Try our new research platform with insights from 80,000+ expert users

Azure Web Application Firewall vs Microsoft Entra ID Protection comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.0
Azure WAF cuts costs, eliminates third-party needs, improves ROI, meets security requirements, and offers reliable, favorable protection.
Sentiment score
7.1
Microsoft Entra ID Protection offers quick ROI, valued for time-saving features despite high costs, enhancing organizational manageability.
AI-based recommendations save on time and money.
Recently, they have been under serious attack with major exploits, such as Log4j, affecting Fortinet and Palo Alto, and even Cisco and VMware.
There is a return on investment in terms of time-saving, control, and ease of manageability of the environment.
 

Customer Service

Sentiment score
7.1
Azure Web Application Firewall support varies; premium plans offer better service, while others find self-reliance sufficient.
Sentiment score
6.1
Microsoft Entra ID Protection support is generally responsive, but efficiency varies, with better experiences linked to paid options.
I hardly use Microsoft's paid subscription or maintenance services, however, whenever I send them a note, they have been responsive.
I am very satisfied with the response from Microsoft dedicated architects if it happens that I have to call for their support.
Tickets often bounce from person to person, requiring the sharing of information multiple times.
They often refer to internal blogs, which doesn't offer much new information and can limit our capabilities in troubleshooting.
My teammates have had good communication with Microsoft.
 

Scalability Issues

Sentiment score
7.6
Azure Web Application Firewall offers flexible scaling options, dependent on subscription, with high ratings for managing large deployments.
Sentiment score
8.6
Microsoft Entra ID Protection efficiently scales across company sizes, with flexibility and high user ratings in scalability despite occasional delays.
Some Azure applications, like the web application firewall, require a certain level of SKU for hosting setup.
Since it is a cloud computing product, it can accommodate a range of company sizes, from a few users to large businesses.
 

Stability Issues

Sentiment score
8.0
Azure Web Application Firewall is stable and reliable, with rare performance issues, mainly solved by system restart.
Sentiment score
8.0
Microsoft Entra ID Protection is stable and reliable with minor bugs, earning user confidence and high stability ratings.
Very rarely do I see any latency issues.
 

Room For Improvement

Azure WAF needs improvements in management, deployment simplicity, affordability, IP support, and comprehensive documentation for better user experience.
Microsoft Entra ID Protection aims to enhance identity management, improve performance, and simplify integration while addressing stability and pricing issues.
Upgrading the platform regularly is necessary for security, however, frequent updates every six months or year from Azure can be a maintenance overhead.
Microsoft has not offered control over how they calculate high or low-risk scenarios.
Identity protection and trust issues, particularly in hybrid environments, could be addressed better with Microsoft Entra ID Protection.
There is no write-back feature from the cloud to local, which would allow me to use my own credentials from the cloud tenant securely.
 

Setup Cost

Enterprise users find Azure Web Application Firewall cost-effective and straightforward compared to AWS and GCP, especially in Brazil.
Microsoft Entra ID Protection is competitively priced, though licensing is complex; bundled options offer added MFA and SSO features.
It is even a lower cost compared to AWS and GCP.
Sometimes, when opting for a higher SKU, it's not the WAF itself that's costly but the additional requirements.
Entra ID Protection is not badly priced, but some clients, especially in medium to smaller scale companies in third-world countries, find it quite expensive.
The pricing for Microsoft Entra ID protection is not expensive.
Microsoft Entra ID requires additional licensing components.
 

Valuable Features

Azure Web Application Firewall offers scalable, easy-to-configure protection with flexible pricing, enhancing security against DDoS and unauthorized access.
Microsoft Entra ID Protection boosts security and efficiency with advanced features, Azure integration, and user-friendly interfaces for identity management.
With Microsoft, everything is within a single suite, making it easier to configure and plan.
It is almost impossible to access these assets from outside, requiring a very skilled attacker to obtain asset tokens of a customer using Azure.
Having a single sign-on feature with Entra ID ensures seamless access to various applications, even those with significant security constraints.
These features ease the job of security analysts, providing a better vision of user activities and potential risks.
The push for passwordless operation is successful with Microsoft Entra ID Protection.
 

Categories and Ranking

Azure Web Application Firewall
Ranking in Microsoft Security Suite
20th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
13
Ranking in other categories
Web Application Firewall (WAF) (12th)
Microsoft Entra ID Protection
Ranking in Microsoft Security Suite
9th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
17
Ranking in other categories
Identity Management (IM) (7th), Identity Threat Detection and Response (ITDR) (1st)
 

Mindshare comparison

As of June 2025, in the Microsoft Security Suite category, the mindshare of Azure Web Application Firewall is 1.9%, down from 2.0% compared to the previous year. The mindshare of Microsoft Entra ID Protection is 4.4%, up from 4.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

Mano Senaratne - PeerSpot reviewer
Comprehensive suite simplifies configuration while frequent updates require management
Mainly, it comes with the complete suite of Microsoft services. I can use it in conjunction with the best options and other features that come with it. Configuration is much easier than using different platforms. For example, if I have hosted the application in AWS and am using the Application Firewall from Azure, there are certain additional steps to follow when configuring them. With Microsoft, everything is within a single suite, making it easier to configure and plan. Azure continually upgrades platforms and sends us messages to upgrade to the next version, simplifying the process. Later, it's much easier if I want to upgrade the software platform, scale it, or move it to a different application host as the whole suite comes together. The return on investment is good. If I am doing applications for clients, I can invoice them for better costs. Most applications that I run and use have a better return on investment.
Mahender Nirwan - PeerSpot reviewer
Access to other software is just one click away and suitable for big organizations
Currently, we have limited use of Microsoft AD. We only use it to see if user blocks are available. If they are, we unblock the account and get access accordingly. AD has paid access control features. We can add access control over AD. For example, for documentation, we use an Outline tool. It's open source, and we add our company's knowledge base to it. It's an alternative to Confluence. We don't want everyone to have access to all documentation. If I create documentation for my team, only my team should have access, not support or sales. We can add these scopes or access controls over AD. Once integrated, the person will get the appropriate access control features upon logging in. Role-based access control is a great feature of Active Directory.
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
856,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Financial Services Firm
12%
Manufacturing Company
11%
Government
7%
Computer Software Company
17%
Financial Services Firm
14%
Government
9%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Web Application Firewall?
The pricing is okay at the moment. Sometimes, when opting for a higher SKU, it's not the WAF itself that's costly but the additional requirements. A higher SKU application hosting platform adds to ...
What needs improvement with Azure Web Application Firewall?
While using it, I identified certain areas where it would have been good to have additional features. Right now, I can't recall any specific instances. Seamless integration is good, yet having mult...
What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
The pricing for Microsoft Entra ID protection is not expensive. It varies based on the company's size and quality.
What needs improvement with Azure Active Directory Identity Protection?
I have set up my Active Directory locally for the same domain. However, Entra ID lacks a function to synchronize from the cloud to the local directory. This is a significant issue since there is no...
 

Also Known As

No data available
Azure Active Directory Identity Protection, Azure AD Identity Protection
 

Overview

Find out what your peers are saying about Azure Web Application Firewall vs. Microsoft Entra ID Protection and other solutions. Updated: April 2025.
856,873 professionals have used our research since 2012.