AWS WAF vs. Untangle NG Firewall

AWS WAF is highly appropriate to interrupt or prevent cyber attacks because when implementing rules, whether they are specific or centralized, so any application that has these vulnerabilities is protected.

Implementing managed rules creates greater security to protect both API and applications. If implemented along with other AWS tools, the security is much better, so if you want to protect applications against more specific attacks, it is ideal to integrate with Amazon CloudFront, which is a great benefit because it warns when thresholds are exceeded or specific attacks occur. AWS WAF is ideal to avoid common web attacks. For more specific attacks and scenarios, I don't recommend this.

Incentivized

Midsized business is where I have used it. Have used it to connect to other Untangle boxes across town and in other countries with NO issues and works with MS Domains across these VPN connections. Probably less appropriate for small home networks or large businesses.

Incentivized

• AWS WAF has the most developer-friendly API to create firewall rules.
• AWS WAF provides OWASP security controls, which reduces developers' burden (i.e., SQL injection and cross-site scripting).
• AWS WAF has customizable web security rules. The user can even push the rules through the API available, which is the great feature and helped me a lot.
• It protects applications at layer 7 (HTTP) of the OSI model and not just layer 4 (TCP).

Incentivized

• The firewall is easy to set up and manage.
• The open VPN while not as feature rich as some other options is rock solid and consistently needs nothing
• The web filter app is great, it's easy to block broad categories or specific things as well as white list whatever is needed.
• Support is responsive and accurate.

Incentivized

• The documentation offered is somewhat confusing, so it would be ideal if it were much more direct and precise.
• Your initial configuration may be confusing, so the best option is to use the rule templates provided by AWS.
• Its configuration is not unified with AWS, so it must be done separately and it takes some time.
• The number of rules to be established is somewhat limited.

Incentivized

• The UI could be a little flashier.
• Getting your license file moved from one firewall to another can be tough at times... but support is great if you need it.
• Ability to upload reports to a portal versus getting them emailed would be best (some reports can get 100+ Mb depending on all the bells and whistles).

Incentivized

We have been using AWS WAF for the past 3 years in front of our websites. We find it useful in preventing data crawling, DDOS attacks, etc on our websites, and hence we are going to use it in the future as well. AWS WAF is one of the best Firewalls in business.

Incentivized

Service renewal is in Feb 2021. We will be renewing!

The product is highly scalable. It is easy to configure the rules and thereby helps us to mitigate many vulnerabilities. The interface and programming of the firewall provisions were easy to setup. Amazon clearly spent a lot of time figuring this out and perfecting it. It allows users to do customized configurations based on their needs. It provides protection against a number of security issues like XSS, SQL injection, etc. I would definitely recommend this for protecting your infra as you scale, since this basically protects and filters all requests hitting your application server.

Incentivized

Generally works well but seeing more and more bugs with the OpenVPN app.

Incentivized

If you're intending to use AWS WAF, I would say that you absolutely should sign up for support. AWS Support is excellent and they can help you in a really good way to solve your issues.

Incentivized

The phone support reps are highly competent and native-English speakers. big plus vs some other vendors with difficult to understand or less knowledgable support engineers.

Incentivized

Easy of use. Setup and configuration is fairly quick. There are the usual advantages of it being a cloud solution where you can buy into the solution, configure it and set it up and get it up and running. If you are already a subscriber to AWS, having a native service has its advantages.

Incentivized

I could never come close with these two products to the level of functionality and security I have with Untangle. Simply put, there is absolutely no contest. In addition, the cost of these other solutions was many thousands more than the academic cost for Untangle. Many times have I experienced threats and inappropriate content passing through these other products. All of that was stopped the moment I implemented Untangle, even before I started to customize the settings.

Incentivized

• Somewhat costly if specific needs are not there.
• If security is concerned than comparatively is beneficial.
• All those price that spent on AWS WAF in return gets saved in man hours.

Incentivized

• Easy setup and implementation made ROI easy to achieve. An Untangle HA solution is 1/2-1/3 the cost of a comparable Cisco/Checkpoint/Palo Alto solution.
• non-business internet usage has nearly ground to a halt.
• SD-WAN integration made it easy to connect branch offices quickly without complicated IPSEC configuration.

Incentivized