Azure Application Gateway vs. SonicWall Web Application Firewall

The best practice for a cloud environment is to use the tools provided by the cloud provider. That's why for Azure cloud, Azure Application Gateway is the most cost-effective solution that you can use. You can use a single Azure Application Gateway instance for load balancing WAF, URL-based routing, and more.

Incentivized

SonicWall Web Application Firewall is appropriate to stay on the edge of our network and inspect all data that comes and goes in order to preserve the health of the network. In these scenarios, we are protected from DoS and DDoS attacks, malware threats, ransomware attacks, data theft, and others. Sonicwall's web application and threat management is intelligent and interrogates the behavior, communication logic, and, in addition, any changes and anomalies in the protocol.

Incentivized

• Uploading images by multiple end-users from several applications like web, mobile, etc.
• When there is a high volume of data requests, it helps to queue them based on the type of request. So it's easy to serve and reduce the loading time from the application layer.
• An application gateway is useful when it can identify the type of details the user is requesting.

Incentivized

• Content updates are automatic content lists of applications, URLs, virtual threats.
• Great visualization through graphics of traffic and threats.
• One of the best web content filters on the market.

Incentivized

• More cost-effective pricing plans are welcome for the future, especially for WAF
• Ability to automate the TLS certificate renewal procedure
• Ability to manage non-HTTP traffic

Incentivized

• VPN implementation
• Geo block rules

Incentivized

Most of the Application Gateway's features and services can be managed and re-configured via either the Azure Portal GUI or via the Azure Cloud Shell, thus allowing both CLI modes, i.e. Azure CLI (Bash) and Azure Powershell. The v2 version of Application Gateway has significantly improved performance during initial configuration or during re-configuration changes, thus making it much more usable for IT admins, as compared to v1.

Incentivized

I don’t like that it's part of the Microsoft brand. In general, I am not a fan of Microsoft products but Azure gets it right.

Incentivized

Technical support is a little expensive but it works. Any technical problem or not, SonicWall support helps in solving the problems. The SLA is fast and the service is also cordial, functional, and straight to the point. Support is essential to keep the tool always up-to-date with lists of malware, URLs, attacks, and others.

Incentivized

HAProxy is an excellent load balancer that can also be used in cloud environments (and we do!), and is relied by hyper-large enterprises globally as well. However, HAProxy is a little bit more rudimentary in feature space, it does the core job well and securely, but doesn't provide any fancy additional features. Also, it takes more effort to deploy HAProxy than simply using an in-built feature in the Azure stack.

Incentivized

Both products has their pro and cons. However in term of subscription and pricing for a small office, this offered better ROI as the office didn't want to spend too much and have something relative easy to manage.

Incentivized

• We are using Azure Application Gateway as the load balancing tool for our applications deployed on Azure Kubernetes Services (AKS) clusters.

Incentivized

• Relative easy to maintain
• Cut the cost of licenses

Incentivized