F5 BIG-IP DNS vs. F5 BIG-IP

F5 BIG-IP DNS is well-suited for any organization looking to improve their Authoritative and Local DNS security and performance capabilities.

Incentivized

The scale, performance, and configuration for various scenarios have already been mentioned. The versatility, reliability, etc., are dependable and well-known. Being the industry leader, it is almost a standard, and no one can get fired for recommending F5 compared to some of the new offerings, which are not battle-tested.

Incentivized

• The easy of importing DNS records into the BIG-IP
• The ease of searching and locating records
• The speed of creating multiple records when you need to duplicate effort.
• The DNS dashboards to see requests and data points.

Incentivized

• Easy connection: you can connect to your corporate network with two clicks.
• IP restriction: F5 has a list of possible insecure IP numbers, if someone tries to connect using one of these numbers, F5 BIG-IP won't connect.
• Always on feature: Very handy feature, if you install always on, you won't need to click connect.

Incentivized

• More support documentation will be a nice to have.
• I have not automated DNS deployments yet, but it would be nice to have ansible libraries for this module. (I have used ansible for many others).

Incentivized

• I think the policy configuration that had some improvements on the ASM word things, improvements may be on the signatures that would be good because it's a little bit confusing on the ASL, how they are updated and deployed, and this staging. So that's something that could be.

Incentivized

Only way to to this type of tasks

Incentivized

Great customization and easy to use help reference menus

Incentivized

On the occasions when we've had to engage f5 support, they have been great. They have always resolved our issues quickly and been easy to work with and professional. The reason I give them a 10 out of 10, however, is because when we've had issues that have crossed over between the f5 BIG-IP, our Cisco switches, and our Microsoft IIS server the f5 support representatives have been extremely knowledgeable about every product and device involved and have been able to troubleshoot end-to-end without having to engage other vendors.

Incentivized

implementation is fine

Incentivized

F5 DNS is like DNS with out training wheels and data that can help you make real changes and improvements

Incentivized

So the cloud versions, and admittedly we did not do the Imperva on-prem solution. We only went with cloud. There's a lot of idiosyncrasies, like you can't use real IP addresses, you must snap. And that caused us problems with DNS and DNS routing. So we had to turn on some features with F5 that did remediate the issue, like using the one connect profiles, but that did cause some other problems identifying traffic and we had to make some eye roll changes to use the exported four headers.

Incentivized

• Protection against security threats using DNS as a vector.
• Protection against security threats targeting DNS itself.
• Provide top user experience to application clients, by directing their requests to where they will be treated with the best performance.

Incentivized

• F5 BIG-IP has a highly positive impact on the customers. The main impact is on the security of the web applications.
• F5 BIG-IP provides an easy and safe way to connect employees to assets and applications that reside in an on-premises environment.

Incentivized