F5 BIG-IP Access Policy Manager (APM) vs. Ivanti Secure Unified Client

I think that the platform is well suited to many Remote Access VPN solutions, but I also think there is a lot of room for improvement on the backend. If you are hoping to deploy your APM solution across many different datacenters or colos, it may not be the best choice for the final solution.

Incentivized

It is well suited for large corporations for granularity on users' roles, security levels for each application, and for logging in with an extra security layer. For doing demanding network tasks, like downloading a large set of data or for streaming, it could get slower than with a direct connection.

Incentivized

• SAML 2.0 identity federation support.
• Integrates with third-party SSO solutions.
• Bridging modern authentication and authorization (SAML, OAuth/OIDC) and classic authentication and authorization methods.
• Policy routing

Incentivized

• Provides what any VPN should provide
• Works on many OSs, though I will relay my Mac OS experience in another section of the review
• Their clientless VPN offering could be interesting, depending on your needs

Incentivized

• There's some more advanced configurations within OAuth that I think could be fleshed out and easier to approach.
• There's a lot of things in F5 BIG-IP Access Policy Manager policies that I find myself recreating every policy. An easier way to copy objects from one to policy to another.

Incentivized

• It's a little slower
• Requires to be careful with the configuration on network
• It seems to cause a weird behavior in MAC when loading after turn on sometimes

Incentivized

Integration with F5 BIG-IP systems that we plan to keep using for a while.

Incentivized

Once things are set up, it is nice and easy to get the Edge Client running on user's PCs. However, that setup process can be a bit daunting at first using the Policy Manager, and reviewing session logs can be difficult at first if you aren't 100% sure of what you're looking for.

Incentivized

It is open platform so support is not good and than F5 and features visibility as not good as F5. F5 Set up and easy to use to admin console. Also have more feature visibility for load balancing, web server accelerator, application server ddos protection and WAF. F5 more efficient to handle concurrent request.

Incentivized

I wasn't a part of the decision process to use Pulse Secure. I believe NordVPN Teams and ExpressVPN are both far superior products. Modern UI (Pulse Secure's UI is incredibly outdated), less reconnects, cheaper, less hacks (On April 20, 2021, CISA issued an "Emergency Directive on Pulse Connect Secure"), and simply faster overall connection speeds.

Incentivized

• Single sign on is great for students and faculty and staff
• Users don't have to log in multiple times
• Users don't need to remember multiple login IDs and passwords
• Multi Domain SSO support bridges many internal and external facing products with single sign on

Incentivized

• It has a positive ROI

Incentivized