F5 Big-IP Advanced WAF noob
Use Cases and Deployment Scope
We are using F5 Big-IP Advanced WAF to protect our applications to be available externally. We have difficulties maintaining WAF tuning due to the level of time it takes so we'll be interested in the automated cloud waf tuning mentioned during keynote
Pros
- Delivery - I have not noticed lower delivery performance on properly setup applications
- Reliability
- Learning curve - Within the first 3 months, I was able to maintain WAF rules and add applications.
Cons
- Speed - When there are a lot of alerts, clearing them or filtering through them is tedious. We process alerts weekly
Likelihood to Recommend
Nearly all of external facing applications are behind F5 Big-IP Advanced WAF, the only scenario that I know of that doesnt work is for our VPAM solution which is more of an issue with their setup than the F5 Big-IP Advanced WAF
