Check Point DDoS Protector vs. F5 BIG-IP Advanced Firewall Manager (AFM)

This Check Point DDoS Protector software is ideal to guarantee the protection of companies in the presence of DDoS attacks, regardless of whether they are known or unknown, it has an immediate detection and response to the presence of them, so it has the ability to stop attacks before they cause damage to the business infrastructure. Also even under attack provides high network performance and legitimate traffic, which is why it is ideal for mitigating threats at the network level as well as applications.

Incentivized

We were able to eliminate a firewall from our network architecture by integrating the module into our existing F5 BIG-IP Advanced Firewall Manager (AFM). This allowed us to save on tech refresh costs, since the F5 was able to handle the module without much additional strain on the device. However, if a firewall had features that the AFM lacked, then using that firewall in tandem with an F5 would be preferable.

Incentivized

• Most accurate DDoS Attack detection
• Network Behavioral Analysis
• Intrusion Prevention
• SSL-attack protection

• Load balancing using pools
• SSL offloading
• iRules for threat handling

Incentivized

• Sometimes it takes time to update device software.
• It offers scalable payment licenses, however it is important to have a good knowledge of how to handle this type of device.
• It does not allow the handling of several IP addresses, in addition it lacks a black and white list of data.
• Its configuration can be complex for a first time user, so it is important to have adequate knowledge for the proper functioning of the devices.

Incentivized

• If unsure, can be overly cautious.
• There are few changes the end user can make.

Incentivized

F5 Advanced Firewall Manager has been a solid, strong solution to both keep our systems safe and being seamless for our end users. Most of the time, the end-user is not impacted and does not even know F5 Advanced Firewall Manager is running which is exactly what we are looking for.

Incentivized

As the existing environment is mainly equipped with Checkpoint products and since the product has all leading features, we moved with Checkpoint DDoS protector.

Both F5 [BIG-IP Advanced Firewall Manager] and Radware require training as they are not easy to use. But Radware uses some configuration that needs deep learning and proper labs. From an admin's perspective, Configuration and management for F5 [BIG-IP Advanced Firewall Manager are] less. Also, the cost of implementing F5 [BIG-IP Advanced Firewall Manager] is lesser than that of Radware Alteon.

Incentivized

• It helps us to effectively minimize the presence of attacks in the environment of our organization.
• It allows us to maintain the continuity of legitimate traffic.
• It allows us to keep a really low level of false positives.
• It allows us a great saving of time and money due to the fact that it automatically blocks unusual behaviors.

Incentivized

• When we had to decide on whether to buy different hardware our team were all in support of renewal for F5 [BIG-IP Advanced Firewall Manager]
• F5 [BIG-IP Advanced Firewall Manager] requires proper training on tools and clear concepts of packets, headers, and content to create WAF policies
• Overall, we are satisfied by the ROI provided by our F5 AFM and GTMs

Incentivized