Barracuda Web Application Firewall vs. Symantec Edge Secure Gateway

Easy to use and reliable, with very little maintenance required and zero downtime to date. For the education sector, ease of use is hugely important as IT Managers/Technicians are often "Jack of all trades" with a good, broad general knowledge but perhaps lacking specific expertise in certain aspects. Being provided with easy-to-follow tutorials and instructions has been very useful in setting up and configuring the firewall, especially as my background is more in desktop support.

Incentivized

• In our organization, Symantec ProxySG and Advanced Secure Gateway (ASG) is our primary and second line of defense facing the internet
• It is positioned behind in conjunction with an intrusion protection service.
• Before using this concept of defense, our Internet firewalls were continuously being overworked and saturated, slowing down traffic as a result.
• It is not an option any more not to have Symantec ProxySG and Advanced Secure Gateway (ASG) in our infrastructure.

• Attack patterns are regularly updates through contents via Barracuda Web Application Firewall update servers
• Bot Protection has a good line feature to verify between the genuine clients like browsers and bots
• Dos Protection also good level of protection to mitigate Layer 7 attacks
• Allow Deny Rules provides a lot of granular controls to allow and deny the traffic
• URL profiles has a very granular control to mitigate false positives
• Parameter profiles has a very granular control to mitigate false positives
• Risk score feature for the clients to mitigate attacks is also very good feature
• Client fingerprint module can be used against malicious user to enhance security
• Separate XML and JSOn profile for all the URL profiles of the application is plus
• API security is very much effective and shadow API can also be identified

• In conjunction with Active Directory, we can allow or deny access to the internet very quickly. We can also determine the level of access to the internet.
• To satisfy our executive requirements, we can provide regular reports on internet usage.
• Malicious protection Symantec ProxySG and Advanced Secure Gateway (ASG) provides beyond our expectations.
• It is our first level of defense, thus allowing us to reduce our investment in internal security systems.

• STM crashes sometimes happen due to unusual traffic pattern
• Obfuscation on the client side user credentials which appears in the developer tools of browser
• URL Profiles redundancy during the learning of traffic needs to be fixed
• Dos Protection should be more granular like escalation period to throw JS challenge, Captcha and rate limit when escalation period hits until the WAF stops the attack
• Client Fingerprinting should work as expected when verifying the clients as in rare some scenarios, it creates issues

• On occasion, content analysis needs some tweaking. Specifically, when huge files our downloaded.
• For our organization using cloud-based applications and services is very discouraged.
• However, the universe seems to be trending towards cloud-based offerings.
• It may be reassuring if Symantec ProxySG and Advanced Secure Gateway (ASG) could enhance protection in dealing with cloud services, particularly in protecting data.

-User friendly interface for quick learning -Quick deployment for deploying applications -Easy to manage for naive -System components and upgradation of the WAF is very easy go with -Back restoration is very to make it up and ready anytime -Seperate JSON and XmL profiles for each URLs of the application is plus -Amazing and world class support engineer in comparison other vendors and always available to support -Quick resolution on bugs with their patch applying process

The Barracuda Web Application Firewall is easy to use. Support from Barracuda is great also. Load Balancing of the Web Application Firewall is also nice. This allows you to do maintenance or have large loads for the end-user. Threat monitoring of our network and traffic coming into our services within our cloud solution.

Incentivized

• We have submitted support request to Symantec ProxySG and Advanced Secure Gateway (ASG). In all cases, responses have been timely, and very comprehensive.
• The support staff is very knowledgeable and does not hesitate to involve expert resources as required.
• We have never had an unsolved case with Symantec ProxySG and Advanced Secure Gateway (ASG).

We have been using their Backup products especially Backup Appliances and legacy products like Intronis. We are also using their Cloud Backup Solutions for O365. This is the reason we opted for this product.

• Trend Micro IPS combined with Symantec ProxySG and Advanced Secure Gateway (ASG) is a winning formula for our organization
• Palo Alto next-generation Firewall. Could not handle the load and protection level that we have today.

• Easy for our IT team to use.
• We just ran it as a pilot for a few months but it was the cheapest solution at the time.

Incentivized

• With the advent of the Symantec ProxySG and Advanced Secure Gateway (ASG), we have reduced by 95% the number of internal security incidents and events.
• As a result, we have reduced the effort and cost of investigating security incidents.
• Knock on wood, as a result, and we have never had any data or security breaches.