F5 Big-IP Advanced WAF vs. F5 Distributed Cloud API Security

I believe that in industrial environments like ours where we have to have bare metal devices near the production environment combined with hybrid cloud, that is a good platform. That's a good use case. It optimizes traffic. It helps us stay more secure in our data centers. Now with regards to that are fully operating in the cloud, I'm not really sure if we would make the same decision considering the option that I said to have something that is self-provision to avoid too much management of virtual machines on the cloud. So that's an area of improvement.

Incentivized

I believe it covers everything related to the applications' security aspects, but there are a lot of improvements that need to be made. For example, better granular controls like bot categories listed on the distributed console and a granular URL-based control for the rate-limiting option are needed.

Incentivized

• So the product definitely is helping us for sudden attacks through DDOS, some injection ingestion into UI URLs, and definitely it's capturing those and I definitely see that as an advantage for us. They can stop the hackers from using our endpoints.

Incentivized

• It auto-discovers APIs, even the ones engineers forget to document. Then profiles them without needing changes to our codebase.
• Shadow API exposure.
• It's pretty decent at abnormal behavior detection.

Incentivized

• The UI for events. E.g., clicking the "Accept" button does nothing.
• Traffic learning suggestions are often very incorrect. We were originally suggested to use "Automatic" learning, and had to completely scrap the policy due to the suggestions.
• "All in one" dashboard for viewing application URL/parameter overrides per policy.

Incentivized

• More accurate detection of advanced persistent threats (APTs) targeting APIs.
• A greater emphasis on checking APIs' schema and contract may prevent them from accepting misconfigurations or malicious input.
• More customized, dynamic, and targeted protection for high-value APIs or high-risk user groups.

Incentivized

We just love work with f5

Incentivized

F5 Distributed Cloud API Security provides robust API protection with solid threat detection, excellent visibility, and seamless integration into our architecture

Incentivized

Most* of it is very intuitive and easy to use. The "Help" section is fairly fantastic. See some of my other comments about things like the "Traffic Learning" section being wildly wrong sometimes, and also the event logs with UI buttons that don't do anything. Overall though, it's an excellent product.

Incentivized

Great product. Working with F5 for many years, we found the products F5 provided are all cutting edge technology. Although in F5 Distributed Cloud API Security we still have a lot to find out, but we believe this experience will be very good. Especially on the security side. Trust in F5.

Incentivized

Always available

Incentivized

The UI is cloud-native and generally responsive. Report generation is easy Integrates with cloud providers

Incentivized

Highly knowledgeable engineers who understand complex networking and application-delivery issues.


Strong escalation paths — once a case reaches senior engineers, resolutions are fast and accurate.


Comprehensive documentation and many self-service resources for troubleshooting.


Clear communication with well-structured updates throughout the ticket lifecycle.


Excellent for critical incidents, with reliable guidance during high-severity outages.


Deep product expertise across BIG-IP, ASM/Advanced WAF, GTM/DNS, and modern F5 services.

Incentivized

Lo hacemos mediante un partner We did it through a partner

Incentivized

F5 Distributed Cloud API Security is our company looking forward product. With more and more API is using in both on prem, private cloud, public cloud and multi cloud environment, we as a financial institution, we are keep into the security settings to protect the information. That's the main reason we want to use this product.

Incentivized

-Stable data path equals to less crashes -Almost all the features working as expected -Provides more granular controls in allowing false positives -Request evaluation is accurate -Irules feature is a plus

Incentivized

We ran a short POC with Salt. Its data classification and attack replay features were impressive. What held us back was the limited support for hybrid deployments and poor integration into our CI/CD pipelines, as F5 did.

Incentivized

Centralized policy management: You can manage API security policies consistently across locations without duplicating effort, which supports scaling.


API discovery and monitoring at scale: It automatically discovers APIs and monitors them in real time across large and complex environments.

Incentivized

• In our case it has been great because the pricing is just right for all the features that we have on the platform and the flexibility. In fact, we acquired another license last year, so that's something that we're interested in. We are currently moving towards the cloud with our ERP systems and eliminating the IBM platform, so we would like to see that F5 virtual option available on Azure.

Incentivized

• F5 Distributed Cloud API Security mitigates many API-related security threats, including bot attacks, DDoS, data breaches, and unauthorized access attempts.
• F5 Distributed Cloud API Security uses robust threat detection, machine learning, and real-time monitoring for speedier identification.
• Reductions in security events result in fewer breaches, reduced downtime, and lower attack remediation costs.

Incentivized