Radware Cloud WAF

What do you like best about the product?

What I like most is its real-time threat detection and automatic policy updates. It’s pretty good at adapting to new attack patterns without needing constant manual tuning. The dashboard is clean, and integration with existing tools was smooth.

What do you dislike about the product?

The UI feels a bit dated and some advanced configurations aren’t as intuitive as they should be. Reporting could be more flexible, especially for SOC-level insights. Also, occasional false positives need manual tuning.

What problems is the product solving and how is that benefiting you?

It helps us block web-based attacks like SQL injection, XSS, and bot traffic before they reach our apps. That means fewer incidents, less manual triage, and more time to focus on proactive threat hunting. It’s also useful for meeting compliance needs.

What do you like best about the product?

What I appreciate most about Radware Cloud WAF is its ability to detect threats in real time and automatically mitigate them. It delivers robust protection against web attacks while having little effect on performance, which makes it both secure and efficient.

What do you dislike about the product?

It requires a more in-depth understanding of security policies to achieve full optimization. Furthermore, the initial setup and fine-tuning process can be time-consuming, depending on the specific environment.

What problems is the product solving and how is that benefiting you?

Radware Cloud WAF addresses essential security challenges by protecting against web-based attacks such as SQL injection, cross-site scripting, and DDoS threats. It has been beneficial for us by offering real-time threat detection, automated mitigation, and enhanced visibility into application traffic. This ensures that our web assets stay secure and compliant, all while requiring minimal manual intervention.

What do you like best about the product?

Radware WAF is a strong performer when it comes to securing web applications. It offers solid protection against OWASP Top 10 and zero-day threats, and supports bot mitigation, API security, and flexible deployment models. The platform is easy to manage, integrates well with SIEM and SOAR tools, and meets high availability SLAs. Its centralized reporting and real-time alerting make it a reliable choice for infrastructure teams looking for visibility and control. Just note that it supports only TCP ports, which can be a limitation for certain use cases

What do you dislike about the product?

While Radware WAF is solid for securing web apps, there are a few things that could be better. It doesn’t support UDP traffic, which limits onboarding for certain real-time applications

What problems is the product solving and how is that benefiting you?

We faced a major integration problem with SIEM where RadWare helped with Logstash integration. Also was a great help in implementing SSO.

We use Radware Cloud WAF Service  for WAF  protection and API protection.

The best features of Radware Cloud WAF Service  are its ability to manage high traffic, its scalability, and its reliability. Whenever we observe any detections or unusual traffic at a high rate, Radware manages the replication of web applications in such a way that no web applications are ever hampered, ensuring all traffic is managed effectively.

Radware Cloud WAF Service has significantly reduced our false positives, as Radware keeps its policies up to date with emerging tactics. This has led to very few false positives, which is one reason we have chosen to implement Radware WAF in our environment, given its favorable false positive ratio.

In Radware Cloud WAF Service, the areas that have room for improvement include the costing part, as we faced some issues during the implementation and POC of this WAF technology.

Additionally, the policy management can be improved, along with the graphical user interface for better visualization, so any new user can adapt to its graphics and find it easier to use.

I have been using Radware Cloud WAF Service for around three plus years.

I would rate the support a perfect 10 out of 10 because the support is good.

We have seen a good amount of return on investment with Radware Cloud WAF Service, roughly 50 to 60%. By reviewing our alerts and traffic, we can assess what traffic has been blocked and how much it has saved our applications and infrastructure.

Given our critical web applications and our substantial environment, where many applications are onboarded on WAF, overall, we can say it has yielded good returns on investment.

When I compare Radware Cloud WAF Service with other WAF software, I notice that while Radware's technology is strong, the only cons we faced were related to costing and some policies. Other solutions are available in the market, but they also have their drawbacks.

We use the CDN  services offered by Radware with Radware Cloud WAF Service. The combination of CDN  and Radware Cloud WAF Service is easy to use, and the security it offers is good, especially with the WAF plus DDoS integration, which is ideal for media and all types of streaming.

I assess Radware Cloud WAF Service for blocking unknown threats and attacks as effective because it updates its mitigation policies with day-to-day strategies, incorporating new and emerging tactics. Additionally, it blocks some traffic based on AI, which enhances its ability to manage intrusion threats.

The automated analytics for looking at events is positive, as it has inbuilt automations that reduce our manual intervention. Due to this, there is a quick incident response in case of any high alert or critical case, ensuring that proper mitigations have been taken care of for any incident, which allows for a rapid response over any alert.

Radware Cloud WAF Service for integrating with other systems and applications in our business is seamless, as we have integrated Radware WAF with our SIEM  monitoring tool, Microsoft Sentinel . We can get centralized logs for every tool on Sentinel , and it was easy to implement and integrate with it. Throughout the integration with Sentinel , we received excellent support and good documentation.

I assess Radware Cloud WAF Service for its ability to protect against zero-day attacks as competent since it adapts behavioral models. If it observes any vulnerability that Radware WAF hasn't recognized in its recent models, it trains its models based on behavior to manage zero-day exploits, ensuring that if any sudden bot traffic or API abuse occurs, Radware mitigates it and blocks all such traffic effectively.

The combination of negative and behavior-based positive security models is crucial for our organization's security strategy because Radware assumes everything is allowed unless it observes any malicious activity or anomaly. In such cases, WAF only blocks when something malicious or specific signatures are observed, making it reliable for our applications and ensuring none are hampered by any false positives.

We use Radware Bot Manager . With Radware Bot Manager , we have discovered issues such as web scraping and DDoS bots from our incoming bot traffic that we weren't aware of before, as it provides detections for that and actively blocks all such DDoS traffic and bot traffic based on its AML algorithms. We have also enabled API bot protection.

We use the web DDoS protection offered by Radware. Radware Cloud WAF Service has helped in our business continuity by ensuring that no legitimate traffic is blocked. Only when something suspicious based on L3, L4, or L7 DDoS attacks or such signatures is observed does Radware block malicious traffic, guaranteeing reliability and continuity for our web applications.

The solution requires maintenance when we want to configure or tweak any policy, which is when we seek support from the tech team.

Our team includes 30 engineers who use Radware WAF. We will recommend this product to other users because we have suggested it to our peers. Looking at the solution this tool has provided us, we find it beneficial enough to promote it to others.

On a scale of 1-10, I rate this solution a 9.

Public Cloud

Other

What do you like best about the product?

Strong defence against web and bot based attacks. Using it regularly for a comprehensive dashboard and view and easy to use and navigate.

What do you dislike about the product?

Managing false positive is challenging task.

What problems is the product solving and how is that benefiting you?

It is ensuring real-time protection against web attacks and bots which leads to high availability of the application and up-time. It has decresed the incidents being faced.