F5 BIG-IP vs. F5 BIG-IP SSL Orchestrator

I really do think it's well suited for any placement on the edge, especially with the WAF portion. APM is a whole different module unto itself that allows for VPN Connect connectivity, web top access. So it really is for these modules anyway, an edge appliance for us and not really usable in the interior of the network.

Incentivized

F5 SSL Orchestrator is an ideal software to address the blind spots of the encryption of incoming and outgoing traffic, this is because it provides a high visibility of the traffic. By having a management based on policies allows to carry out a simpler management and obtain a more integration easy with existing infrastructures. It is ideal for reducing costs as it allows the creation of dynamic devices, thereby evaluating whether the traffic should be decrypted or not.

Incentivized

• Easy connection: you can connect to your corporate network with two clicks.
• IP restriction: F5 has a list of possible insecure IP numbers, if someone tries to connect using one of these numbers, F5 BIG-IP won't connect.
• Always on feature: Very handy feature, if you install always on, you won't need to click connect.

Incentivized

• Provides a flexible, fast and simple implementation.
• Provides strong encryption and decryption of traffic, ensuring high SSL visibility.
• Ensures exposure of threats from inbound and outbound traffic and helps mitigate attacks.
• Allows you to direct traffic through policies which provides better management of it.

Incentivized

• I think the policy configuration that had some improvements on the ASM word things, improvements may be on the signatures that would be good because it's a little bit confusing on the ASL, how they are updated and deployed, and this staging. So that's something that could be.

Incentivized

• It is a software with a somewhat complex documentation so when you are in doubt it is difficult to solve it through its documentation.
• A good knowledge is required in the management of the software, because although its implementation is flexible, carrying it out in the appropriate way guarantees good operation.
• Its price can be somewhat high if it is a small company, however considering its high versatility the investment is worth it.
• Learning curve somewhat steep, but you can count on the support of your support team.

Incentivized

Only way to to this type of tasks

Incentivized

Great customization and easy to use help reference menus

Incentivized

On the occasions when we've had to engage f5 support, they have been great. They have always resolved our issues quickly and been easy to work with and professional. The reason I give them a 10 out of 10, however, is because when we've had issues that have crossed over between the f5 BIG-IP, our Cisco switches, and our Microsoft IIS server the f5 support representatives have been extremely knowledgeable about every product and device involved and have been able to troubleshoot end-to-end without having to engage other vendors.

Incentivized

implementation is fine

Incentivized

F5 BIG-IP is my first F5 product that I have stared to work, and it brings me more experience doing a lot of migration upgrades from old code version to new code. The way F5 has all configuration help us to develop scrips to improve our process.

Incentivized

OpenSSL is a simple software to use, with a complete documentation and an easy installation and ideal for encrypting and decrypting and making certificates, however F5 SSL Orchestrator can be implemented in different ways, it provides a high visibility of the traffic which does not miss any threat It wants to hide in encrypted traffic, but its biggest advantage is that it helps to better manage and does not provide static but dynamic devices so it is possible to decrypt once or encrypt once, it is for all these powerful features that F5 SSL Orchestrator was chosen.

Incentivized

• Having a load balancer of F5 helps to address large traffic limit on organisation's application
• This means that organisation gets a lot of revenue due to the usage of their application
• Hence provide a very positive impact onthe inverment or ROl of the organisation

Incentivized

• By providing a high vision of inbound and outbound traffic, we manage to avoid the entry of threats and the exposure or loss of data from our business infrastructure.
• Its policy based management is very helpful, since it is much simpler to manage SSL traffic and to be aware of any attack coming from it and to apply security controls to all business traffic.

Incentivized