Try our new research platform with insights from 80,000+ expert users

NetScaler vs The Fastly Next-Gen WAF (powered by Signal Sciences) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
75
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
NetScaler
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
107
Ranking in other categories
Application Delivery Controllers (ADC) (1st), Network Management Applications (3rd), Web Application Firewall (WAF) (12th)
The Fastly Next-Gen WAF (po...
Average Rating
7.6
Reviews Sentiment
7.1
Number of Reviews
3
Ranking in other categories
Web Application Firewall (WAF) (26th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
DEMİRHAN ÇAVUŞOĞLU - PeerSpot reviewer
A tool for centralized management including inventory and sales tracking
Citrix ADM has the ability to implement policies to tighten security. For instance, you can restrict access to your network from outsiders or lack necessary security measures such as antivirus programs. Additionally, there's the Delivery Controller, which allows for comprehensive monitoring and management tasks such as remote restarts, maintenance, and registration. Another essential component is the Director, which provides detailed insights into sessions, including identifying session failures, connection issues, user lockouts, etc. It presents a list of problems to address, enabling you to click on them and resolve them efficiently.
Archana Heeralal - PeerSpot reviewer
A good solution to implement web application firewall for applications
There are some lags in Signal Sciences for the web application firewalls. Even if we create some custom rules, Signal Sciences cannot capture some of the malicious traffic. There is a little bit of complexity with custom rules that should be removed. Signal Sciences should add a feature called rate limiting with multiple options, wherein I can create a rate limiting based on the cookie request or the IP.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"Its most significant benefit to date is the speed with which it refreshes DNS records on the internet once you change it. If you are changing a website or registering a new record, it is very quick."
"It is easier to configure and develop documentation to see how we have configured firewalls."
"The solution is stable, and the DNS servers are simple to use."
"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"Even when there is a high load on our servers, Cloudflare is able to cache the data and serve it to users, ensuring they can still access the website."
"The most valuable feature is the web application firewall."
"The web application firewall which protects our services on the internet, and then of course services like our ability to provide high availability for the services we are offering are the most valuable features."
"The feature that I have found most valuable is its load balancing."
"HTTP analysis and action. We have a lot of custom web applications that sometimes require custom header insertions. Some of these custom apps are external and, via the content switching, we can use one IP and leverage various back-end web app servers."
"The web application firewalling component is a powerful feature."
"Global load balancing between data centers."
"Most of the functions are user-friendly and great."
"High availability, performance, and security are the main pillars. It enhances the security for accessing the applications."
"The web application firewall is one feature I found valuable in the solution."
"When configuring a web application firewall using Signal Sciences, we configure a rule whereby no one except a few people can access the application."
"Fastly (Signal Sciences) integrates and tags the intermittent traffic based on patterns. It generates signals and provides them in a dashboard where we can view them and decide whether to allow or deny traffic. It's a more advanced and easy-to-navigate dashboard."
"The product's most valuable feature is its ability to set up the rules easily."
 

Cons

"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"There might be helpful if there was some web application firewall feature."
"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"Cloudflare's free plan is limited to 5,000 records for their free plan. They should increase that. For example, if I create a domain called abc.com and a subdomain called a.abc.com, my record count will be two. I can make a maximum of 5,000 subdomains. However, if we use our own DNS hosted on another provider, there is no limit. Their free plan also lacks name server customization."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"Sometimes their more advanced caching tools can cause higher first-byte times and problems with JavaScript."
"The technical support could be better. Whenever I contacted support, I rarely got the solution that we needed. And most of the time, I finished fixing the problem by looking on the internet or by finding documents about the problem on Google."
"An area for improvement in Citrix Web App and API Protection is for it to give real-time notifications and alerts. It would be practical if the solution warns you if there's an attack or if the load or traffic volume increases or decreases. An additional feature I'd like to see in Citrix Web App and API Protection is a prediction or artificial intelligence on what is happening, for example, attacks."
"Its GUI should be improved. Its CLI is powerful, but GUI needs more features."
"We had some bugs in the previous firmware. These were not big issues, but more testing on the firmware would be key to happier customers."
"ADC from Citrix has added functionalities from other products and the usability is very difficult for someone who is used to a simpler user interface, it's a little bit of a mess to use."
"Deployment is complicated."
"The interface could be improved, some customers struggle with that."
"The SLB could be better, and they should improve it."
"The areas that could be improved in Signal Sciences include the effectiveness of rules, as many didn't function optimally and required custom rule-writing to address bypasses for WAF."
"Even if we create some custom rules, Signal Sciences cannot capture some of the malicious traffic."
"Fastly don't support caching for China users. That's the only feature lacking compared to Akamai."
 

Pricing and Cost Advice

"The price is reasonable."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"The price of the solution is expensive."
"I give the price a five out of ten."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"We have been evaluating F5, Citrix, and other ADC products. Citrix is the most expense of all of them."
"F5 BIG-IP is much more expensive than Citrix ADC. For example, If we choose two platforms, Citrix ADC, 3000 version, and we choose F5, F4200 version. F5 BIG-IP has connections, timers, and throughput similar to Citrix ADC, but the price is very expensive."
"You can do CapEx and then a yearly monthly fee, or you can do a subscription model, whether that's one month, month-to-month, or three-year subscription model."
"It all depends on the features that will be used and the number of accesses."
"For the specific use case that my customers primarily engage with, I would give the pricing a rating of seven out of ten."
"Its price is comparable to others and affordable."
"The price for Citrix ADC here in Mexico was good, when you compare it with F5 and Radware."
"The license for Citrix NetScaler is on an annual basis and it is reasonably priced."
"The pricing is 50% less than Akamai."
"Signal Sciences is pretty cheap compared to other solutions."
"The product has an affordable cost."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
849,963 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
17%
Computer Software Company
14%
Comms Service Provider
9%
Financial Services Firm
8%
Computer Software Company
15%
Educational Organization
12%
Financial Services Firm
11%
Government
9%
Educational Organization
18%
Computer Software Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Citrix ADC?
The most valuable feature for us is the application firewalling in Citrix NetScaler, ensuring only valid traffic ente...
What is your experience regarding pricing and costs for Citrix ADC?
After deployment, Citrix Netscaler shifted to a subscription-based license scheme for support, which is slightly more...
What needs improvement with Citrix ADC?
Citrix NetScaler is a robust product, but mastering it requires significant learning and training due to its complexi...
What do you like most about Signal Sciences?
The product's most valuable feature is its ability to set up the rules easily.
What needs improvement with Signal Sciences?
Fastly don't support caching for China users. That's the only feature lacking compared to Akamai.
 

Also Known As

Cloudflare DNS
Citrix ADC, Citrix NetScaler VPX, NetScaler Console, NetScaler Web Application Firewall
Signal Sciences Next-Gen WAF, Signal Sciences RASP
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
ABB Schweiz, Aer Lingus, AIDS Healthcare Foundation, Amnet Technology Solutions, Aramex International, Ascenty, Atos, Autodesk
Chef, Adobe, Datadog, Etsy, GrubHub, Vimeo, SendGrid, Under Armour, Duo, AppNexus
Find out what your peers are saying about NetScaler vs. The Fastly Next-Gen WAF (powered by Signal Sciences) and other solutions. Updated: April 2025.
849,963 professionals have used our research since 2012.