Radware Cloud DDoS Protection Service Reviews

Our company is an ISP. We provide DDoS protection services ourselves. We need the technical means to be able to provide such services. We have DefensePro in our facilities through which we provide protection services to our clients.

Radware Defense Pro is an excellent solution for our customers as it works in blind mode. That, and the licensing model, is more attractive for the customer since the license is based on the capacity of clean traffic, not the combined traffic. If an attack is around 30 gigabits, you can still go on with your license of four gigabits due to the clean and legitimate traffic not exceeding four gigabits. 

It's very good at protecting users from DDoS attacks. It's the leader in this domain. 

In our use case, we do not use encryption or decryption. We simply defend against general types of DDoS attacks, like TCP SIM or DNS flood attacks. With Radware, we can defend against many types of attacks.

Radware consists of a so-called security profile. Each profile is just like an engine, and the engines check if that packet is valid or invalid. If it's invalid, it just gets dropped immediately and doesn't go for checking to another engine. But if it's okay, then another engine checks if it belongs to a scanning attack or it's a behavior-based attack. It helps decide whether something is malicious or not.

DefensePro is very effective at detecting attacks in real-time. From our experience, it's quite effective equipment. The main goal during the attack is just to protect the host and the customer's facility. So in this way, it is quite effective. We also have NetScout in our facilities, so we can compare them with each other. 

Our goal is to analyze the attack after attack and try to improve our ability to minimize the false positives. It's helped us.

We've been able to reduce downtime associated with attacks. During an attack, Radware DefensePro drops the malicious traffic. Sometimes it is very effective, and sometimes it is not as effective. However, without this, the very first attack against the customer would just pull everything down. Now that we have this equipment in place providing protection, the customer can continue to work. Maybe the performance would suffer a little bit; however, at least they can continue to work. We have small attacks happening every day against our customers, so having protection is critical. 

The APSolute Vision feature needs improvement. 

I've used the solution for around five years. 

We do have problems with stability when it comes to APSolute Vision. It seems to have been written using Docker and it's quite complicated. We don't know much about the internal infrastructure. Sometimes, it just doesn't let you log in or it displays configuration errors. I'd rate the stability eight out of ten overall. 

We have around 30 end users. However, we do have the solution for our end customers, which are enterprises. 

We haven't had a chance to test the scalability. That said, by design, scalability is built into the design of the solution. You can install multiple DefensePros and they can be controlled and monitored from one single APSolute Vision station. They have switched to a newer platform, and I don't have experience with that controller just yet. My impression is they fixed a lot of issues people found with APSolute Vision when building the new controller. 

Technical support is among the best. If you open a ticket, they respond immediately and they are very helpful. They ask to give control so the support engineer can fix things himself. It's great. 

I'm also familiar with Arbor. It's another leader in the domain.

We used Jupiter for some time. Radware receives regular updates of threats, however, Jupiter did not have that capability. It worked mainly with behavior-based attacks. Both Radware and Arbor also have behavior-based attack protections and zero-day attacks, plus they both have subscription services and centers of knowledge that periodically send you updates on the latest attacks and on malicious hosts. 

The initial setup was complex. You hear documentation is quite good, however, it's really just a field of knowledge. It's just not enough to understand how to configure things or how to click and choose another profile. 

You need to know the nature of DDoS attacks and many, many intricate things about DDoS attacks to be able to configure the box comprehensively. This is the biggest challenge. It's unlike, for example, if you have to deal with routing equipment. Everything looks straightforward, and everything is predictable. This domain, it's much more complex due to the nature of the sync of the DDoS attack. Even for us, now, five years later, we still don't know everything. The field is very complex. 

There is continuous maintenance needed from our side. We have four people who handle maintenance tasks. 

The product is very expensive, as is Arbor. 

We still have the older model of DefensePro without X. Instead of the cyber controller, we have their older monitoring solution, APSolute Vision. My understanding is that the cyber controller took away some of the deficiencies of APSolute Vision. 

I'd rate the solution nine out of ten. It has some issues, however, Radware alongside Arbor are two of the best solutions. 

We use the product to protect our centers from DDoS attacks. We deploy the tool across multiple offices across the Middle and Far East. 

The solution provides us with data security and better protection against DDoS attacks. It also gives monthly analysis reports, which are beneficial.

DDoS Protection Service provides excellent defense in the cloud, and the implementation and migration are very straightforward. 

The solution provides good real-time protection against threats. 

We use the Cloud DDoS Management System, and it provides good visibility into incidents. We can centrally manage incidents according to our defense flows.  

The Management System is very easy to use. 

The Cloud DDoS Management System provides many cloud-based tools for analyzing and managing attacks on our organization, including alerts and reporting. There's a dashboard that allows us to monitor alerts, and we can configure reports to receive them daily and monthly.  

The Cloud DDoS Management System mitigates attacks depending on their priority, but it takes less than 30 minutes to mitigate high-priority attacks, and the response begins immediately.   

The product's mean time to detect an incident is ten to fifteen seconds. 

There is room for improvement in the pricing; the product could be more affordable. 

Improvements to the support and protection are always welcome, though they are in a good place. 

We've been using the solution for ten years. 

The product is stable. 

The solution is scalable. We currently have 1,000 end users. 

The customer support is good; I rate it eight out of ten.

Positive

The initial deployment was straightforward; it took around a month, and 30-40 staff were involved in the setup. The solution requires some maintenance. 

The product gives us an ROI of around 20%. 

Radware Cloud DDoS is very expensive. 

I rate the solution ten out of ten. 

To someone looking for a DDoS Protection product but who wants to go with the cheapest option on the market, it depends on your support and how capable you are of integrating the tool with your customers.

Our company provide services to government organizations, banks, and local police. Approximately two weeks ago, our customer experienced an attack with a volume of about 20 gigabits. Despite the attack, the website remained available and working perfectly.

We use these solutions to provide services to our customers. Customers purchase DDoS protection solutions. We have DefenseFlow Pro installed at our facility. The customers' traffic passes through this DefenseFlow, allowing us to provide enterprise services to our clients.

We are very satisfied with the solution. Recently, our company has been facing difficulties due to attacks originating from the Russian Federation. DefenseFlow has proven to be a highly effective solution in protecting our customers.

Signature protection is enabled because it uses profiles stored in the device. When configuring protection for a customer, one can select from various profiles. Migration protection is the most crucial, and we offer subscriptions with Radware.

Another effective feature of Radware DefenseFlow is the behavior mechanism, implemented for protection. This mechanism monitors the customer's traffic and typically requires one day to learn the customer's traffic patterns, establishing baselines. If significant deviations from these baselines occur, the behavior protection is triggered to safeguard the customer's traffic.

Its documentation is not 100% clear, making it the weakest aspect of Radware. We have encountered some difficulties in understanding how to configure it correctly.

I have been using Radware DefenseFlow for three years.

The product’s stability is quite good.

Radware bugs can pass through a certain amount of traffic. They say this is clean or legitimate traffic. The box itself can test through 40 megabits per second of plain traffic, but you need to buy a license. The license can accommodate 10 gigabits per second. It's the same box, but you just buy a license to accommodate the traffic. Scalability is sort of purchasing a new license.

We, a team of four people were using this solution. There are some alerts configured on the box. We'll be monitoring the health of the device to see what situation.

We had some issues. When we opened a ticket, they responded immediately.

Positive

We're using a different solution from Juniper.

We have router, which connects to other routers functioning as SDR routers that have BGP sessions with our upstream providers. We installed DefenseFlow on the device and configured it according to our customers' needs. This setup allows traffic to pass through the DefenseFlow and then proceed to the customer's location.

Sometimes it blocks traffic, and it's challenging to identify the reason why it's blocking the traffic. We can clearly see that traffic is being dropped because when we configure the whitelist to bypass anything inside the box, the traffic begins to flow, indicating that the traffic was previously dropped. However, there are no traces of this in the logs. This doesn't happen very often, but there have been a couple of instances where we've encountered this situation. It took us few days to properly configure it.

The solution brings customers.

The solution is easy to use with extensive troubleshooting. Also, it is easy to integrate, simply connect to the switch and configure ethernet ports until you are ready to go.

Overall, I rate the solution a ten out of ten.

We utilize Radware Cloud DDoS Protection Service to safeguard against unpredictable floating IP traffic. If the traffic exceeds the capacity of the on-site Radware Defense Pro product, the system will automatically switch over to cloud-based filtering.

Real-time threat blocking is highly effective in capturing attacks as they occur with near-instant response time. In my experience, it seldom causes any issues once detected.

Radware Cloud DDoS Protection Service reduces the concerns about attacks on the entire organization, allowing us to maintain uptime in situations where others might not be able to do so without this solution.

Radware Cloud DDoS Protection Service's response time is commendable. Their solution is highly responsive when we contact them, or in case of an attack where they need to initiate contact with us to collaborate on cloud mitigation.

The most valuable feature is the controller that determines when and how traffic can be moved to the cloud.

The current deployment heavily depends on the Radware team and requires improvement, particularly in the device configuration aspect rather than the cloud mitigation aspect. We encountered several challenges during deployment. We heavily relied on Radware's technical team to ensure the proper setup and configuration of VPN tunnels for cloud mitigation.

I have been using Cloud DDoS Protection Service for several years.

Radware Cloud DDoS Protection Service is stable.

I give Radware Cloud DDoS Protection Service an eight out of ten for scalability.

While the solution is capable of accommodating scaling up, it may take a bit of time to fully implement.

I have had a positive experience with technical support. Whenever I submit a ticket regarding an issue, they promptly respond within a reasonable amount of time, depending on the severity of the case. They consistently guide me to a solution that addresses all of my concerns.

Positive

I typically serve as an intermediary, coordinating various aspects to ensure everything runs smoothly. To clarify, our focus is primarily on wholesale services where we assist customers with deployments. My role involves managing projects to ensure successful product activation and deployment, acting as a project manager to oversee the process and ensure its smooth execution.

We assist our customers with the implementation.

When compared with other solutions, my end user is satisfied with the costs and believes that Radware Cloud DDoS Protection Service is worth the price paid. They found the solution to be effective within their budget.

I give Radware Cloud DDoS Protection Service a nine out of ten.

For those searching for a more affordable option in the market, remember the saying 'you get what you pay for'. It's essential to explore various solutions and weigh all options carefully. Saving money is important, but sometimes it's necessary to spend a little extra to acquire a quality product that meets our expectations. Therefore, the cheapest alternative may not always be the best choice. Conducting thorough research is worthwhile to ensure we receive our money's worth.

We deployed the solution at both primary and disaster recovery locations to protect the end user's primary Internet access and backup connections in case they need to be utilized.

Radware sold us a solution bundle that included hardware, and in addition, the Cloud DDoS Protection Service was also included.

Be ready to allocate a considerable amount of time to collaborate with the Radware technical team in order to comprehend and effectively incorporate their product with your current Internet connection.

The solution is stable. 

It has a high level of scalability. It is reliable. 

The initial setup is easy.

Technical support is satisfactory. 

The features are good. 

We would like to have seven-layer functionality.

I've been using the solution for four years. 

The solution is stable and reliable. There are no bugs or glitches, and it doesn't crash or freeze. 

The solution can scale well, and it is easy to expand. 

We have about 1,000 people on the solution. 

Technical support has been good in general. We are satisfied with their level of assistance. 

Positive

It offers an easy initial setup. It's not overly complex. You shouldn't have an issue with the implementation process. 

I'd rate it 4.5 out of five in terms of ease of implementation. 

The licensing cost is about $50,000.

We are Radware partners. 

I'd advise potential new users to go with a hybrid mode and move to the cloud. That should be the approach.

I'd rate the solution nine out of ten. 

We primarily use the solution for web application firewalls and as hardware.

I can only distinguish Radware DefensePro from Netscout AED, which doesn't have such a protection network, behavior analysis, intrusion prevention, and maybe anti-bot modules. This product is more advanced than Netscout AED. However, I haven't the knowledge of how it looks in comparison, for example, to F5 or Fortinet appliances or others, as I didn't do RFI and RFP. The most important thing for me right now in the Radware portfolio, is that Radware went to the cloud and has a flexible model based on virtual machines that can be delivered in our data center model, which could be delivered via the public cloud. That’s the big advantage of Radware, from my perspective.

Its functionality is very good.

The behavioral analysis is of very good quality.

I started from scratch, from medium customers to bigger customers, and then maybe smaller ones. I would like to have more granular steps according to protected bandwidth, so the granularity should be better. For example, one gigabit of protected bandwidth, two gigabits, three gigabits, and so on. Right now, it's two, four, and six, something like that. It depends on the appliance, of course, as Defense Code 6 is the smaller one and next is 10 or 12. However, in general, the granularity could be better.

I’ve used the solution for five years.

The solution is quite stable. There are no bugs or glitches. It doesn’t crash or freeze.

The product is scalable.

We have 12 to 15 people on the solution.

I don’t directly deal with technical support. That is the responsibility of others.

I'm not a technical guy. From my perspective, the initial setup is not easy. However, it's not hard. Someone who would like to have a good security policy should have enough knowledge to configure it using the security policy. The knowledge is essential since it's not possible to implement a security policy without knowledge about the traffic, including what kind of traffic, what kind of application, what kind of parameters, et cetera. It's not a hammer. It's a security appliance. For our people, it's not as hard since we use it. We know how to use it. It's maybe more important to integrate it with additional systems like a CM.

The solution offers good quality for the price.

I prefer low investment expenditures. I prefer paying less at the beginning of the project. After the customer base starts growing, I can pay more.

This solution is moderately priced. I would rate it three out of five.

To deliver to our current customers, we had to buy something new. However, in the future, we would like to check what kind of opportunities are on the market.

We are in the middle of buying the newest DefensePro. We switched to the new technology as the old one is the end of life and end of support. That's why we have to buy a new DefensePro.

It's in our internal infrastructure, so it's in our network. It's not a data center, for example, Amazon, Azure, or Google Cloud.

With this model, it's all one. We would like to extend it in the near future, maybe to be more flexible. I am in the middle of the project and in the middle of how to distinguish protection against DDoS attacks and have Layer 7 and web application firewalls. In our offering, we combined these two areas into one service. One part is DDoS protection against 7th layer DDoS attacks, and the second is web application firewalls. Right now, I would like to work on how to distinguish to maybe separate it. I don't know what it will look like right now.

I’d rate the solution overall an eight out of ten.

We use Radware to control close to the most sensitive areas of our network and as protection against significant external attacks.

The important features include automated protection and defense against many attacks, it's important that our networks are protected in the Radware cloud.

As price increases based on the volume of net traffic, it can get expensive. 

The NetFlow security could be improved too.

More customization options would be a welcome addition. 

We have been using the solution for three months.

The stability is good at the moment.

The solution has scalability. 

Technical support is good, I would rate it a five out of five. 

Positive

Initial setup is easy.

We implemented Radware deployment through a reseller. 

We use about 10 engineers for the deployment and maintenance of this product.

It's very important for us to have well-analyzed and protected traffic within our network, that's why we use this solution.

I would rate this solution an eight out of ten.

I'm a security engineer.

In terms of the environment that I work in, the SSL, DNS, and HTTP are all valuable features. This is a very technologically simple and effective solution. 

There are no issues on the hardware front, but on the management front, the APSolute Vision needs to be more granular so that it's possible to get real-time information. If I want to check on TCP traffic or any kind of traffic flowing between a source and a destination, I should be able to access it in real-time. For now, I have to check four or five options, then go for a TCPDUMP, download it, and then open it. It takes too long and is a complex process. There should be an option in the management server or on the GUI, to simplify things for users. It should just be a matter of putting in the source and the destination IP, to see the latency for that particular destination and what's going on.

Because Radware does not have its own control plane software, it can only integrate with specific products. They should aim to integrate with third parties such as Genie, Nokia, and Arbor DMS. It's currently very limited.

I've been using this solution for three years. 

The solution is stable.

Scalability is not an issue because the product comes with a scalable license. 

The customer support wasn't great but it was reasonable. 

The initial setup was very straightforward. Maintenance requirements depend on the size of the environment. If it's deployed in an ISP environment then it requires one or two administrators. If it's a single appliance for an enterprise environment, then one person is enough for maintenance.

I rate this solution seven out of 10. 

We used this product as part of our security solution. However, we do not plan to continue to use it.

This product would determine if we were under a DDoS attack, should one happen. It has kept us up and operational on a day-to-day basis, without being interrupted by an attack from outside sources.

The most valuable feature is the monitoring.

The customer service needs to be improved. I do not mean the support, but specifically the customer service. They didn't listen to what we were asking for and what we needed. When we went to upgrade, we kept telling them what we needed and they would offer something else. It was as if we were trying to buy oranges and they would offer us apples. We corrected them and offered additional detail, yet they continued to come back and offer us the wrong solution. This was very expensive and ultimately, we decided to look elsewhere.

This product would be improved if ongoing live monitoring with dashboards were added.

We had been using Radware DefensePro for probably six years.

This is a very stable product.

Scalability is part of the problem that we were having. We were trying to get them to scale and they wouldn't listen to what we were asking. I know that they have the ability to scale, so I would say there is good scalability with the product.

Our use case was a school district and more than 30,000 people were using it.

This was the first DDoS solution that the company deployed.

I was not here when the initial setup was completed, although I'm assuming that it was pretty straightforward. My understanding is that the deployment took less than 24 hours to do because they were under attack. They contacted Radware to stop the DDoS attack at the time, and they came in and installed it. By the time that it was installed and put into place, the attack had stopped, and it hasn't really been utilized since that time.

The reseller assisted with the deployment and the experience was good.

Staff is required for ongoing maintenance. It would require standard engineers or network engineers.

The price was well over six figures. There are ongoing monthly costs for when they monitor the line and then if you activate the service then there is an additional cost. Essentially, you hold them with a retainer fee, and then when you go active, there could be an additional cost associated.

I know for a fact that Radware DefensePro worked. We tested it over all those years. We tested to make sure that it's operational and that it works. It was a very good product, but it just no longer fit our needs and what we were looking for. At least not that I know of because they would never give us what we asked for. As I said, back to that customer support issue. We asked for it, I know that the company does what we ask, but they would not offer it to us. Instead, they kept trying to offer us things we weren't asking for.

My advice for anybody who is looking at this product is to make sure that they get what they are looking for because they wouldn't listen to what we wanted. I spent a solid year trying to stay with them, but they wouldn't listen. They would come back every two or three months with new offers and it was just crazy. It wasn't what we wanted.

The biggest lesson than I have learned from using this product is to stay on top of your solution provider to make sure that they're providing what you need.

I would rate this solution a seven out of ten.