Web Application Firewall (WAF) Security Value MapTM

About the NSS Labs Security Value MapEmpirical data from our individual Product Analysis Reports (PARs) and Comparative Analysis Reports (CARs) is used to create the unique Security Value MapTM (SVM). The SVM provides a quick, clear overview of the relative value of security investment options by mapping security effectiveness and value (TCO per protected-CPS) of tested product configurations. The SVM depicts the value of a deployment of 4 WAF devices and 1 central management console for each vendor.

How To Use The SVMMapping the data points against the average protection and average value results in four quadrants on the SVM. Each vendor is represented by two dots. The upper dot reflects the products optimum security configuration and capability when properly tuned. The lower is when protections are disabled in order to eliminate false positives, which reduces the security efectivness of the device.The top right quadrant contains the NSS Recommended category – these devices provide a very high level of protection and value.The bottom left quadrant contains the NSS Caution category – these products offer both low value and security effectiveness ratings.The remaining two quadrants comprise the Neutral category – these products may still merit a place on your short list based on specific requirements.

ImpervaBarracuda

F5 Citrix

Sangfor

Fortinet 100%

TCO per Protected-CPS

99%

98%

97%

96%

95%

94%

93%

92%

91%

90%

89%

88%

87%

86%

85%

84%

83%

82%

81%

80%$5 $0$10$15$20

Product Legend

Citrix NetScaler AppFirewall MPX 11520

F5 Big-IP ASM 10200Fortinet FortiWeb 1000D

Imperva SecureSphere x6500Sangfor M5900-F-I

Barracuda Networks Web Application Firewall 960

Aver

age

Average