F5 BIG-IP vs. F5 Distributed Cloud WAF (Web Application Firewall)

LTM's scope of action goes beyond load balancing. Tools for control, governance, and application enhancement, as well as APIs like iRULE, are very important for day-to-day operations. Furthermore, the F5 BIG-IP WAF offers exceptional security. Advanced firewall and routing functionalities are helpful in more complex environments. O LTM possui um escopo de atuacao que vai alem do balanceamento. Ferramentas para controle, governanca e aprimoramento de aplicacoes e API como iRULE sao muito iportantes para o dia a dia a operacao. Alem disso o WAF do F5 BIG-IP tem uma qualidade de seguranca exceptional. As funcionalidades avancadas de firewall e roteamento ajudam em ambientes mais complexos. This review was originally written in Portuguese and has been translated into English using a third-party translation tool. While we strive for accuracy, some nuances or meanings may not be perfectly captured.

Incentivized

It is doing its job effectively, and its scalability is superb. So, if you have a mixed environment with cloud and on-premise systems to protect this product, provide a solution to the challenge. However, its management is more suited to DevOps teams rather than to the ones responsible for on-premise systems, making the management a bit more complex.

Incentivized

• My company is kind of like it's a safe thing if you log in and you provide another second login to get the code to log in, confirm that it's a correct that you are logged into the account and it just provides more for the company

Incentivized

• Layer seven attacks are becoming far more common. Traditionally it was always layered three, layer four, where you get an additional firewall, but with the application layer attacks become more frequent, more popular, et cetera. So having the web application firewall protecting us, and then with the recent Log4j, that's the most recent use case when it gave us that instant level of protection whilst we remediated the Log4j that we had that and the F5 Distributed Cloud WAF was protecting us.
• I have a great relationship with the account manager, my account manager, and I think he drives the best price possible, um, for me, and I'm happy with that price.
• F5 Distributed Cloud WAF is always innovating and evolving.
• We run a very competitive proof value where we run numerous competitors against each other, and then we evaluate from that and then make the selection, and F5 Distributed Cloud WAF was the winner.

Incentivized

• I think a couple of challenges. One, I mean the cost, it's not an inexpensive product, but I think it's probably parity with value, maybe a little on the pricey side of things.
• As far as features and what we'd like to see more cloud native type experiences like where NGINX and F5 kind of come together, we're moving more of the cloud just like everybody else, and it's a little clunky right now.

Incentivized

• Lack of warnings, currently the console does not provide a warning when deleting key-value entry.
• The web GUI could use some tweaking, currently no undo option when removing exclusion rules.
• Configuration complexity, currently menus and options are hidden, making it hard to configure vs on prem.

Stability of product and easy way to have account manager contact. F5 support team is also always available to help with major issues. Last year during the major OS upgrade F5 team and F5 leadership always shared clear information and F5 team was dedicated to help us to have it closed in record time

Incentivized

We gave it an 8 because it protects our web apps well and is reliable. The WAF is flexible and meets most of our needs. It could improve in user interface and make integrations easier, but overall, it’s a solid and effective security tool for us.

Incentivized

It is a good product to use but right now it is lacking the automation of certificates, management of iRules and automation of certain configuration. Also creating an APM policy from scratch with many APM agents take a long time due to slow load times of the GUI and the need to create everything from scratch every time. It's tough to reuse the configuration.

Incentivized

I believe is a solution that was designed from the start to be simple and easy to use. Coming from Imperva, it simply eased the burden and complexity of managing and securing our apps on different environments (cloud and on-prem). It easy to scale and very quick to deploy (as a cloud waf should be), provide us with DevOps integrations, visibility and automatic insights from multiple events that guarantee peace of mind for us analysts and opp managers.

Incentivized

Seems no issue

Incentivized

Unnoticed slowness

Incentivized

I've supported F5 for three different companies. Our F5 support has been very consistent, regardless who the customer is. F5 technicians are very experienced and provide good support, even when issues are more related to knowledge than they are with the ability of the product to do what you need it to do.

Incentivized

I never contacted support for this product.

Incentivized

Practical cases and hands on , many hours of training with tipical cases

Incentivized

Online training saves me lots of time

Incentivized

implementation is fine

Incentivized

Just make sure you origin servers have F5 IPs allowed.

Incentivized

We are recently not evaluating, but we have started the deployment for WAF and we're using GTM, LTM, you name it. F5, we are using all of them.

Incentivized

The other one that I've used in the past, they're very similar and I haven't used it recently, so I can't do a side-by-side comparison today. But I can say that F5 does everything we want it to do consistent with what this other product did do and it's got enhanced features and of course we have a long history with F5 as a product set in general.

Incentivized

Dont see any issue so far

Incentivized

• The F5 BIG-IP has improved all our load balancing needs, we have over 400 LTM VIPs in our environment this all use to be done with DNS round Robin configurations.
• we have created unique APM solutions to support our external customer base

Incentivized

• The biggest gain for us was speed. Before F5 Distributed Cloud WAF, onboarding a new app to our WAF stack meant manual rule tuning, traffic sampling and regression testing. Right now, we spin up a service, tag it with the right policy and its ready (production ready) within hours

Incentivized