Imperva Application Security Platform Reviews

• It provides real-time traffic analysis.
• It gives location/hit/page view details.
• It can easily and instantly block IPs.
• We can investigate questionable and suspicious IPs.

We're able to better manage network traffic with its analysis and security tools.

It also helped us investigate and narrow down possible attacks from thousands of hits from suspicious IPs. In so doing, it also noted the presence of background scripts.

It's helped us find vulnerabilities in our organization.

• Its firewall should be made less penetrable so that if an IP is blocked once, it doesn't penetrate again.
• The IP analytics should show trends and potential problem areas so that We can take action to minimize the occurrence of more hits from malicious IPs.
• The process of reporting, analysis, and clearance could be improved.

• CDN
• Site performance

The website itself is our first priority and we have seen improvements in that area -- it's faster.

Although we're only using it for the accelerator part, the purging of files and the way this feature functions could use improvement. It requires the user to either purge everything or go through specific files, but if you do, the latter doesn’t always work. So with the single files sometimes there is more difficulty.

I've used it for a few months now.

No issues. It was very straightforward.

No issues.

It meets our needs right now. In the following months we are well within our package, but in the long term, we have to see if the cost will go up too much for our project’s needs. We are well covered for now.

9.5 -- they're very good.

9.5 -- turnaround is very fast.

No, as we are a fairly new project so we have no other experience with another solution. However, we did look at CloudFlare, Limelight, and CDN networks.

I had a gut feeling about the product right from the get-go.

Very straightforward setup.

It really depends what you're looking for. If you need to have a straightforward CDN, this CDN would probably be too expensive. If you want one solution with an all-in-one package for CDN and acceleration, I would definitely recommend Incapsula.

The Web Application Firewall (WAF) is very helpful in protecting SQL injections by hackers.

We implemented the WAF feature of Incapsula in our application which was exposed to the public.

This implementation helped our organization a lot in handling web attacks by hackers and other malicious intruders.

There is nothing as of now that I could suggest.

We faced a bit of difficulty during setup, but the issue was resolved easily.

I don't know because licensing is handled by PIR infrastructure and software team.

We have just been provided a license to use the product.

You can safely implement it irrespective of your application usage size.

I'd say that the most valuable feature is the ease of use in configuration, the analytics, and the integration with Incapsula’s robot database.

The product should be able to protect us from illegitimate web traffic, and reduce our data center costs through lowering the load on our systems.

The interface seems a bit outdated and simplistic.

I have been familiar with it for a few months now.

No issues with deployment.

No issues with stability.

No issues with scalability thus far; we haven’t tried yet.

Fairly low – I’m in between Incapsula sales people so it’s hard to answer, but I have had trouble getting answers to my questions.

I like the product so I am happy with that but getting to them was not simple.

They had one thing they had to do and they did that – was pretty straightforward.

Yes, we were using Barracuda Web App Firewall which we retired several years ago.

It was straightforward.

I implemented on my own.

Per month, the cost varies between $200 to $2,000, and there's no initial setup cost.

I would say compare it to other solutions in the marketplace feature by feature and see how Incapsula reporting and analytics dashboards compare and bot control compares – their solution for bot control is pretty good – and check those features with other enterprise level solutions, you get a lot for your money.

• CDN
• DDoS protection
  

Basically, before we found Incapsula, we were getting hit with 5-10 gigabit DDoS attacks, and we were trying to figure out how to fight the attacks. Therefore, we tried Incapsula out on one site, and through the trial we saw what the solution could do – the attacker gave up after a few tries. Once we signed up for an enterprise account with all ten sites we saw the attacks drop weekly.

It would be nice to get a feed from Incapsula to import into our system. We have to have multiple dashboards open at the same time, and it would be nice to have one single dashboard with all our information.

I've used it for eight months.

No issues encountered.

No issues – it has been particularly stable.

Scalability has been pretty good, our European traffic has doubled and our sales have gone up along with our stability.

10/10

10/10 – within 5 minutes we have had a response.

We used a NetScaler mitigation appliance – nothing worked that well, we were getting attacks and they were taking down services.

Setup was fairly straightforward. It took about 10 minutes as I had to fine tune it with our API to mitigate what traffic was being blocked. I was able to determine that pretty quickly and adjust accordingly.

We did it in-house.

Probably about $150,00-$190,000 savings. It's hard to predict, but that would be my ROI estimate.

It costs around $7/month, really cheap.

We looked at CloudFlare. We tried it but it didn’t work that well.

Make sure you use a premium DNS provider. We had to move from a basic DNS provider to a more complex one to get it work with Incapsula 100%.

The features that are most valuable are the protection against denial-of-service attacks and all kinds of other internet attacks. The presence of Incapsula helps us answer the compliance requirements for IT security, as our clients require IT security compliance, and it's very important to our enterprise customers that we comply with the requirements.

Another important feature is that it doesn’t require us to move our DNS service to Incapsula like other services. It allows us to maintain our network in our current configuration. It works well with the Amazon cloud we use and doesn’t require us to re-configure our network.

Its user interface could be improved, as the competition looks better, but it doesn’t really need improvements in its functionality. We would like to have more reports and real-time views. Basically, the core functionality is great.

We have been using the solution for six months.

No issues encountered.

As far as I can see it's got great stability.

No issues with the scalability.

8/10 – they were responsive.

8/10

It doesn’t require any changes in code, so it's very easy to implement.

We implemented it by ourselves, and it took an hour, and was very easy.

It's very difficult in security products to evaluate the ROI, but we definitely feel it has helped us with compliance – we get projects and customers we wouldn’t get if we didn’t have Incapsula. It's not something you can measure – we have no other option but to use the solution, it’s a necessity.

We tried the competition, Cloudflare, we even used them, but Incapsula is more suitable to use for web/mobile applications, and that is how we use it.

• Caching and CDN
• WAF

We are using caching and CDN heavily, for certain campaigns we ended up in 80%+ of all the traffic served by Incapsula without passing to the origin servers.

We were PCI-complaint before using Incapsula; however, it is always better to have one more layer of security.

No DDOS attacks for now, but let's see once we face it.

Caching rules are really basic now and lots of space for improvement here.

- For example, Incapsula does not check the protocol (HTTP vs. HTTPS) when serving cached pages.

- There is no possibility to create a caching rule based on a regular expression.

No issues encountered.

No issues encountered.

No issues encountered.

Their support team is great and you get a response/resolution within five minutes of submitting a support ticket.

You can save some licenses/money if you have your own load balancer. No matter how many websites your load balancer is serving, you will need only one Incapsula ‘website’. We’ve managed to use two Incapsula ‘websites’ to serve approximately 150 real websites.