cloud security background leverages. If they want to natively use a solution in the cloud, AWS WAF comes in handy. It's very useful for that, and the way we can fine-tune the WAF rules is also nice."
"We do not have to maintain the solution."
"The interface is good."
"The agility is great for us in terms of cloud services in general."
"Stable and scalable web application firewall. Setting it up is straightforward."
"It is Amazon. Everything is scalable. It is beyond what we need."
"Their technical support has been quite good."
"We can host any DB or application on the solution."
"The solution's technical support is good."
"Most of the functions are user-friendly and great."
"Unified Gateway allows me to provide secure external access to applications for suppliers and customers while requiring Multi-Factor Authentication."
"Content Switching provides flexibility for routing traffic as desired to designated real servers. It also provides good geo capabilities through its GSLB feature."
"The load balancing feature and the fact that you can do context switching in the WAF are the most valuable. We majorly use it for load balancing, but we also use it for context switching in the WAF. It is also robust and very easy to work with and manage."
"It is the best product out there."
"Load balancing, cache redirection, content switching, all connected with traffic management."
"One of its most valuable features is fundamental load balancing, supporting both basic load balancing and database teams."
 

Cons

"They need to improve their support because getting a response for basic requests took around 48 hours, which is too long."
"A key challenge arises when dealing with numerous integrations with HVAC systems. Depending on the specifics, there might be some configuration mismatches, which necessitate specific support."
"Cloudflare Web Application Firewall should include port forwarding features."
"The blocked logs are difficult to read at times."
"The accuracy of the Cloudflare Web Application Firewall could be improved by reducing the number of false-negative alerts."
"The product can improve by having more multitenancy capability, which is currently not available."
"The reporting could be more granular."
"There could be an option to duplicate the cluster to maintain the consistency of rules."
"The solution can improve its price."
"We don't have much control over blocking, because the WAF is managed by AWS."
"In a future release of this solution, I would like to see additional management features to make things simpler."
"The solution could improve by having better rules, they are very basic at the moment. There are more attacks coming and we have to use third-party solutions, such as FIA. The features are not sufficient to prevent all the attacks, such as DDoS. Overall the solution should be more secure."
"An improvement area would be that it's more of a manual effort when you have to enable rules. That's one of the downsides. If that can be done in an automated way, it would be great. That's a lagging feature currently."
"The rate at which AWS updates their managed rule sets could be better. Features like bot protection or DDoS mitigation, available with other WAF vendors, do not come natively with AWS WAF."
"They should make the implementation process faster."
"They have to do more to improve, to innovate more features. They need to increase the security. It has to be more active in detecting threats."
"Citrix should offer a demo or free-trial version of NetScaler. Several other vendors do, but Citrix does not. Pricing should also be more readily available."
"This is an expensive solution."
"It can be difficult to setup."
"The solution can improve their support and send tickets directly to a Citrix ADC engineer in order to avoid having to escalate each support call."
"The reporting is not so good. They don't have an application to connect the logs."
"The solution's pricing is a big concern and should be improved."
"Needs configuration processes like disabling LB VIPs, automatically disabling the IPs used."
"Citrix Web App and API Protection could improve in the area of licensing"
 

Pricing and Cost Advice

"What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."
"It starts at $20 and can easily go up to $200 monthly"
"The solution's pricing option needs to be more transparent for enterprise clients."
"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."
"Cloudflare Web Application Firewall is more affordable than other solutions."
"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."
"The annual licensing fee is $10,000 USD."
"It is not too pricey."
"It's an annual subscription."
"I would rate AWS WAF's pricing a seven out of ten."
"AWS WAF costs $5 monthly plus $1 for the rule. It's cheap, cost-wise. It's worth the money."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven or eight out of ten."
"The solution is affordable."
"Its price is fair. There is a very fair amount that they charge. It has a pay-as-you-go model, so it pretty much depends on how much a user uses it. As per the cloud norms, the more you use, the more you pay. I would rate it a five out of ten in terms of pricing."
"You need an additional AWS subscription for this product if you are buying a managed tool."
"It has a variable pricing scheme."
"Citrix NetScaler's pricing is slightly above average but not overly expensive. I would consider F5 BIG IP to be the most expensive, Citrix NetScaler to be the second most expensive, and then Kemp Load Balancer to be the third."
"The solution's pricing is very high compared to its competitors."
"Licensing is adequate. I wanted to have a more prominent license, but until I do they don't give enough support. The additional cost would be too much."
"The licenses for this product are payable as a yearly subscription, and carry a high price-point. The subscription scheme is quite complicated, and costs will increase with each additional feature that is required, outside of the basic setup."
"The tool is cheap."
"It's an expensive product but it works well."
"You get the value for your money. There aren't any hidden fees."
"The price for Citrix ADC here in Mexico was good, when you compare it with F5 and Radware."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
864,574 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
9%
Comms Service Provider
8%
Manufacturing Company
7%
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
8%
Government
6%
Computer Software Company
15%
Financial Services Firm
10%
Government
10%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cloudflare Web Application Firewall?
The product has a valuable security control functionality.
What needs improvement with Cloudflare Web Application Firewall?
I cannot say much about areas of improvement for Cloudflare Web Application Firewall because I haven't gone through d...
What are the limitations of AWS WAF vs alternative WAFs?
Hi Varun, I have had experienced with several WAF deployments and deep technical assessments of the following: 1. Im...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft...
What do you like most about AWS WAF?
The most valuable feature of AWS WAF is its highly configurable rules system.
What do you like most about Citrix ADC?
The most valuable feature for us is the application firewalling in Citrix NetScaler, ensuring only valid traffic ente...
What is your experience regarding pricing and costs for Citrix ADC?
After deployment, Citrix Netscaler shifted to a subscription-based license scheme for support, which is slightly more...
What needs improvement with Citrix ADC?
Citrix NetScaler is a robust product, but mastering it requires significant learning and training due to its complexi...
 

Also Known As

Cloudflare WAF
AWS Web Application Firewall
Citrix ADC, Citrix NetScaler VPX, NetScaler Console, NetScaler Web Application Firewall
 

Overview

 

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk
eVitamins, 9Splay, Senao International
ABB Schweiz, Aer Lingus, AIDS Healthcare Foundation, Amnet Technology Solutions, Aramex International, Ascenty, Atos, Autodesk
Find out what your peers are saying about AWS WAF vs. NetScaler and other solutions. Updated: July 2025.
864,574 professionals have used our research since 2012.