F5 BIG-IP DNS vs. Check Point DDoS Protector

F5 BIG-IP DNS is well-suited for any organization looking to improve their Authoritative and Local DNS security and performance capabilities.

Incentivized

This Check Point DDoS Protector software is ideal to guarantee the protection of companies in the presence of DDoS attacks, regardless of whether they are known or unknown, it has an immediate detection and response to the presence of them, so it has the ability to stop attacks before they cause damage to the business infrastructure. Also even under attack provides high network performance and legitimate traffic, which is why it is ideal for mitigating threats at the network level as well as applications.

Incentivized

• The easy of importing DNS records into the BIG-IP
• The ease of searching and locating records
• The speed of creating multiple records when you need to duplicate effort.
• The DNS dashboards to see requests and data points.

Incentivized

• Most accurate DDoS Attack detection
• Network Behavioral Analysis
• Intrusion Prevention
• SSL-attack protection

• More support documentation will be a nice to have.
• I have not automated DNS deployments yet, but it would be nice to have ansible libraries for this module. (I have used ansible for many others).

Incentivized

• Sometimes it takes time to update device software.
• It offers scalable payment licenses, however it is important to have a good knowledge of how to handle this type of device.
• It does not allow the handling of several IP addresses, in addition it lacks a black and white list of data.
• Its configuration can be complex for a first time user, so it is important to have adequate knowledge for the proper functioning of the devices.

Incentivized

F5 DNS is like DNS with out training wheels and data that can help you make real changes and improvements

Incentivized

As the existing environment is mainly equipped with Checkpoint products and since the product has all leading features, we moved with Checkpoint DDoS protector.

• Protection against security threats using DNS as a vector.
• Protection against security threats targeting DNS itself.
• Provide top user experience to application clients, by directing their requests to where they will be treated with the best performance.

Incentivized

• It helps us to effectively minimize the presence of attacks in the environment of our organization.
• It allows us to maintain the continuity of legitimate traffic.
• It allows us to keep a really low level of false positives.
• It allows us a great saving of time and money due to the fact that it automatically blocks unusual behaviors.

Incentivized