We performed a comparison between Barracuda Web Application Firewall, Checkmarx One, and Loadbalancer.org based on real PeerSpot user reviews.
Find out what your peers are saying about Amazon Web Services (AWS), Microsoft, F5 and others in Web Application Firewall (WAF)."Our customers value the solution's simplicity."
"We run it with no downtime, because it has good support."
"The volumetric DDoS defense is very good because I had a problem with a lot of volumetric DDoS attacks on my servers. After using Barracuda, those attacks have stopped and all the traffic is going smoothly to my servers and the system is working really well."
"The most valuable feature is the automatic content filtering."
"The solution ensures layer seven is secure from attacks."
"The most valuable feature of this solution is the simplicity of configuration."
"One of the strongest points is its robust issue discovery capabilities. Barracuda invests significant efforts in identifying and resolving issues. They have multiple products that work in tandem to perform these checks, which is beneficial because it automates security updates. This is the primary reason I recommend it to my customers."
"Parameter Protection is a valuable feature."
"Less false positive errors as compared to any other solution."
"The best thing about Checkmarx is the amount of vulnerabilities that it can find compared to other free tools."
"It is very useful because it fits our requirements. It is also easy to use. It is not complex, and we are satisfied with the results."
"We use the solution to validate the source code and do SAST and security analysis."
"The user interface is excellent. It's very user friendly."
"The solution is always updating to continuously add items that create a level of safety from vulnerabilities. It's one of the key features they provide that's an excellent selling point. They're always ahead of the game when it comes to finding any vulnerabilities within the database."
"We were using HPE Security Fortify to scan code for security vulnerabilities, but it can scan only after a successful compile. If the code has dependencies or build errors, the scan fails. With Checkmarx, pre-compile scanning is seamless. This allows us to scan more code."
"I like that you don't have to compile the code in order to execute static code analysis. So, it's very handy."
"The load balancers have an easy installation and a relatively simple, easy user interface to use."
"Loadbalancer is easy to use. It performs well, with low latency."
"We now get notifications when pool members go down, and we eliminate our downtime by not sending traffic to downed pool members."
"Existing customers are trying to migrate from the physical F5 load balancer to the AVI load balancer because it is scalable and easily managed."
"The connection that this solution helps our servers maintain has been most useful."
"The features I find valuable in this solution are the ease of managing the logs on the WAFs, the ease to identify break-in attempts into the network, the front-end firewall, and a more specific firewall."
"I found scalability in Loadbalancer.org valuable."
"We can more easily set up a test environment, because you can easily configure your forms. It makes it more flexible for us, to convert our test environment to a production environment, without having to change DNSs on the outside. You just configure the forms on the inside. So without changing the actual endpoint for the end user, we can create completely different networks in the background."
"Sometimes when we put it in action, we have some blogs that appear as false positives. I think that it's improving. Barracuda should minimize false positives."
"It is not stable nor mature."
"It would be better if their updates would be released annually."
"The solution could use more reports."
"We encountered a few glitches while implementing API security features into the product."
"I think the main area for improvement in this product is learning it, as can be seen when comparing it to the F5 web application firewall. F5 has a very powerful learning phase when you start using your web application firewall against your site. Barracuda has something like this, but not with the same functionality from my point of view."
"Barracuda Web Application Firewall's load balancing feature could be improved."
"The GUI needs to be improved because it sometimes hangs and needs to be restarted."
"When we first ran it on a big project, there wasn't enough memory on the computer. It originally ran with eight gigabytes, and now it runs with 32. The software stopped at some point, and while I don't think it said it ran out of memory, it just said "stopped" and something else. We had to go to the logs and send them to the integrator, and eventually, they found a memory issue in the logs and recommended increasing the memory. We doubled it once, and it didn't seem enough. We doubled it again, and it helped."
"It would be really helpful if the level of confidence was included, with respect to identified issues."
"Checkmarx reports many false positives that we need to manually segregate and mark “Not exploitable”."
"The cost per user is high and should be reduced."
"The product can be improved by continuing to expand the application languages and frameworks that can be scanned for vulnerabilities. This includes expanded coverage for mobile applications as well as open-source development tools."
"Updating and debugging of queries is not very convenient."
"With Checkmarx, normally you need to use one tool for quality and you need to use another tool for security. I understand that Checkmarx is not in the parity space because it's totally different, but they could include some free features or recommendations too."
"They can support the remaining languages that are currently not supported. They can also create a different model that can identify zero-day attacks. They can work on different patterns to identify and detect zero-day vulnerability attacks."
"I would like a notification when a new version of the software is available. They told me to sign up for their newsletter, but I have not received any notification for a newer software version."
"They're mostly designed to balance a particular type of traffic. I wanted to load balance DNS, and they just don't do it the way that we wanted to. So they're not used as DNS load balancers."
"We could enhance the security aspects of the load balancer."
"Compared to the physical products, the solution's throughput is a little less."
"Possibly a more graphical overview page (with colors) to give a two second overview to see if everything is working fine."
"I'd like to see scalability improved; it can be costly."
"If I have to say something, I suppose they could add an automated configuration backup to an FTP location (or something similar) so you don’t have to manually do it. I don’t see this as a problem, of course, as the configuration rarely changes and we only need one backup, but maybe for other users that feature would be handy."
"The automatic refresh of the System Overview webpage: It sometimes has an extra webpage reload (after a change) before you see it is executed. This can be confusing."
More Barracuda Web Application Firewall Pricing and Cost Advice →
