F5 Distributed Cloud WAF (Web Application Firewall) vs. Oracle Dyn Web Application Security Platform

So a lot of companies that have a digital side and they have a lot of applications in the cloud, this is one of those areas that it can protect the net so it can lock 'em down, it'll build a baseline so you understand what that application's doing. So if it sees something not normal, it'll get protected against that.

Incentivized

Dyn WAF is a good product, don't get me wrong. Zenedge was constantly improving the product, adding new features on a regular basis. It works very well for dynamic websites, helping weed out SQL Injection, XSS, XSRF, and other attacks. We have also used this product to protect REST API endpoints. Again, the product works very well to repel attacks.

Incentivized

• Layer seven attacks are becoming far more common. Traditionally it was always layered three, layer four, where you get an additional firewall, but with the application layer attacks become more frequent, more popular, et cetera. So having the web application firewall protecting us, and then with the recent Log4j, that's the most recent use case when it gave us that instant level of protection whilst we remediated the Log4j that we had that and the F5 Distributed Cloud WAF was protecting us.
• I have a great relationship with the account manager, my account manager, and I think he drives the best price possible, um, for me, and I'm happy with that price.
• F5 Distributed Cloud WAF is always innovating and evolving.
• We run a very competitive proof value where we run numerous competitors against each other, and then we evaluate from that and then make the selection, and F5 Distributed Cloud WAF was the winner.

Incentivized

• With Oracle Dyn Web Application Security Platform we have a complete dashboard (dojo) to manage, configure, visualize, all the features and functionalities of the platform in a very simple and friendly way.
• Oracle Dyn Web Application Security Platform support is something out of the ordinary. Oracle engineers are available 24/7, every day. There is no requirement that can not be satisfactorily addressed by them. The response time, by different ways, is almost instantaneous.
• It is very easy to communicate with any Oracle official to discuss any topic.
• Despite being a service with all the features to provide 100% protection, my experience is that the cost of Oracle Dyn Web Application Security Platform is worth it.

Incentivized

• Lack of warnings, currently the console does not provide a warning when deleting key-value entry.
• The web GUI could use some tweaking, currently no undo option when removing exclusion rules.
• Configuration complexity, currently menus and options are hidden, making it hard to configure vs on prem.

• Sometimes engineers while applying updates may impact the stability of the service for a brief moment.

Incentivized

I would continue using F5 Distributed Cloud WAF because I am highly satisfied with its robust and comprehensive features that effectively protect our applications from evolving cyber threats. The advanced AI capabilities enhance threat detection and response, providing proactive security. Additionally, the excellent customer support ensures quick resolution of any issues, making the overall experience reliable and efficient. Trust in the manufacturer’s innovation and continuous updates further motivates me to keep this solution as a core part of our security infrastructure.

Incentivized

I believe is a solution that was designed from the start to be simple and easy to use. Coming from Imperva, it simply eased the burden and complexity of managing and securing our apps on different environments (cloud and on-prem). It easy to scale and very quick to deploy (as a cloud waf should be), provide us with DevOps integrations, visibility and automatic insights from multiple events that guarantee peace of mind for us analysts and opp managers.

Incentivized

Seems no issue

Incentivized

Unnoticed slowness

Incentivized

I never contacted support for this product.

Incentivized

Online training saves me lots of time

Incentivized

Just make sure you origin servers have F5 IPs allowed.

Incentivized

It provides fewer false positives and a more granular approach to eliminating them, allowing us to focus on threats. Also, with the need to secure both on-premise and cloud-based web applications, we can only use Azure on the cloud part, but we still need to cover on-premise apps with WAF, so we would need to double the time to deploy and manage. Also, its flexibility of deployment scenarios offers us a faster time to deploy WAF without adjusting the app delivery process to WAF's existence.

Incentivized

I already put this in earlier, but to repeat - they were easier to work with, more technically capable and knowledgeable and not just trying to sell us on something. Their willingness to solve for our problems and work with us made them the clear winner.

Incentivized

Dont see any issue so far

Incentivized

• It gives us peace of mind knowing that we have an easy way to mitigate any bad traffic coming to our websites and e-commerce. So it really gives us peace of mind. It doesn't affect the job projecting where the traffic is coming from. We actually have the bot functionality as well, so if there is any bot attacking our website, it automatically prevents it. So it's been pretty productive.

Incentivized

• Has a user-friendly interface that is both informative and intuitive.
• The client's websites are monitored round-the-clock by a staff that provides quick response in the event of any difficulties.
• Deploying it is a breeze.

Incentivized