Try our new research platform with insights from 80,000+ expert users

Azure DDoS Protection vs Azure Firewall comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Azure DDoS Protection
Ranking in Microsoft Security Suite
23rd
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
8
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (8th)
Azure Firewall
Ranking in Microsoft Security Suite
11th
Average Rating
7.4
Reviews Sentiment
7.2
Number of Reviews
41
Ranking in other categories
Firewalls (12th)
 

Mindshare comparison

As of July 2025, in the Microsoft Security Suite category, the mindshare of Azure DDoS Protection is 2.0%, down from 2.2% compared to the previous year. The mindshare of Azure Firewall is 3.7%, down from 5.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

Venkat Raju Mallipudi - PeerSpot reviewer
Acts as an additional layer of protection, provides endpoint security but not very easy to configure
It's not very easy to configure, in my view. We have to do some work behind the scenes. It's not very simple. We have to do it very carefully, and we need to monitor this enablement as well. But apart from that, I didn't see any kind of challenges. So, in my opinion, configuration is the main trouble for them. It is something that can be done to be better. Not just configuration. You need an expert who knows the ins and outs of these security solutions. In my experience, people struggle with configuration. While configuring, we get this error, we get that error, and then we try to fix those issues. I have seen those. It's not straightforward.
AnvarSadique - PeerSpot reviewer
Easy setup and effective traffic routing enhance security
In terms of improvements, I think the price could be a concern as Azure ( /products/microsoft-azure-reviews ) services are often more expensive compared to other firewalls. However, the functional aspects of Azure Firewall met our needs. While I found the interface not particularly user-friendly, this is a common issue across vendors.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Azure DDoS Protection is that it performs well."
"The integration of various tools with Azure Firewall, like DDoS Protection, Web Application Firewall, and Azure Front Door, is quite effective."
"AI capabilities are very good. I would rate them an eight out of ten."
"Azure DDoS Protection offers superior protection against denial-of-service attacks."
"The integration of various tools with Azure Firewall, like DDoS Protection, Web Application Firewall, and Azure Front Door, is quite effective."
"DDoS Protection is simple to deploy and integrates seamlessly with the Azure environment. Ease of deployment is a crucial feature for us."
"Azure is easy to set up and widely used by our clients."
"Azure is easy to set up and widely used by our clients."
"All its features are good. That's why we recommend it."
"The solution is very stable. When comparing it to other environments, it's actually quite impressive."
"Network filtering is valuable. The scalability capability from the cloud-native service helps us a lot because it simplifies our day-to-day maintenance activity."
"Microsoft's technical support is very good. They're quite knowledgable and responsive."
"The solution has many useful features. For example, the solution allows users to create virtual IP addresses."
"We use the solution for application and server deployment."
"One of the notable advantages of Azure Firewall is its user-friendly interface, which closely resembles or shares similarities with other Azure components."
"Great security and connectivity."
 

Cons

"It's not very easy to configure, in my view."
"The dashboard lacks insights and user-friendliness, as most data is logged into metrics like Log Analytics workspaces."
"Azure DDoS Protection could improve on the reporting."
"The implementation of Azure DDoS Protection results in a decrease in our bandwidth capacity and should be optimized to reduce resource consumption."
"I have noticed some false positives with the Web Application Firewall yet not with DDoS Protection."
"I suggest adding more services and additional services, which would be beneficial."
"Sometimes, it is hard for our staff to keep track of changes (in the GUI) between different projects, because there are constant changes. As a result, it is hard to manage, recall, and see all the features because they have been moved from one place to another."
"The visibility could be better. We would like to have better metrics, so we could see all the information in a central place."
"Azure should be able to work better as a balancer also, instead of just being a firewall. It should have a wider mandate."
"The interface could be improved, it's not very user friendly."
"Azure Firewall has limited visibility for IDPS, no TLS inspection, no app ID, no user ID, no content ID, no device ID. There is no antivirus or anti-spyware. Azure Firewall doesn't scan traffic for malware unless it triggers an IDPS signature. There is no sandbox or machine learning functionality, meaning we are not protected from Zero-day threats. There is no DNS security and limited web categories."
"The tool needs to improve the onboarding and transition process for on-prem users."
"Currently, it only supports IP addresses, so you have to be specific about the IPs that are in your environment."
"I would like the premium and standard features to be available on the basic package. Additionally, it lacks some functionalities when compared to competitors like Check Point and Fortinet, such as WAF or load balancing."
"It is a cloud service, but the lending speed for each region is not always the same. For example, in China, the speed is slow. They need to think about how to make sure that the service pace or speed is always the same in all regions. It would be a great improvement if they can provide the same pace worldwide."
"The threat intelligence part could be better. I don't see why our customers have to get an additional solution with Azure Firewall. It would be great if they made it on par with Palo Alto."
 

Pricing and Cost Advice

"You can test it for a certain period of time free of charge. You can have a free account. You can test it to compare its pros and cons with other products that you are testing."
"It is an expensive solution."
"Before choosing this solution, we evaluated others, and we found this to be the most cost-effective."
"The pricing of Azure Firewall is pay-as-you-go. Fortinet also has a pay-as-you-go model, but Azure's pricing is higher and, with FortiGate, you also have the license."
"Azure Firewall is expensive."
"The solution is cheaper than other brands. My company has an enterprise contract and we finally got a good price with Azure."
"Azure Firewalls operate on a pay-as-you-go model, similar to cloud services."
"It is expensive, especially with the premium functions. For one of the clients, it was very expensive. You have to use it more at an enterprise level, and there, it was not at an enterprise level. So, it was very costly, but security-wise, it was a very wise decision to use it that way."
"I rate the product pricing a five out of ten."
"Azure Firewall is more expensive. If Microsoft can make Azure Firewall cheaper, I can see that all clients will think of using it. One client used FortiGate because it is much cheaper. Some clients ask me for Cisco, but in the cloud estimate, I found its cost is the same as Azure Firewall."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
860,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
13%
Comms Service Provider
9%
Government
8%
Computer Software Company
16%
Financial Services Firm
10%
Government
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Azure DDoS Protection?
Azure DDoS Protection offers superior protection against denial-of-service attacks.
What is your experience regarding pricing and costs for Azure DDoS Protection?
The pricing is somewhat costly, usually around $3,000 to $4,000 per month. Managing this expense is tough, especially since we haven't received everything we need for our capital expenditure manage...
What needs improvement with Azure DDoS Protection?
The dashboard lacks insights and user-friendliness, as most data is logged into metrics like Log Analytics workspaces. It would be beneficial to have more detailed insights available directly on th...
What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firewall is easy to use and provides excellent support. Valuable features include int...
How does Azure Firewall compare with Palo Alto Networks VM Series?
Both products are very stable and easily scalable. The setup of Azure Firewall is easy and very user-friendly and the overall cost is reasonable. Azure Firewall offers a solid threat awareness, can...
Which would you recommend - FortiGate VM or Azure Firewall?
Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigate VM integrates well and has excellent centralized reporting. It is very easy to...
 

Overview

Find out what your peers are saying about Azure DDoS Protection vs. Azure Firewall and other solutions. Updated: June 2025.
860,592 professionals have used our research since 2012.