All of the organizations where I implemented this product had a primary objective to safeguard the platform against undesirable traffic, including protection against DDoS attacks, filtering out phishing attempts, preventing SQL injection, and other types of intrusions.

The most significant impact came from the implementation of bot filtering and defenses against SQL injection and script injection in general. It stands out as the primary focus because, in contrast to DDoS attacks which, while devastating, are relatively infrequent, the continuous scanning of ports and persistent attempts to gain unauthorized access to the platform happen daily. This is where the solution excelled, offering finely tuned filtering capabilities for specific types of traffic and country-specific IP ranges. 

There is a potential improvement regarding simplifying the complexity of rule creation. It would be beneficial if it had a workflow or a feature that could fine-tune settings based on high-level requirements. For example, setting up traffic filters for specific regions or closing certain ports without the need to manually translate these into rules.

I have been working with it for eight years.

We haven't encountered any failures. It is a highly resilient product that can handle significantly larger workloads and high volumes of traffic with ease.

I witnessed the level of protection they provide, especially during a digital attack that spanned across entire continents and was directed at us. It became evident just how intelligently the product is engineered. It effectively scaled to shield our platform while still allowing legitimate traffic to reach our servers. From that perspective, the scalability of the product is truly exceptional.

My overall experience was highly satisfying. In the particular incident when we faced a major attack on our platform, which happened several years ago, we spent several hours on the phone with them until they effectively neutralized the attack and filtered out all the traffic originating from a very specific geographic location. Also, in every other instance where we needed support, whether it was for configuring roles or for immediate assistance during an attack, their response has consistently been rapid and highly effective. 

Positive

The initial setup process is quite straightforward. Its complexity largely depends on the intricacies of your platform. If your platform spans multiple sites across the globe, requiring configuration of multiple instances and traffic routing, it can become more intricate. From our experience, even in companies with extensive platforms, the configuration process remains relatively simple. Once the instances are spun up and the initial configurations are in place, you can use their console application to set up your site or sites for traffic management. This involves configuring the sites and uploading SSL certificates. Even for those not well-versed in the intricacies of networking layers and rules, the out-of-the-box configurations already provide solid protection.

We found the cost to be a bit on the higher side, starting at approximately three to four thousand dollars for a small configuration. It is worth mentioning that these figures might not be current. Additionally, they are open to negotiations, and we were able to secure a substantial discount. They even offered extended trial periods lasting three, four, or even six months, essentially providing the product for free during that time. This flexibility in pricing certainly works in their favor and contributes to the appeal of considering them for the long term.

The suitability of this product depends on the specific circumstances of the business. If you're a small business owner running a simple operation I wouldn't recommend opting for it, as it might be a tad pricey for an entry-level scenario. To the best of my knowledge, they didn't offer a free tier the last time I checked, so the initial cost for even the most basic configuration might be a bit steep for a small-scale setup. There are alternative products available, some of which offer free or very affordable options. These alternatives often come with reduced functionality compared to what this product offers, but they can serve as cost-effective replacements. For instance, Amazon provides a basic Web Application Firewall (WAF) as part of their services, which, while not as robust as what this product offers, provides a level of protection for your online services. For medium to large businesses seeking robust support and a comprehensive product to safeguard their platform, this product is a solid choice as it generally offers above-average satisfaction and a comprehensive range of features that can effectively protect your online assets. It ultimately depends on your unique needs. I would rate it nine out of ten.