Try our new research platform with insights from 80,000+ expert users

Cloudflare Web Application Firewall vs Microsoft Azure Application Gateway comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 20, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
75
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Cloudflare Web Application ...
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
23
Ranking in other categories
Web Application Firewall (WAF) (7th)
Microsoft Azure Application...
Average Rating
7.2
Reviews Sentiment
6.8
Number of Reviews
47
Ranking in other categories
Application Delivery Controllers (ADC) (4th), Web Application Firewall (WAF) (3rd)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
SachidDoshi - PeerSpot reviewer
Offers a huge signature repository and is superiorly effective in mitigating DDoS attacks
The solution's learning curve can still be further reduced, which presently stands at two or three months. The product has a custom rule set that users can modify and manifest as needed. The vendor can probably shorten the learning curve using cutting-edge technologies like AI. The solution provider can also work around the web applications and identify the toolset that needs to be implemented to deploy the solution in less time. The vendor has launched a SASE product that can function with Cloudflare Web Application Firewall, but many improvements are needed in terms of features, such as the web filtering feature, and CASB has not yet been added.
Shehzad Ali - PeerSpot reviewer
Offers time and cost savings with integration, but user interface needs improvement
We are using it for our internal application development. We are testing those features of application gateways. We are integrating it with our solutions, application, Azure Application Gateway Microsoft has a vast variety of tools, and it blends very well. It provides a range of services, so it…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs."
"Cloudflare consolidates various capabilities into one product, streamlining processes."
"The UI is good."
"The DDoS protection is the most valuable aspect of the solution."
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host."
"The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
"The rate limiting features and customizations in terms of URL match and applying policies are valuable to me."
"The Cloudflare Web Application Firewall's most valuable feature is its ease of configuration."
"We like that there's load balancing, firewall capabilities, DDoS protection, et cetera, all covered by Cloudflare."
"It is a SaaS solution unlike much of the competition."
"The security features are valuable. The particular feature we use is called OWASP."
"It protects web applications efficiently."
"The product has improved our security posture by blocking bad actors."
"The product has a valuable security control functionality."
"WAF feature replicates the firewall."
"It has a filter available, although we are not currently using it because it is not part of our requirements. But it is a good option and when it becomes part of our requirements we will definitely use it."
"The product's initial setup phase was easy."
"The load balancing features are valuable."
"Application Gateway automatically redirects unwanted users and takes care of the security aspect. It also handles the performance side of things, which is why we use it."
"The most valuable feature of the solution is the web application firewall (WAF)."
"The solution is easy to set up."
"Using policies to link and manage these URL-based routing configurations is also valuable."
 

Cons

"The integration of LLMs on the dashboard is something that is needed in the tool."
"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"Cloudflare could be improved by introducing a mid-tier pricing option."
"In the last two years, there has been a certain amount of downtime when using the VDM."
"For large enterprises, the pricing is okay. However, the enterprise price for small projects is a bit high. A mid-tier pricing option would be beneficial."
"There should be a specific price list for enterprise-level customers."
"The solution could work at being less expensive. It costs a lot to use it."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"Cloudflare Web Application Firewall should improve visibility for a customer."
"The ModSecurity core rules need to be updated."
"We have noticed some latency when the call goes through the firewall. That could be improved."
"If they add logs history within the Cloudflare offering, that would be a great benefit."
"The product can improve by having more multitenancy capability, which is currently not available."
"The notification part could be improved. It's very much connected to Web Application Firewall, rate-limiting, and DDoS protection."
"Its stability could be better."
"Their documentation could be better. They don't have documentation that explains everything well. They have documentation for everything you're looking for, but they lack a single piece of documentation to tie everything together. As a new user or beginner, it took us a little bit of time to figure out how to put all these things in place."
"The security of the product could be adjusted."
"The product could be easier to use and implement."
"The user interface could be better."
"Microsoft Azure Application Gateway could improve by allowing features to use more third-party tools."
"Implementing and standardizing the solution across the IT landscape in a heterogeneous environment is painful."
"The solution doesn’t support wildcard-based and regular expression-based rules."
"The pricing of the solution could be improved. Right now, it's a bit expensive."
"The tool is a pain to deal with when it comes to the area of configuration."
 

Pricing and Cost Advice

"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"We are using the free tier of the solution."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The tool is a premium product, so it is very expensive."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"A free version of the solution is available."
"It starts at $20 and can easily go up to $200 monthly"
"The solution's pricing option needs to be more transparent for enterprise clients."
"We pay $210 per month for CloudFlare WAF."
"It is not too pricey."
"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."
"Cloudflare offers different types of subscriptions for businesses, enterprises, and personal users, and the pricing is negotiable."
"The annual licensing fee is $10,000 USD."
"The solution is expensive."
"I rate the price of Microsoft Azure Application Gateway an eight out of ten."
"The product is not expensive."
"Between v1 and v2, there is a lot of change in the pricing. It is very costly compared to AWS."
"The solution is fairly priced."
"The solution is paid monthly. The solution is highly expensive."
"I rate the pricing seven out of ten because some third-party solutions are even costlier than this."
"There is a need to pay a fixed price per month to use the product. There are no additional payments to be made to Microsoft apart from the charges paid towards the monthly licensing costs attached to the solution."
"Regarding pricing for Azure Application Gateway, I would rate it at seven."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
849,686 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
17%
Computer Software Company
14%
Comms Service Provider
9%
Financial Services Firm
8%
Educational Organization
22%
Computer Software Company
14%
Financial Services Firm
8%
Manufacturing Company
6%
Computer Software Company
16%
Financial Services Firm
12%
Government
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Cloudflare Web Application Firewall?
The product has a valuable security control functionality.
What is your experience regarding pricing and costs for Cloudflare Web Application Firewall?
Cloudflare is cheaper compared to Azure WAF, which I have considered before.
What needs improvement with Cloudflare Web Application Firewall?
The product can improve by having more multitenancy capability, which is currently not available. This improvement wo...
What's the difference between Azure Front Door and Application Gateway?
We found Azure Front Door to be easily scaled and very stable. The implementation is very fast and Microsoft provides...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft...
What do you like most about Microsoft Azure Application Gateway?
Application Gateway automatically redirects unwanted users and takes care of the security aspect. It also handles the...
 

Also Known As

Cloudflare DNS
Cloudflare WAF
Azure Application Gateway, MS Azure Application Gateway
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
crunchbase, udacity, marketo, okcupid, zendesk
Lilly, AccuWeather, AIRFRANCE, Honeywell
Find out what your peers are saying about Cloudflare Web Application Firewall vs. Microsoft Azure Application Gateway and other solutions. Updated: April 2025.
849,686 professionals have used our research since 2012.