Try our new research platform with insights from 80,000+ expert users

Microsoft Azure Application Gateway vs Wallarm NG WAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (12th)
Microsoft Azure Application...
Average Rating
7.4
Reviews Sentiment
6.8
Number of Reviews
49
Ranking in other categories
Application Delivery Controllers (ADC) (3rd), Web Application Firewall (WAF) (3rd)
Wallarm NG WAF
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
5
Ranking in other categories
Web Application Firewall (WAF) (40th), API Security (13th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
DevenderVannela - PeerSpot reviewer
Ensures efficient traffic management and robust security while simplifying complex configurations
The best features for Microsoft Azure Application Gateway basically protect your application and provide security-related features and also divert the traffic to different instances of your application. I have used URL-based routing, which helps manage traffic efficiency. It is a bit hard to manage in the long run, but it does provide value. I have used the gateway's Web Application Firewall feature, which enhances security as it is the first entry point to your network from the outside world. It helps protect against unwanted requests and other threats that can be configured. Regarding the integration with Azure Active Directory, it helps with authentication processes to configure all the users or the groups. The monitoring capabilities on Azure provide insight into application performance and potential threats because monitoring comes with many products. On Azure, you have Azure Monitor itself to help you monitor the application by collecting data. You have Application Insights and the logging workspace on Azure. By combining these three, you can implement monitoring solutions on Azure applications. Auto-scaling is important because it helps in resource management for customers. Scaling is one of the key features of moving to cloud for any customer. During peak times or special events, such as retail site promotions, user load increases significantly. To address this, based on the number of incoming requests or server capacities such as CPU and memory, you can automatically identify these peak scenarios and configure either scaling up or down automatically based on certain parameters.
it_user796242 - PeerSpot reviewer
Helps us to monitor attacks to our sites and prevents a lot of them
Set up Wallarm as a reverse proxy. Do not replace your web server. Use Wallarm first in monitoring mode, then learn from Wallarm which type of request is false positive and which type of request is not. This process takes a couple of weeks for very highly-loaded web applications (few millions of unique visitors in one month). Then you can turn Wallarm into blocking mode and everything will be fine. Do not forget to build a monitoring system, the wave, and API for it. Before we started using Wallarm, I already knew Ivan (CEO) and Stepan (COO) from a couple of years before. Ivan had his own security company and Stepan was working on a Russian security magazine called Xakep. They told us that they wanted to create a new WAF and already had a working version of it. They asked me to test it. We did tests, and it was really good. After few month after testing, we signed an agreement. Our choice was made not because we knew these guys for a long time, but because the product was really cool and we were glad to start using it as one of the first on the market!

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The UI is good."
"The most valuable feature of Cloudflare DNS is its global reach and it is always evolving."
"I rate its stability a ten out of ten."
"New and innovative way to protect the client's data."
"Easier http to https redirect using page rules"
"It is a stable solution. I rate the stability a ten out of ten...I rate the scalability a ten out of ten."
"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"The overall experience with Cloudflare is positive, with a rating of eight out of ten."
"The security feature in all the layers of the application is the most valuable."
"Microsoft has a vast variety of tools, and it blends very well."
"We can control what rules should be used and what should be disabled."
"The solution integrates different applications and APIs securely, enhancing overall security and network optimization."
"The solution's most valuable feature is an HTTP solution and SSL certificate. It is also easy to use."
"I find Application Gateway’s WAF module valuable because it helps prevent layer 7 attacks."
"Microsoft has a vast variety of tools, and it blends very well."
"The solution is easy to set up."
"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."
 

Cons

"Cloudflare's console should be made more user-friendly."
"Eventually, things go sideways and require fixes when it would have been easier to prevent the issue initially."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"The documentation could improve for Cloudflare DNS."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed. This is what I'd like to improve in Cloudflare."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"It is a bit tricky to configure. You've got to have a very specific format to configure it. They should make it a little bit easier to configure. Mapping the certificates into it isn't easy, and it could be better. Currently, you've to write a bit of automation to pull certificates directly to HTTPS."
"Microsoft Azure Application Gateway is not scalable."
"One of the challenges we faced was the solution does not support any other PCP protocols apart from HTTP and HTTPS."
"Needs easier integration with the existing SIAM."
"The solution needs improvements in integrating different services and creating a better application balance."
"I believe that there is room for improvement in terms of additional functionality. It is an advantage to have features readily available for configuration without needing customer-defined rules."
"The pricing of the solution is a bit high. The solution should offer different pricing systems."
"The tool is a pain to deal with when it comes to the area of configuration."
"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."
 

Pricing and Cost Advice

"So far I use free tier and happy with it. You can subscribe to business package if needed."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"The price is reasonable."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"The product's pricing is cheap."
"The tool is a premium product, so it is very expensive."
"There are no additional costs beyond the standard licensing fees."
"I give the price a five out of ten."
"There is a need to pay a fixed price per month to use the product. There are no additional payments to be made to Microsoft apart from the charges paid towards the monthly licensing costs attached to the solution."
"The price of the solution can be reduced a bit."
"The solution is cheaper than Imperva. I rate it four to five out of ten."
"The solution is paid monthly. The solution is highly expensive."
"Microsoft Azure Application Gateway is expensive."
"I rate the price of Microsoft Azure Application Gateway an eight out of ten."
"The solution is fairly priced."
"The solution is reasonably priced compared to other solutions."
"​Pricing must be cheaper than the competition and the licensing must be good.​"
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
869,566 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
15%
Financial Services Firm
11%
Manufacturing Company
8%
Government
8%
Computer Software Company
15%
Government
13%
Insurance Company
11%
Financial Services Firm
11%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise6
Large Enterprise23
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What's the difference between Azure Front Door and Application Gateway?
We found Azure Front Door to be easily scaled and very stable. The implementation is very fast and Microsoft provides...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft...
What do you like most about Microsoft Azure Application Gateway?
Application Gateway automatically redirects unwanted users and takes care of the security aspect. It also handles the...
Ask a question
Earn 20 points
 

Also Known As

Cloudflare DNS
Azure Application Gateway, MS Azure Application Gateway
Wallarm NG-WAF
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Lilly, AccuWeather, AIRFRANCE, Honeywell
Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.
Find out what your peers are saying about Microsoft Azure Application Gateway vs. Wallarm NG WAF and other solutions. Updated: September 2025.
869,566 professionals have used our research since 2012.