Appgate SDP vs. F5 BIG-IP Access Policy Manager (APM)

It is best suited for larger companies with lots of remote workers that need complex access management. We've barely scratched the surface on what Appgate can do via its API.

Incentivized

I think that the platform is well suited to many Remote Access VPN solutions, but I also think there is a lot of room for improvement on the backend. If you are hoping to deploy your APM solution across many different datacenters or colos, it may not be the best choice for the final solution.

Incentivized

• Software-Defined perimeter
• Hide resources to non-authorized/authenticated users.

Incentivized

• SAML 2.0 identity federation support.
• Integrates with third-party SSO solutions.
• Bridging modern authentication and authorization (SAML, OAuth/OIDC) and classic authentication and authorization methods.
• Policy routing

Incentivized

• Live logging in the client. Currently you have to "download" the logs into a zip file and then open that zipfile to look at the logs. There's no logfile to tail or watch.
• Load balancing between controllers could be better. Currently relies on round robin DNS and sometimes a browser will pick a different IP than previous and you'll get a big "LOST CONNECTION TO CONTROLLER" message.

Incentivized

• There's some more advanced configurations within OAuth that I think could be fleshed out and easier to approach.
• There's a lot of things in F5 BIG-IP Access Policy Manager policies that I find myself recreating every policy. An easier way to copy objects from one to policy to another.

Incentivized

Integration with F5 BIG-IP systems that we plan to keep using for a while.

Incentivized

If F5 BIG-IP Access Policy Manager usability is fine it's not hard to use if you read the documentation but it does feel dated and could use a responsive design update to modernize user interface to current standards.

Incentivized

The company has been supportive overall of our needs and desired features. I have not personally called the support services, but I've heard no direct complaints either.

Incentivized

The existing system was FortiGate. The management of the system was a hassle. Because IT personnel had to manually create VPN accounts, user passwords were known to who created them and the end user did not have a way to change them. This created a security issue in the event an IT engineer left the company.

Incentivized

It is open platform so support is not good and than F5 and features visibility as not good as F5. F5 Set up and easy to use to admin console. Also have more feature visibility for load balancing, web server accelerator, application server ddos protection and WAF. F5 more efficient to handle concurrent request.

Incentivized

• We are achieving our goals with this tool by hiding resources behind it.
• It is a new model that requires a different thought process for many in network operations.

Incentivized

• Simplified our approach to company-wide VPN solutions greatly by allowing us to use a single product instead of multiple products like we had before
• Can handle 15000-20000 users at once with no issues
• Was able to configure to support users travelling with 4G connections on their laptops and accommodate constant changing IP addresses

Incentivized