We use Radware Cloud WAF Service for WAF protection and API protection.
Radware Cloud WAF
RadwareExternal reviews
External reviews are not included in the AWS star rating for the product.
Radware Cloud WAF: flexible, reliable and certified protection for regulated environments
The presence of numerous international security certifications, and most importantly in Italy, the certification issued by the ACN (Italian National Agency for Information Security) for Radware's WAF and anti-DDoS services, further strengthens confidence in the platform.
Overall, Radware has proven to be a satisfactory and reliable choice for our regulated enterprise environments where security, compliance and business continuity are essential.
Because of these features, it's a solution we rely on not only to protect our assets, but also one we confidently offer to our Customers as an additional security layer within our SaaS platform.
Finally, I can confirm that we have always found the sales representative and technical support team to be extremely helpful and professional.
It has also proven particularly valuable in addressing the ever-increasing speed with which new vulnerabilities are identified, especially in scenarios where security fixes are not immediately available, by offering an effective protection layer at the edge.
At the same time, Radware represents a well-recognized, internationally certified security solution, allowing us to meet the expectations of the most demanding Customers and to offer an additional, high-level security measure within our SaaS platform.
Advanced Protection and Specialized Support
Simplicity and security that inspire confidence
Real-Time Threat Detection /Protection
Stable, Reliable with Easy Setup and Strong Protection
Strong Security Performance, but Pricing and Dashboard Can Improve
Their support team is excellent, very professional, quick to respond, and they truly understand the platform and customer needs. In urgent situations, they provide fast, priority help without any hassle.
The bot protection is also very good. It reliably detects and blocks automated attacks, which adds an extra layer of security.
Also, the per-license cost is higher than many similar tools, which makes it less budget-friendly for some teams.
It detects and blocks attacks in real time, which reduces risk and prevents downtime.
he geo-blocking feature is also very advanced and helps us easily control traffic from high-risk regions.
Reliable Shield for Web Apps
Strong Web Application Security
Radware WAF Cloud: A Web Application Security Platform
Has managed high traffic efficiently and reduced false positives while maintaining strong API protection
What is our primary use case?
What is most valuable?
The best features of Radware Cloud WAF Service are its ability to manage high traffic, its scalability, and its reliability. Whenever we observe any detections or unusual traffic at a high rate, Radware manages the replication of web applications in such a way that no web applications are ever hampered, ensuring all traffic is managed effectively.
Radware Cloud WAF Service has significantly reduced our false positives, as Radware keeps its policies up to date with emerging tactics. This has led to very few false positives, which is one reason we have chosen to implement Radware WAF in our environment, given its favorable false positive ratio.
What needs improvement?
In Radware Cloud WAF Service, the areas that have room for improvement include the costing part, as we faced some issues during the implementation and POC of this WAF technology.
Additionally, the policy management can be improved, along with the graphical user interface for better visualization, so any new user can adapt to its graphics and find it easier to use.
For how long have I used the solution?
I have been using Radware Cloud WAF Service for around three plus years.
How are customer service and support?
I would rate the support a perfect 10 out of 10 because the support is good.
How would you rate customer service and support?
Positive
What was our ROI?
We have seen a good amount of return on investment with Radware Cloud WAF Service, roughly 50 to 60%. By reviewing our alerts and traffic, we can assess what traffic has been blocked and how much it has saved our applications and infrastructure.
Given our critical web applications and our substantial environment, where many applications are onboarded on WAF, overall, we can say it has yielded good returns on investment.
Which other solutions did I evaluate?
When I compare Radware Cloud WAF Service with other WAF software, I notice that while Radware's technology is strong, the only cons we faced were related to costing and some policies. Other solutions are available in the market, but they also have their drawbacks.
What other advice do I have?
We use the CDN services offered by Radware with Radware Cloud WAF Service. The combination of CDN and Radware Cloud WAF Service is easy to use, and the security it offers is good, especially with the WAF plus DDoS integration, which is ideal for media and all types of streaming.
I assess Radware Cloud WAF Service for blocking unknown threats and attacks as effective because it updates its mitigation policies with day-to-day strategies, incorporating new and emerging tactics. Additionally, it blocks some traffic based on AI, which enhances its ability to manage intrusion threats.
The automated analytics for looking at events is positive, as it has inbuilt automations that reduce our manual intervention. Due to this, there is a quick incident response in case of any high alert or critical case, ensuring that proper mitigations have been taken care of for any incident, which allows for a rapid response over any alert.
Radware Cloud WAF Service for integrating with other systems and applications in our business is seamless, as we have integrated Radware WAF with our SIEM monitoring tool, Microsoft Sentinel. We can get centralized logs for every tool on Sentinel, and it was easy to implement and integrate with it. Throughout the integration with Sentinel, we received excellent support and good documentation.
I assess Radware Cloud WAF Service for its ability to protect against zero-day attacks as competent since it adapts behavioral models. If it observes any vulnerability that Radware WAF hasn't recognized in its recent models, it trains its models based on behavior to manage zero-day exploits, ensuring that if any sudden bot traffic or API abuse occurs, Radware mitigates it and blocks all such traffic effectively.
The combination of negative and behavior-based positive security models is crucial for our organization's security strategy because Radware assumes everything is allowed unless it observes any malicious activity or anomaly. In such cases, WAF only blocks when something malicious or specific signatures are observed, making it reliable for our applications and ensuring none are hampered by any false positives.
We use Radware Bot Manager. With Radware Bot Manager, we have discovered issues such as web scraping and DDoS bots from our incoming bot traffic that we weren't aware of before, as it provides detections for that and actively blocks all such DDoS traffic and bot traffic based on its AML algorithms. We have also enabled API bot protection.
We use the web DDoS protection offered by Radware. Radware Cloud WAF Service has helped in our business continuity by ensuring that no legitimate traffic is blocked. Only when something suspicious based on L3, L4, or L7 DDoS attacks or such signatures is observed does Radware block malicious traffic, guaranteeing reliability and continuity for our web applications.
The solution requires maintenance when we want to configure or tweak any policy, which is when we seek support from the tech team.
Our team includes 30 engineers who use Radware WAF. We will recommend this product to other users because we have suggested it to our peers. Looking at the solution this tool has provided us, we find it beneficial enough to promote it to others.
On a scale of 1-10, I rate this solution a 9.