Check Point Harmony SASE vs. F5 BIG-IP Access Policy Manager (APM)

I'd suggest that Perimeter81 is recommended when you want something that is easy to administrate, with little maintenance, unlike a VPN/secure network that you host and manage internally. We've had incidents when there has been downtime at Perimeter81, which has effectively locked us out of some of our secure services (anything locked down via IP). They have made improvements to their infrastructure and it seems to have improved in recent months, but this is something to keep in mind for critical connections

Incentivized

I think that the platform is well suited to many Remote Access VPN solutions, but I also think there is a lot of room for improvement on the backend. If you are hoping to deploy your APM solution across many different datacenters or colos, it may not be the best choice for the final solution.

Incentivized

• Simple easy to read icon.
• You can hover over and see if you are logged in via the systems tray on your computer.
• Easy to switch between regions around the world.

Incentivized

• SAML 2.0 identity federation support.
• Integrates with third-party SSO solutions.
• Bridging modern authentication and authorization (SAML, OAuth/OIDC) and classic authentication and authorization methods.
• Policy routing

Incentivized

• Customer support was lacking before, now seems better.
• Had much difficulty using Chrome as my browser to install the app.
• Increase the throughput speeds at time would be nicer.

Incentivized

• There's some more advanced configurations within OAuth that I think could be fleshed out and easier to approach.
• There's a lot of things in F5 BIG-IP Access Policy Manager policies that I find myself recreating every policy. An easier way to copy objects from one to policy to another.

Incentivized

Integration with F5 BIG-IP systems that we plan to keep using for a while.

Incentivized

Once things are set up, it is nice and easy to get the Edge Client running on user's PCs. However, that setup process can be a bit daunting at first using the Policy Manager, and reviewing session logs can be difficult at first if you aren't 100% sure of what you're looking for.

Incentivized

In the beginning, it was a bit rough getting it to work and getting any kind of quality support from customer service. But recently they really improved their service and customer service. I believe they raise 100M in new funding which provides them the resources to make a better product with better tools and a better help desk.

Incentivized

It is open platform so support is not good and than F5 and features visibility as not good as F5. F5 Set up and easy to use to admin console. Also have more feature visibility for load balancing, web server accelerator, application server ddos protection and WAF. F5 more efficient to handle concurrent request.

Incentivized

• I think it is just a cost of doing business.
• I don't think the cost is too prohibitive.
• We also use it as an example of what a small cost can provide big protection for your security.

Incentivized

• Single sign on is great for students and faculty and staff
• Users don't have to log in multiple times
• Users don't need to remember multiple login IDs and passwords
• Multi Domain SSO support bridges many internal and external facing products with single sign on

Incentivized