| Capabilities | |
|---|
| Websites / FQDN | 1 | Unlimited | Unlimited |
|---|
| No. of Security Profiles | 1 | 1 per FQDN | Unlimited |
|---|
| Management | |
|---|
| Incident / Attack information | Yes | Yes | Yes |
|---|
| Periodic Threat Intel | Yes | Yes | Yes |
|---|
| Dashboards & Analytics | Limited | Limited | Advanced |
|---|
| Reporting | No | No | In-built and customizable reports |
|---|
| Two Factor Authentication | No | No | Yes |
|---|
| Integration | |
|---|
| SIEM Integration | No | No | Yes |
|---|
| SOAR Integration | No | No | Yes |
|---|
| API Integration | No | No | Yes (XML or JSON) |
|---|
| Custom Threat Intel (3rd party TI Integration) | No | No | Yes |
|---|
| Email Notification | No | No | Yes |
|---|
| AAA Integration (TACACS+ and RADIUS) | No | No | Yes |
|---|
| Export IOCs via STIX / TAXII | No | No | Yes |
|---|
| Identity Management (AD / SAML / LDAP/ TOTP) | No | No | Yes |
|---|
| Backup / Storage | No | No | Yes |
|---|
| High Availability | No | No | Yes |
|---|
| WAF Features | |
|---|
| Blacklist/ whitelist IP Address | Yes | Yes | Yes |
|---|
| Geo Fencing | Yes | Yes | Yes |
|---|
| Rate Limiting | Yes | Yes | Yes |
|---|
| L7 DDoS Protection | Yes | Yes | Yes |
|---|
| Malicious Source Protection | Basic | Comprehensive | Advanced |
|---|
| Anti-Automation Protection | Basic | Comprehensive | Advanced |
|---|
| BOT management | Yes | Yes | Yes |
|---|
| Haltdos Rulesets | Comprehensive | Comprehensive | Advanced |
|---|
| API & WebSocket Protection | Yes | Yes | Yes |
|---|
| SSL/TLS Management | Yes | Yes | Yes |
|---|
| Device Fingerprinting | Yes | Yes | Advanced |
|---|
| Request Header Management | Yes | Yes | Yes |
|---|
| URL Redirection rules | Yes | Yes | Yes |
|---|
| Negative Security Model | Yes | Yes | Yes |
|---|
| Positive Security Model | No | Yes | Yes |
|---|
| Custom Error page handling | No | Yes | Yes |
|---|
| XML & JSON Policy Management | No | Yes | Yes |
|---|
| Captcha Challenge | No | Yes | Yes |
|---|
| Custom Error page handling | No | Yes | Yes |
|---|
| AI based Attack Detection / Mitigation | No | No | Yes |
|---|
| Virtual Patching | No | No | Yes |
|---|
| Mobile App Protection | No | No | Yes (Anti-BOT Mobile SDK) |
|---|
| AV Scanning | No | No | Yes |
|---|
| Security Breach Prevention / Response Filtering | No | No | Yes |
|---|
| Protection against tampering and Website defacement | No | No | Yes |
|---|
| Correlation Engine | No | No | Yes |
|---|
| Decoys to protect against advanced bots / crawlers | No | No | Yes |
|---|
| Client Certificate access Management | No | No | Yes |
|---|
| Advanced BOT Protection using Crypto Challenge | No | No | Yes |
|---|
| Load Balancing | |
|---|
| Load Balancing Algorithms | Yes | Yes | Advanced |
|---|
| Server Health Monitoring | Yes | Yes | Yes |
|---|
| Fail-over Management | Yes | Yes | Yes |
|---|
| Custom Webpages | No | Yes | Yes |
|---|
| Support for client NAT & Routing | No | Yes | Yes |
|---|
| Upstream TLS protocol selection | No | Yes | Yes |
|---|
| Caching | No | Yes | Yes |
|---|
| Compression | No | Yes | Yes |
|---|
| Advanced Loadbalancing | No | No | Yes |
|---|
| TCP Optimization | No | No | Yes |
|---|