Listing Thumbnail

    SecureSphere WAF AV2500 Gateway for AWS (On-Demand)

     Info
    Sold by: Imperva 
    Deployed on AWS
    Free Trial
    Imperva SecureSphere Web Application Firewall (WAF) for AWS is the world's leading WAF, and is the first enterprise-class WAF tailored specifically for AWS. Running natively in AWS, and leveraging all its capabilities, SecureSphere for AWS scales on-demand with AWS applications.

    Overview

    Play video

    Imperva SecureSphere WAF for AWS extends all of the security and management capabilities of the world's most-trusted web application firewall to Amazon Web Services environments. SecureSphere for AWS is the first enterprise-class Web Application Firewall tailored specifically for Amazon Web Services. Running natively in AWS, and leveraging all its capabilities, SecureSphere for AWS scales on-demand with AWS applications. SecureSphere applies multiple defenses and correlates results to offer laser-accurate attack detection. Certified by ICSA Labs, SecureSphere addresses PCI 6.6 and provides ironclad protection against the OWASP Top Ten, including SQL Injection, XSS and CSRF. Note that AV2500 provides up to 500 Mbps throughput.

    Highlights

    • Automated Protection - Patented Dynamic Profiling technology streamlines management and lowers operations costs by learning application changes over time. Security updates from the Imperva ADC protect applications against the latest threats.
    • Flexible Deployment Options - The SecureSphere WAF offers organizations automated, adaptable security and easy deployment into Amazon environments with full support for elastic load balancing and CloudFormation.
    • Fraud and Automated Attack Protection - With advanced bot detection capabilities, IP Reputation, granular custom rules, and fraud integration, SecureSphere stops dangerous threats like site scraping, application DDoS, comment spam, and web fraud.

    Details

    Categories

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    CentOs 7.9

    Deployed on AWS

    Unlock automation with AI agent solutions

    Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
    AI Agents

    Features and programs

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    SecureSphere WAF AV2500 Gateway for AWS (On-Demand)

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (25)

     Info
    Dimension
    Cost/hour
    c5a.2xlarge
    Recommended
    $3.33
    m5.xlarge
    $3.33
    m4.xlarge
    $3.33
    m5.2xlarge
    $3.33
    m4.2xlarge
    $3.33
    c4.xlarge
    $3.33
    c6i.8xlarge
    $3.33
    c7i.8xlarge
    $3.33
    c5a.xlarge
    $3.33
    c5.2xlarge
    $3.33

    Vendor refund policy

    We do not support refunds, but customers can cancel at any time. Contact Imperva for more information.

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Additional details

    Usage instructions

    AUTOMATIC DEPLOYMENT (RECOMMENDED)

    Imperva simplifies the deployment of your WAF Gateway infrastructure on AWS by providing dynamically generated CloudFormation and Terraform templates tailored to your specific requirements via the Imperva Cloud Template Tool.

    For detailed instructions and additional information: https://docs.imperva.com/bundle/v15.0-waf-on-amazon-aws-byol-installation-guide/page/10450.htm 

    MANUAL DEPLOYMENT

    DISCLAIMER: This procedure is not intended for use in large-scale production environments. For a best-practice installation, use the automated deployment method.

    1. Create a VPC, a key pair and at least one subnet.
    2. Create a security group for the Management Server and another security group for the Gateway instances.
    3. Create the following inbound rules:
      • [Management Server SG] ==> [Gateway SG] @ TCP:443
      • [Gateway SG] ==> [Management Server SG] @ TCP:8083, TCP:8085
      • [Administrative IP ranges] ==> [Management Server SG] @ TCP:8083, TCP:22
      • [Administrative IP ranges] ==> [Management Server SG] @ TCP:22
      • [Administrative IP ranges] ==> [Gateway SG] @ TCP:22
      • [Client ranges] ==> [Gateway SG] @ [reverse proxy ports] (variable)
    4. Launch your first instance using the product's AMI. For the instance's security group, select the Management Server security group you've created.
    5. Wait for the instance's status checks to pass and SSH into the instance as root using the supplied key pair's private key.
    6. Execute the First-Time login command below to configure your instance as a Management Server. This process can take up to 20 minutes.

    /opt/imperva/impcli/commands/ftl --silent --product WAF --component Management --grub_password <grub_password> --database_password <database_password> --secure_password <secure_password> --system_password <system_password> --timezone <timezone> --model_type AVM150

    • Replace all <variables> with your own values.
    • After running the FTL, root access via SSH will be blocked by default as a security measure. To undo this, delete the contents of /etc/security/access.conf and add the following line:

    +:root:ALL

    1. Once the First-Time Login has finished successfully, access your Management Server's user interface from a browser (https://<MX_IP>:8083).
    2. Accept the EULA and set the admin password as requested.
    3. Supply your license file or FlexProtect activation code (obtained from Imperva). Wait for the license upload to complete and verify you're able to log in as the admin user.
    4. To create Gateways, launch one or more instances from the same AMI, attached to the Gateway security group.
    5. Once the instances have passed all status checks, SSH into each instance and execute the following commands to configure it as a Gateway:

    bootstrap_set //bootstrap/product/components/gateway/cloud gateway_group "aws"

    /opt/imperva/impcli/commands/ftl --silent --component Gateway --model_type <AV1000 or AV2500> --management_ip <management_server_ip> --secure_password <secure_password> --system_password <system_password> --imperva_password <imperva_password> --grub_password <grub_password> --product WAF --timezone UTC --gateway_mode reverse-proxy-hades --gateway_group aws --is_advanced_bridge Disabled

    • Replace all <variables> with your own values.
    • For <management_ip>, supply the private IP of the Management Server instance created earlier.
    • For model_type, enter either AV1000 or AV2500 based on your license's supported Gateway modules. The AV2500 model provides the highest performance.
    1. After successfully running the FTL on all instances, log in to your Management Server's user interface, navigate to Setup > Gateways and verify that all Gateways appear as Running under the aws Gateway group. This might take up to 5 minutes after completing the FTL.
    2. Refer to the user guide to configure your environment as desired and protect your applications: https://docs.imperva.com/bundle/v15.3-waf-user-guide/page/70414.htm 

    Support

    Vendor support

    Imperva's team of Support Engineers is positioned across the globe to provide 24x7x365 coverage, and can be contacted by phone, email, or online via our Self Service Support Portal. Visit the Imperva Support page above for more details.

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    10
    In Databases & Caching, Network Infrastructure
    Top
    25
    In Data Analysis

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    0 reviews
    Insufficient data
    Insufficient data
    Insufficient data
    Insufficient data
    15 reviews
    Insufficient data
    Insufficient data
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Web Application Firewall
    Enterprise-class web application firewall with multiple defense layers and attack detection capabilities
    Threat Protection Mechanism
    Advanced bot detection with IP reputation, custom rules, and protection against OWASP Top Ten vulnerabilities like SQL Injection, XSS, and CSRF
    Dynamic Security Profiling
    Patented dynamic profiling technology that learns and adapts to application changes over time
    Cloud Native Architecture
    Natively runs in AWS environment with full support for elastic load balancing and CloudFormation integration
    Performance Specification
    Provides up to 500 Mbps network throughput with ICSA Labs certification
    Database Activity Monitoring
    Real-time monitoring and tracking of database activities across multiple database engines and platforms
    Data Masking Capabilities
    Dynamic and static data masking techniques for protecting sensitive information like PII and PHI
    Sensitive Data Discovery
    Automated identification and classification of sensitive data across various database systems and data lakes
    Multi-Database Support
    Comprehensive security coverage for SQL and NoSQL databases, including RDS, Aurora, DynamoDB, Redshift, and other enterprise databases
    Compliance Automation
    Automated compliance support for privacy regulations including HIPAA, SOX, PCI DSS, GDPR, and ISO27001 standards
    Data Access Control
    Dynamically enforces fine-grained data access control on AWS services using advanced privacy enhancing technologies
    Policy Management
    Enables writing data security policies in plain language or as-code, enforcing them consistently across multiple data sources
    Sensitive Data Discovery
    Provides capabilities to tag and classify sensitive data, creating accurate metadata for data security purposes
    User Activity Monitoring
    Continuously tracks user query behavior in real-time, providing insights into potential risky data access activities
    Attribute-Based Access Control
    Implements attribute-based access control (ABAC) mechanism to simplify and enhance data security policy management

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    0 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    0%
    0%
    0%
    0%
    0%
    0 AWS reviews
    |
    59 external reviews
    Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
    Financial Services

    Good solution but poor support in my region

    Reviewed on Jul 29, 2025
    Review provided by G2
    What do you like best about the product?
    It is a reliable cybersecurity solution that has many tools to help protect web applications.
    What do you dislike about the product?
    It is very expensive for our South American region and the support from the partners is bad.
    What problems is the product solving and how is that benefiting you?
    The technical support from the local partners is bad.
    Bhupesh-Sharma

    Experience swift configuration with enhanced web and mobile application security

    Reviewed on Dec 17, 2024
    Review provided by PeerSpot
    ">

    What is our primary use case?

    The solution functions just like a firewall, but it operates in the cloud. It is designed to protect web applications and environments hosted on the cloud. 

    It helps protect applications from DDoS attacks and other types of attacks. I handle a wide range of business requirements with it.

    What is most valuable?

    The solution can be configured in just a couple of minutes. It ensures 99.7% availability for my applications. It provides an additional layer of security for web applications and other applications, including mobile applications. It protects my environment and helps maintain my reputation in the market.

    What needs improvement?

    It is not a personal firewall, however, I can log my traffic to the Web Application Firewall  if my hardware is available on-premise. I am satisfied with all the features available. There is nothing specific where the application firewall is falling short.

    For how long have I used the solution?

    I have been working with Imperva solutions personally since last month.

    What do I think about the stability of the solution?

    I would rate the solution ten out of ten in terms of stability.

    What do I think about the scalability of the solution?

    The solution is highly scalable. I can configure this firewall to expand based on my needs and revert to my basic configuration when traffic is over.

    How are customer service and support?

    Technical support is divided into two categories: partner side and OEM side. It is easy to contact them, and my queries are resolved efficiently.

    How would you rate customer service and support?

    Positive

    How was the initial setup?

    The initial setup is very easy. I just need to route the traffic, similar to configuring an IP on the application firewall. It typically takes no more than a day and is easy, rated at nine out of ten.

    What's my experience with pricing, setup cost, and licensing?

    The pricing is competitive in the market. The solution helps improve my security posture and operational costs.

    Which other solutions did I evaluate?

    There are other solutions available in the market, however, Imperva Web Application Firewall  is a good solution.

    What other advice do I have?

    I would recommend Imperva Web Application Firewall  to others. 

    Overall, I would rate it eight out of ten as it is a good solution. However, there are other solutions in the market.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    reviewer2586675

    Effective security breach prevention with automatic updates and customer-focused support

    Reviewed on Nov 11, 2024
    Review provided by PeerSpot
    ">

    What is our primary use case?

    We are a premier partner with Imperva. We usually recommend Imperva Web Application Firewall  (WAF ) more because our customers sometimes get a better deal, and many already have Imperva solutions on-premises. We help them move to the cloud and other related tasks.

    How has it helped my organization?

    Customers enjoy the rules implemented in Imperva WAF , which are updated automatically any time a new breach is discovered. This eliminates the need for backend changes or manual updates, making the system straightforward.

    What is most valuable?

    The valuable features of Imperva WAF include its effective security breach prevention through automatically updating rules. The support team answers cases quickly as well.

    What needs improvement?

    The product's customization capabilities are a bit problematic, requiring support cases for backend modifications. 

    Additionally, the handling of high-traffic volumes could be better, as it doesn't cut you off if you exceed your purchased traffic. Our clients like the guarantee that they won't be charged for exceeding traffic during peak periods. Users also need to be more attentive to false alerts, as the marketing might give a false sense of trust.

    For how long have I used the solution?

    I have been dealing with Imperva for three years, while my company has been involved for more years.

    What do I think about the scalability of the solution?

    Imperva WAF does not appear to handle high traffic volumes optimally during peaks as it only notifies clients if they exceed their purchased amount of traffic. However, it does not immediately cause any issue unless the excess persists over time.

    How are customer service and support?

    Their technical support is rated nine out of ten. Support cases are answered quickly.

    How would you rate customer service and support?

    Positive

    How was the initial setup?

    The setup is straightforward. Clients often manage it themselves, and no action is required on their end for implementation.

    What about the implementation team?

    On occasion, we help our clients get on the cloud as part of our partnership with Imperva.

    What's my experience with pricing, setup cost, and licensing?

    The pricing tends to be expensive. As premier partners, we get good deals, however, without such deals, it is usually quite costly. The cost also varies based on the plan that clients choose.

    What other advice do I have?

    Imperva Web Application Firewall is recommended for companies needing a robust cloud-based solution. For on-premises versions, it might be considered outdated.

    I'd rate the solution nine out of ten.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    Andrey Ustynov

    Enhanced security with profile functionality

    Reviewed on Nov 06, 2024
    Review provided by PeerSpot
    ">

    What is our primary use case?

    I use the service for protection due to the fact that it has profile functionality.

    What is most valuable?

    Protection is the best solution since it has profile functionality.

    Which other solutions did I evaluate?

    Interesting alternatives are Akamai and some cloud solutions do exist.

    Which deployment model are you using for this solution?

    On-premises
    reviewer2584497

    Enhance security with ease through user-friendly administration and comprehensive threat prevention

    Reviewed on Oct 15, 2024
    Review provided by PeerSpot
    ">

    What is our primary use case?

    We use Imperva for our web applications that we have hosted to protect them.

    How has it helped my organization?

    With our deployment setup, the benefit is regarding the security and how threats have been blocked. It's not studied in terms of resources or speed. The threat prevention is the aspect we are monitoring.

    What is most valuable?

    Empower administration is user-friendly, and we do not need much for managing day-to-day operations. It is easy to use and has good security. Also, it is very customizable, especially for controlling web browsers and devices.

    What needs improvement?

    I would prefer AI integrations for user administration, visualization, log analytics, and risk analysis. If they can bring i n generative AI features, that would be useful.

    For how long have I used the solution?

    I am working with Imperva at the moment and have been using it for maybe six to seven years.

    What do I think about the stability of the solution?

    It's very stable. We haven't had any issues.

    What do I think about the scalability of the solution?

    Scalability is not a problem since we have enough resources as it's an on-premises version.

    How are customer service and support?

    We have escalated to tech support and it's quite good. I would rate them a seven point five out of ten.

    Which solution did I use previously and why did I switch?

    We didn't use any WAF  product before Imperva.

    How was the initial setup?

    The initial deployment was seamless, and there weren't many complexities.

    What about the implementation team?

    The deployment was done by a separate company within the company.

    Which other solutions did I evaluate?

    I do not have much understanding about F5 yet as I am currently evaluating their solution.

    What other advice do I have?

    I suggest looking for a cloud-based solution rather than on-premises, which might improve availability, stability, and security.

    I'd rate the solution nine out of ten.

    Which deployment model are you using for this solution?

    On-premises
    View all reviews