F5 BIG-IP DNS vs. F5 BIG-IP Advanced Firewall Manager (AFM)

F5 BIG-IP DNS is well-suited for any organization looking to improve their Authoritative and Local DNS security and performance capabilities.

Incentivized

We were able to eliminate a firewall from our network architecture by integrating the module into our existing F5 BIG-IP Advanced Firewall Manager (AFM). This allowed us to save on tech refresh costs, since the F5 was able to handle the module without much additional strain on the device. However, if a firewall had features that the AFM lacked, then using that firewall in tandem with an F5 would be preferable.

Incentivized

• The easy of importing DNS records into the BIG-IP
• The ease of searching and locating records
• The speed of creating multiple records when you need to duplicate effort.
• The DNS dashboards to see requests and data points.

Incentivized

• Load balancing using pools
• SSL offloading
• iRules for threat handling

Incentivized

• More support documentation will be a nice to have.
• I have not automated DNS deployments yet, but it would be nice to have ansible libraries for this module. (I have used ansible for many others).

Incentivized

• If unsure, can be overly cautious.
• There are few changes the end user can make.

Incentivized

F5 Advanced Firewall Manager has been a solid, strong solution to both keep our systems safe and being seamless for our end users. Most of the time, the end-user is not impacted and does not even know F5 Advanced Firewall Manager is running which is exactly what we are looking for.

Incentivized

F5 DNS is like DNS with out training wheels and data that can help you make real changes and improvements

Incentivized

Both F5 [BIG-IP Advanced Firewall Manager] and Radware require training as they are not easy to use. But Radware uses some configuration that needs deep learning and proper labs. From an admin's perspective, Configuration and management for F5 [BIG-IP Advanced Firewall Manager are] less. Also, the cost of implementing F5 [BIG-IP Advanced Firewall Manager] is lesser than that of Radware Alteon.

Incentivized

• Protection against security threats using DNS as a vector.
• Protection against security threats targeting DNS itself.
• Provide top user experience to application clients, by directing their requests to where they will be treated with the best performance.

Incentivized

• When we had to decide on whether to buy different hardware our team were all in support of renewal for F5 [BIG-IP Advanced Firewall Manager]
• F5 [BIG-IP Advanced Firewall Manager] requires proper training on tools and clear concepts of packets, headers, and content to create WAF policies
• Overall, we are satisfied by the ROI provided by our F5 AFM and GTMs

Incentivized