F5 Distributed Cloud WAF (Web Application Firewall) vs. SAP NetWeaver BPM vs. Tanzu tc Server

So a lot of companies that have a digital side and they have a lot of applications in the cloud, this is one of those areas that it can protect the net so it can lock 'em down, it'll build a baseline so you understand what that application's doing. So if it sees something not normal, it'll get protected against that.

Incentivized

If your organization is heavily invested in SAP as an enterprise wide solution already, BPM is really your only option. Solid, seamless integration, smooth workflow, and data trails for business analysis are impeccable. If you aren't already heavily invested, key questions to ask would be - Am I using too big a hammer? The results are impressive, no doubt, but the integration of BPM is demanding. A less-demanding, more intutive tool like Winshuttle or even AR Projekt that hooks in to SAP might be a simpler option

-Pivotal tc Server is best used as web application server on a virtual machine for middleware purposes -I feel it is less appropriate to be used with utilizing data that does not need to be secure

Incentivized

• Layer seven attacks are becoming far more common. Traditionally it was always layered three, layer four, where you get an additional firewall, but with the application layer attacks become more frequent, more popular, et cetera. So having the web application firewall protecting us, and then with the recent Log4j, that's the most recent use case when it gave us that instant level of protection whilst we remediated the Log4j that we had that and the F5 Distributed Cloud WAF was protecting us.
• I have a great relationship with the account manager, my account manager, and I think he drives the best price possible, um, for me, and I'm happy with that price.
• F5 Distributed Cloud WAF is always innovating and evolving.
• We run a very competitive proof value where we run numerous competitors against each other, and then we evaluate from that and then make the selection, and F5 Distributed Cloud WAF was the winner.

Incentivized

• Integrated well with SAP ERP/CRM
• Comes with adequate tools that help define business rules/processes and also monitoring them and managing exceptions

Incentivized

• send a receive HL7 message securely
• details issues and errors in logs
• very reliable uptime record with no system crashes

Incentivized

• Lack of warnings, currently the console does not provide a warning when deleting key-value entry.
• The web GUI could use some tweaking, currently no undo option when removing exclusion rules.
• Configuration complexity, currently menus and options are hidden, making it hard to configure vs on prem.

• Live readings would be nice.
• Easier to maneuver
• Work with all systems with the press of one keystroke

Incentivized

• User management and administration access account setup has room for improvement and can be more user friendly and clearly list how many admin accounts we can setup
• password complexity for user accounts need to be updated
• although all logs list all errors some of the tomcat errors are not time stamped

Incentivized

I would continue using F5 Distributed Cloud WAF because I am highly satisfied with its robust and comprehensive features that effectively protect our applications from evolving cyber threats. The advanced AI capabilities enhance threat detection and response, providing proactive security. Additionally, the excellent customer support ensures quick resolution of any issues, making the overall experience reliable and efficient. Trust in the manufacturer’s innovation and continuous updates further motivates me to keep this solution as a core part of our security infrastructure.

Incentivized

As a big fan of SAP in general, the BPM solution fits right in with all the other things SAP does well, and does it with incredible efficiency

I believe is a solution that was designed from the start to be simple and easy to use. Coming from Imperva, it simply eased the burden and complexity of managing and securing our apps on different environments (cloud and on-prem). It easy to scale and very quick to deploy (as a cloud waf should be), provide us with DevOps integrations, visibility and automatic insights from multiple events that guarantee peace of mind for us analysts and opp managers.

Incentivized

Seems no issue

Incentivized

Unnoticed slowness

Incentivized

I never contacted support for this product.

Incentivized

We have our own tech support for systems, I would say they probably could use more training on it, I don't really think it's anything regarding the SAP system, but more the knowledge they have on the system itself. It seems to take longer for them to fix any issues we may come across.

Incentivized

Online training saves me lots of time

Incentivized

Just make sure you origin servers have F5 IPs allowed.

Incentivized

It provides fewer false positives and a more granular approach to eliminating them, allowing us to focus on threats. Also, with the need to secure both on-premise and cloud-based web applications, we can only use Azure on the cloud part, but we still need to cover on-premise apps with WAF, so we would need to double the time to deploy and manage. Also, its flexibility of deployment scenarios offers us a faster time to deploy WAF without adjusting the app delivery process to WAF's existence.

Incentivized

I found the initial setup of NetWeaver is much simpler than other products especially in an SAP environment where we have SAP ERP/HRM/CRM as it can be well integrated with other SAP products. The only drawback is the need/dependency on SAP Portal. It is better suited in an environment where SAP ERP is running.

Incentivized

We selected Pivotal tc Server opposed to Cent0s Linux because Pivotal tc Server is more reliable and causes less downtime , also better logging. I have used both

Incentivized

Dont see any issue so far

Incentivized

• It gives us peace of mind knowing that we have an easy way to mitigate any bad traffic coming to our websites and e-commerce. So it really gives us peace of mind. It doesn't affect the job projecting where the traffic is coming from. We actually have the bot functionality as well, so if there is any bot attacking our website, it automatically prevents it. So it's been pretty productive.

Incentivized

• I don't handle ROI so I cannot tell you that.
• It's definitely helpful for our business.
• Works across the organization.

Incentivized

• one positive is that we can securely send patient data across to our food service dept.
• another positive is that we can integrate the communication with our patient tv terminals
• third positive is that there is less downtime because it is reliable

Incentivized