Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Security at its finest
What do you like best about the product?
It is an easy and customizable way to use cloud based orchestration Kubernetes and to hae workflow editors to scale up, scale out, and focus on devsecops, Ioc's and malicious threat actors. This is thought of and done in the perspective of devsecops and cloud practitioners.
What do you dislike about the product?
Nothing - it is easy to use and not very hard to get value in time.
What problems is the product solving and how is that benefiting you?
Using Kubernetes in the form of devsecops and container runtime. Also cloud security posture management has been an important area.
- Leave a Comment |
- Mark review as helpful
Sr. DevOps Engineer
What do you like best about the product?
It is providing all insights in one place, you can visualize your data flowing and troubleshoot your network policy easily. Easy of implementation, customer support is very reliable,
What do you dislike about the product?
I can see other CNI vendors are using latest technologies but calico still using iptables. which makes your network slow in comparison to eBPF.
What problems is the product solving and how is that benefiting you?
It shows visibility of your network policies, and which make it easy to debug, because without it debug network blocked policy is nightmare.
Great solution for managing network policy and image scanning
What do you like best about the product?
The network policy recommendations are a great feature and provide an excellent starting point for policy generation. The network observability tool combined with the Kibana logs provides full visibility into what is happening with respect to allowed and denied traffic throughout the cluster. Calico Cloud makes managing network policy vastly easier. Tigera support is great; they have been very responsive.
What do you dislike about the product?
The pricing model is based on core counts, making it rather expensive both for compute-heavy clusters and for clusters that have a large number of smaller nodes. Registry scanning could be better integrated into the product.
What problems is the product solving and how is that benefiting you?
Calico Cloud enables us to easily view and manage network policy, and provides container image scanning within our clusters.
Great Container Security Solution with zero trust security approach
What do you like best about the product?
Calico Cloud addressed various security challenges for container platform, it extended l7 network policy capabilities with powerful & fleaxible configuration options and by default support zero trust security model. This helps us to be able to manage calico configurations via both gitops platform & application ci/cd processes in a secure way to meet requirements from vairous teams without many operation overheads. This helps boost the team efficiency.
It's a painless implementation process and easy quick to setup. Calico Cloud offers full package of container security features, e.g. runtime security, intrution detections, in-cluseter waf, observability, etc. more than just advanced network policy.
Tigera support is knowledgable and the provided training videos help quickly get familiar with its observability tooling and troubleshooting processes.
It's a painless implementation process and easy quick to setup. Calico Cloud offers full package of container security features, e.g. runtime security, intrution detections, in-cluseter waf, observability, etc. more than just advanced network policy.
Tigera support is knowledgable and the provided training videos help quickly get familiar with its observability tooling and troubleshooting processes.
What do you dislike about the product?
alerting & 3-rd party integrations hopefully can be improved.
network policy constructions user experience requires lots of domain knowledge, this might be difficult for beginners.
wireguard & l7 logging configs conflicts happened before, hopefully it will be resolved in the near future.
the dashboard has lots of information and might be confusing when you use it at the begining, it's a bit complex to use it and understand the end to end troubleshooting process
network policy constructions user experience requires lots of domain knowledge, this might be difficult for beginners.
wireguard & l7 logging configs conflicts happened before, hopefully it will be resolved in the near future.
the dashboard has lots of information and might be confusing when you use it at the begining, it's a bit complex to use it and understand the end to end troubleshooting process
What problems is the product solving and how is that benefiting you?
protect N-S, W-E traffic and adding observabilities and container runtime protections
A very good CNI solution, with some shortcomings
What do you like best about the product?
Calico Cloud is a great CNI solution, versatile regarding the supported protocols it will easily scale in most cloud, hybrid, and on-prem deployments. The BGP backend makes it easier to manage routes at scale, and it can integrate with BGP-only layer 3 datacenter fabrics as well.
Installation is quick, and thanks to a well-documented set of CRD resources, configuration is also pretty straightforward.
Calico also bundles the whole Tigera security/observability suite, which comes in handy to write more complex network policies which extend to hosts. The built-in manager web UI is also useful to quickly visualise what policies are deployed in any environment.
Installation is quick, and thanks to a well-documented set of CRD resources, configuration is also pretty straightforward.
Calico also bundles the whole Tigera security/observability suite, which comes in handy to write more complex network policies which extend to hosts. The built-in manager web UI is also useful to quickly visualise what policies are deployed in any environment.
What do you dislike about the product?
There are some shortcomings with some of the enterprise features, some of them suffer from small bugs which still have not been solved. Although support is quick to react, it can take a long time to obtain a proper bug fix in a next release.
The current network policy implementation, although solid, also suffers from limitations in terms of the selectors, which can lead to some rather complex workarounds. Also, the manager web UI is very limited and will not help a lot when troubleshooting denied flows. Most of the time, learning to use Kibana which is part of the installation and writing KQL queries will be more useful.
Although installation is easy, uninstalling Calico can be a bit difficult as the Tigera operator does not clean the installed resources. You will have to locate the remnants yourself, and delete them.
The current network policy implementation, although solid, also suffers from limitations in terms of the selectors, which can lead to some rather complex workarounds. Also, the manager web UI is very limited and will not help a lot when troubleshooting denied flows. Most of the time, learning to use Kibana which is part of the installation and writing KQL queries will be more useful.
Although installation is easy, uninstalling Calico can be a bit difficult as the Tigera operator does not clean the installed resources. You will have to locate the remnants yourself, and delete them.
What problems is the product solving and how is that benefiting you?
Calico Cloud enables us to extend Kubernetes network policies, and unify the network security operations under a single Kubernetes-based declarative worflow. It provides a way to author, deploy, manage, and monitor security policies in any Kubernetes cluster.
Great tool for network policy generation and cluser/container scanning
What do you like best about the product?
Network policy generation ardous task done manually. The network policy recommendations are great and make this a breeze. The network observabilty tool is wonderful to observe questionable traffic and possible network policy problems. Everything you need to easily work with network policy is right there. DNS rules are a major plus. The setup is really easy. Support is great.
What do you dislike about the product?
The recommended network policies sometimes generate overlappying/duplicate rules. I'd like to see better integration with Azure DevOps for container scanning. If no endpoints exist the monitor shows that their were denied flows (this happens in Allow Tigera tier).
What problems is the product solving and how is that benefiting you?
Calico gives us real time container scanning in the cluster as well as manual container scanning for use in breaking builds. I feel at peace knowing I'm aware of all traffic in and out of our clusters,
Constantly improving, cost-effective container and network security platform.
What do you like best about the product?
Very easy to integrate into kubernetes, deployment is quick and painless.
Tigera support is knowledgeable and helpful.
The network security policy recommendations are excellent.
Great visibility of traffic within the cluster.
Tigera support is knowledgeable and helpful.
The network security policy recommendations are excellent.
Great visibility of traffic within the cluster.
What do you dislike about the product?
The pricing model may not be that friendly for compute-intensive environments, but offers much more value than traditional network security appliances.
Configuration can be a little tricky to dial-in, but once setup properly it's basically "hands-free".
Many namespaces and pods are deployed as part of the installation, which comes with more overhead albeit minimal.
Configuration can be a little tricky to dial-in, but once setup properly it's basically "hands-free".
Many namespaces and pods are deployed as part of the installation, which comes with more overhead albeit minimal.
What problems is the product solving and how is that benefiting you?
We use Calico Cloud is our primary tool for securing our containerized workloads via policy including egress filtering via FQDNs, anomaly and threat detection, and namespace isolation to name a few.
Improvement can be done
What do you like best about the product?
The availability and speed of the saas solution
What do you dislike about the product?
manual created yaml files can not be imported
What problems is the product solving and how is that benefiting you?
Cloud calico can handle too many policies which we are having of our kubernetes clusters
A game-changer for managing network security and policies in Kubernetes clusters
What do you like best about the product?
1. Detailed network policy control
2. Scalability and efficiency
3. Effortless management
4. Prompt support
5. Seamless Integration
2. Scalability and efficiency
3. Effortless management
4. Prompt support
5. Seamless Integration
What do you dislike about the product?
Limited support coverage: While Calico Cloud offers self-managed and hosted options, the support coverage is still limited. It would be great if Calico Cloud support extend to Asia timezone.
What problems is the product solving and how is that benefiting you?
Cybersecurity, Scalability, Performance and Cost.
Awesome product
What do you like best about the product?
Once you get used to the navigation and layout, you discover the wealth of information at your fingertips.
The support and knowladge of the team is unmached and going the extra mile is second nature to them.
Once you are setup, upgrades and management is an easy task.
The support and knowladge of the team is unmached and going the extra mile is second nature to them.
Once you are setup, upgrades and management is an easy task.
What do you dislike about the product?
Intitial setup does tend to confuse new users.
What problems is the product solving and how is that benefiting you?
It simplifies securing the of containers and assits in resolving issues.
showing 1 - 10