We performed a comparison between Azure Firewall and Azure Web Application Firewall based on real PeerSpot user reviews.Find out in this report how the two Microsoft Security Suite solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
"Among the most valuable features are the DDoS protection that protects your virtual machines, the threat intelligence, and traffic filtering."
"Azure's cost-effectiveness is its major advantage."
"It is easy for me to protect certain ports or even the IP addresses, as well as do whitelisting, blacklisting, and the FQDN when we want virtual machines connected and to protect certain websites."
"The most valuable feature is threat intelligence. It is based on filtering and can identify multiple threats."
"Performance and stability are the key features of this product."
"The feature that I have found the most valuable is the control over the network permissions and the network."
"One of the notable advantages of Azure Firewall is its user-friendly interface, which closely resembles or shares similarities with other Azure components."
"The SIEM that Azure Firewall provides us is very robust."
"It's quite a stable product and works well with Microsoft products."
"Azure WAF is extremely stable."
"We have found the most valuable features to be the web application, minimal skills required for management, control through policies, and automation."
"The solution has good dashboards."
"The most valuable feature is that it allows us to publish our applications behind the firewall."
"The initial setup is easy and straightforward...Azure Web Application Firewall is a scalable product."
"It has been a stable product in my experience."
"It's a good option if you want a solution that's ready to go and easy for your team to learn. It's cloud-based, so you don't need to buy or maintain any hardware infrastructure."
"Azure should be able to work better as a balancer also, instead of just being a firewall. It should have a wider mandate."
"It has fewer features than you can get from other firewalls, like anti-spam and anti-phishing. Those kinds of things are not included. It only includes IDS and IDB."
"Azure Firewall should have a free trial version for new users so that they can evaluate it before deploying it."
"The interface could be improved, it's not very user friendly."
"Azure Firewall definitely needs a broader feature base. It should be able to go all the way up to layer 7 when looking at applications and things like that."
"Azure Firewall has limited visibility for IDPS, no TLS inspection, no app ID, no user ID, no content ID, no device ID. There is no antivirus or anti-spyware. Azure Firewall doesn't scan traffic for malware unless it triggers an IDPS signature. There is no sandbox or machine learning functionality, meaning we are not protected from Zero-day threats. There is no DNS security and limited web categories."
"For large organizations, a third-party firewall would be an added advantage, because it would have more advanced features, things that are not in Azure Firewall."
"Right now, with Azure Firewall, we cannot have a normal inbound traffic flow. For inbound, Microsoft suggests using application gateways, so the options are very limited. I cannot use this firewall as an intermediate firewall because of the limitations, and I cannot point routing to another firewall. So if I want to use back-to-back firewall architecture in my environment, I cannot use Azure Firewall for that type of configuration either."
"There is a need to be able to configure the solution more."
"From a reporting perspective, they could do more there."
"The documentation needs to be improved."
"The support for proxy forwarding could improve."
"The management can be improved."
"Azure WAF should not be deployed in the middle of the traffic."
"In Brazil, we have some problems with the phone service that affect our connection with the cloud. However, it isn't common."
"Deployment should be simplified so that a non-techie can handle it."
Azure Firewall is a user-friendly, intuitive, cloud-native firewall security solution that provides top-of-the-industry threat protection for all your Azure Virtual Network resources. Azure Firewall is constantly and thoroughly analyzing all traffic and data packets, making it a very valuable and secure fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability. Azure Firewall allows users to create virtual IP addresses and provides for secure DDoS protection for the virtual machines on your network. It also provides fast and efficient east-west and north-south traffic security.
Azure Firewall is a managed, cloud-based network security service built to protect your Azure Virtual Network resources. It is a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.
Azure Firewall has two significant offerings, Standard and Premium.
Azure Firewall Standard works directly with Microsoft Cyber Security and supplies excellent L3-L7 filtering and threat awareness. The proactive real-time threat awareness will quickly alert you and immediately deny all traffic to and from any known problematic or suspicious domains or IP addresses. Microsoft Cyber Security is updated continually to protect against all new and known potential threats at all times. To learn more about Azure Firewall Standard, click here.
Azure Firewall Premium provides everything the standard version does, and additionally adds extra levels of data encryption, network intrusion detection, extended URL filtering, and Web category filters. To learn more about the added features of Azure Firewall Premium, click here.
Key Benefits and Features of Azure Firewall:
What our real users have to say:
Many PeerSpot users found Azure Firewall to be very user-friendly and easy to use. They liked that it offers seamless integration to the cloud and were especially pleased with the threat filtering options.
Regarding integration and threat intelligence, our users wrote:
Azure Web Application Firewall (WAF) provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit commonly known vulnerabilities. SQL injection and cross-site scripting are among the most common attacks.
To learn more about our solution, ask questions, and share feedback, join our Microsoft Security, Compliance and Identity Community.
Azure Firewall is ranked 11th in Microsoft Security Suite with 11 reviews while Azure Web Application Firewall is ranked 19th in Microsoft Security Suite with 5 reviews. Azure Firewall is rated 7.2, while Azure Web Application Firewall is rated 8.4. The top reviewer of Azure Firewall writes "Made our solution safer, more scalable, but manual configuration for deployment could be better". On the other hand, the top reviewer of Azure Web Application Firewall writes "Fast time to deploy and integrates well into the Azure ecosystem, but is expensive". Azure Firewall is most compared with Fortinet FortiGate-VM, Palo Alto Networks NG Firewalls, Palo Alto Networks VM-Series, Check Point NGFW and Meraki MX, whereas Azure Web Application Firewall is most compared with AWS WAF, Fortinet FortiWeb, Azure Front Door, F5 Advanced WAF and Imperva Web Application Firewall. See our Azure Firewall vs. Azure Web Application Firewall report.
See our list of best Microsoft Security Suite vendors.
We monitor all Microsoft Security Suite reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.