Try our new research platform with insights from 80,000+ expert users

Barracuda Web Application Firewall vs The Fastly Next-Gen WAF (powered by Signal Sciences) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
75
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
Barracuda Web Application F...
Average Rating
8.2
Reviews Sentiment
7.5
Number of Reviews
44
Ranking in other categories
Web Application Firewall (WAF) (17th)
The Fastly Next-Gen WAF (po...
Average Rating
7.6
Reviews Sentiment
7.1
Number of Reviews
3
Ranking in other categories
Web Application Firewall (WAF) (27th)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
UmeshKumar2 - PeerSpot reviewer
If an attack is continuous, it can block it temporarily for two to three minutes
I would rate the solution a nine out of ten. I use both Barracuda WAF and F5 but Barracuda is easy to use. F5 offers more control at another level. You can control your ship like a user. In Barracuda WAF, you can add or modify anything only with the help of support. Most of the features in Barracuda WAF are available in GUI mode. In the second version of F5, you can write iRules and apply them easily on the device. If you need something in the parameter level, you need to scan and then enable and disable the metacharacter for that particular parameter. There are some profilings available in Barracuda but they are not like F5. F5 has more general and applicable heuristics than Barracuda. However, there are good things about Barracuda too. If an attack is coming continuously, you can ask the device to block it temporarily for two to three minutes. F5 has not provided us with an option to block certain IPs for some time. Barracuda can help you block someone if the source is from a different IP. You can apply the rule to the device and block it for whatsoever time you want. The solution will unblock the IP after the prescribed time as well. This feature is not available in F5. F5 handles the implementation of single parameters and environmental parameters for financial applications easily. The profiling aspect is slower in Barracuda. Barracuda is easy for new people since everything that you need to implement the solution is available through the UI. You need little guidance for the solution. Anyone with knowledge of the HTTP header and signatures can use it very easily. It is more like Cisco in networking.
Archana Heeralal - PeerSpot reviewer
A good solution to implement web application firewall for applications
There are some lags in Signal Sciences for the web application firewalls. Even if we create some custom rules, Signal Sciences cannot capture some of the malicious traffic. There is a little bit of complexity with custom rules that should be removed. Signal Sciences should add a feature called rate limiting with multiple options, wherein I can create a rate limiting based on the cookie request or the IP.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool."
"I rate its stability a ten out of ten."
"The most valuable feature is the web application firewall."
"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"Generally, I am satisfied with this product."
"The solution is stable, and the DNS servers are simple to use."
"The overall experience with Cloudflare is positive, with a rating of eight out of ten."
"The technical support is good."
"The most valuable feature is the rule set."
"The most valuable feature of this solution is the simplicity of configuration."
"The product's advanced bot and threat protection capabilities are valuable."
"Its recommendation about the probabilities on the website is great. It also has free probability managers for the website, which is really helpful. The protection engine, signature-based protection behavior, and analysis features are also great. It also has an ATP module for sandbox scanning and behavior analysis for file uploads."
"The volumetric DDoS defense is very good because I had a problem with a lot of volumetric DDoS attacks on my servers. After using Barracuda, those attacks have stopped and all the traffic is going smoothly to my servers and the system is working really well."
"We run it with no downtime, because it has good support."
"The stability of the product is good. Stability-wise, I rate the solution a ten out of ten."
"The solution ensures layer seven is secure from attacks."
"Fastly (Signal Sciences) integrates and tags the intermittent traffic based on patterns. It generates signals and provides them in a dashboard where we can view them and decide whether to allow or deny traffic. It's a more advanced and easy-to-navigate dashboard."
"When configuring a web application firewall using Signal Sciences, we configure a rule whereby no one except a few people can access the application."
"The product's most valuable feature is its ability to set up the rules easily."
 

Cons

"Even if I wanted to, I wouldn't be able to buy Cloudflare in my country."
"It would be good if Cloudflare could have more servers for better traffic routing or an increase in the traffic routed. This is what I'd like to improve in Cloudflare."
"The reporting can definitely be improved to offer a lot more explanation on something that may have happened or has actually happened."
"It would be helpful if the solution could continue evolving to compete with the other solutions on the market."
"We are a product integrator and reseller, and we would like to have a better partner relationship, similar to a channel sales relationship. Sometimes we are on our own or get diverted by Cloudflare because they have direct sales, which competes with us and makes it difficult to build a relationship with this company since we want to be an MSP or a managed service provider for the solution."
"Cloudflare could be improved by introducing a mid-tier pricing option."
"Technical support is lacking."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"I would like to see an improved capacity to store logs so that they will be available for a longer time."
"There are some vulnerabilities that are reported across the tools offered by Barracuda for some devices, which need to be taken care of from an improvement perspective."
"We encountered a few glitches while implementing API security features into the product."
"I faced an issue when Barracuda decided not to support Azure Stack Hub anymore, which was a significant issue as we had many customers using it on that platform."
"The solution could use more reports."
"It is not stable nor mature."
"An area for improvement in Barracuda Web Application Firewall is attack identification. Other banks identified attacks and tracked logs that the solution wasn't able to identify because of its ready-made rules pre-deployed by the vendor. My organization raised this issue with the technical support team. Another area to improve in Barracuda Web Application Firewall is its service desk. The team resorted to stonewalling because they couldn't accept that a feature was missing in the solution, and it was only after a lot of drilling down that the service desk team accepted that, and would be adding that feature in the future. My organization had to submit a report to the Reserve Bank of India with information on the logs identified and the attacks that happened, and that there was a failure on the part of the Barracuda Web Application Firewall. The Reserve Bank of India conducts a tri-monthly cyber risk audit in all Indian banks. Even smaller banks identified and caught attacks that my organization wasn't able to do, so I was looking into other solutions that competitor banks could be using because Barracuda Web Application Firewall failed to identify some of the attacks."
"It would be better if their updates would be released annually."
"Fastly don't support caching for China users. That's the only feature lacking compared to Akamai."
"The areas that could be improved in Signal Sciences include the effectiveness of rules, as many didn't function optimally and required custom rule-writing to address bypasses for WAF."
"Even if we create some custom rules, Signal Sciences cannot capture some of the malicious traffic."
 

Pricing and Cost Advice

"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"A free version of the solution is available."
"The price of the solution is expensive."
"We are using the free version."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"The price is reasonable."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"The price of the solution is a little expensive. There is a license for this solution and it can be purchased every one, two, or five years."
"The price is reasonable, more so than other products."
"The product is expensive."
"While I would have to check on the price of the solution, I feel it to be okay and it matches the market price."
"In my opinion, the product is fairly priced."
"The pricing is reasonable."
"The Barracuda Web Application Firewall is quite expensive."
"For small companies, the price is very expensive because the WAF is an enterprise-level application, not intended for smaller businesses. In my opinion, the price is right for enterprise-level use."
"The pricing is 50% less than Akamai."
"Signal Sciences is pretty cheap compared to other solutions."
"The product has an affordable cost."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
851,604 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
15%
Computer Software Company
14%
Comms Service Provider
9%
Financial Services Firm
9%
Computer Software Company
20%
Financial Services Firm
10%
Government
7%
Educational Organization
6%
Educational Organization
15%
Computer Software Company
12%
Manufacturing Company
11%
Financial Services Firm
11%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Barracuda Web Application Firewall?
It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs...
What is your primary use case for Barracuda Web Application Firewall?
Our primary use case was to track the traffic on websites or webshops to identify potential malicious actors, such as...
What is your experience regarding pricing and costs for Barracuda Web Application Firewall?
The pricing for Barracuda is quite high compared to other OEMs. Each transaction requires my purchase team to negotia...
What do you like most about Signal Sciences?
The product's most valuable feature is its ability to set up the rules easily.
What needs improvement with Signal Sciences?
Fastly don't support caching for China users. That's the only feature lacking compared to Akamai.
 

Also Known As

Cloudflare DNS
No data available
Signal Sciences Next-Gen WAF, Signal Sciences RASP
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar
Chef, Adobe, Datadog, Etsy, GrubHub, Vimeo, SendGrid, Under Armour, Duo, AppNexus
Find out what your peers are saying about Barracuda Web Application Firewall vs. The Fastly Next-Gen WAF (powered by Signal Sciences) and other solutions. Updated: April 2025.
851,604 professionals have used our research since 2012.