Skip to main content
TrustRadius
F5 Distributed Cloud WAF (Web Application Firewall)

F5 Distributed Cloud WAF (Web Application Firewall)

Overview

What is F5 Distributed Cloud WAF (Web Application Firewall)?

F5 Distributed Cloud WAF leverages F5's Advanced WAF technology, delivering WAF-as-a-Service and combining signature- and behavior-based protection for web applications. It acts as an intermediate proxy to inspect application requests and responses to block and mitigate a broad spectrum of…

Read more
Recent Reviews

F5 WAF

8 out of 10
April 06, 2024
Incentivized
Migrate web app attacks and vulnerabilities with comprehensive security controls and uniform policy and observability via SaaS delivered …
Continue reading

Amazing F5

7 out of 10
March 22, 2024
Incentivized
We use F5 WAF to secure the services we host over the internet. Sometime we do have issues with SSL encryption.
Continue reading

Review

8 out of 10
March 22, 2024
Incentivized
Deploying WAF instances in a distributed manner across multiple locations or cloud environments to protect web applications and APls.
Continue reading

F5 review

10 out of 10
March 22, 2024
Incentivized
we used WAF as a measure product to secure our web application inside our organisation.It is a very helpful product to isolate and secure …
Continue reading
Read all reviews

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Reviewer Pros & Cons

View all pros & cons

Video Reviews

1 video

Director of Engineering Solutions with Nexum Securities Dishes Truth | F5 BIG-IP WAF
02:56
Return to navigation

Product Demos

Distributed Cloud Services Demo

www.f5.com
Return to navigation

Product Details

What is F5 Distributed Cloud WAF (Web Application Firewall)?

F5 Distributed Cloud WAF leverages F5's Advanced WAF technology, delivering WAF-as-a-Service and combining signature- and behavior-based protection for web applications. It acts as an intermediate proxy to inspect application requests and responses to block and mitigate a broad spectrum of risks stemming from the OW ASP Top 10, persistent and coordinated threat campaigns, bots, and layer 7 DoS.


F5 Distributed Cloud WAF requires no hardware or software to implement or maintain, set up, deploy, manage and scale. It provides hybrid deployment options to secure applications wherever they are deployed, including entirely as SaaS via F5's network points-of-presence (PoPs) or locally across public clouds, customer data centers and at the customer edge. This is accomplished leveraging F5's global network and centralized console for critical app security policy enforcement whenever it's required.

Benefits

F5 Distributed Cloud WAF is designed to ease the burden and complexity of consistently securing distributed web apps by delivering:

  • Simplified operations: SaaS-delivered WAF that’s set up, deployed, managed and scale across clouds, on-premises data centers, and edge sites.
  • DevOps agility + SecOps control: Delivers the programmability that DevOps needs combined with the efficacy and oversight that SecOps mandates, enabling faster application delivery and release cycles.
  • Reduced time to resolution: Improves visibility and insight across WAF and DDoS security events, and into app performance, including intuitive drill-down capabilities.
  • Comprehensive protection with fewer false positives: Utilizes both signature-based and AI/ML based detection techniques with automatic signature tuning to ensure maximum efficacy and reduced SecOps workloads.


F5 Distributed Cloud WAF (Web Application Firewall) Features

  • Supported: Attack signature engine: Captures Common Vulnerabilities and Exposures (CVEs) plus known vulnerabilities and techniques identified by F5 Labs, including Layer 7 DDoS, threat campaigns, bots, and automated threats.
  • Supported: Advanced behavior engine: Leverages AI/ML to monitor and score client interactions, deciphering intent based on the number of WAF rules hit, forbidden access attempts, login failures, and error rates, to help identify an app’s highest priority threats.
  • Supported: Service policy engine: Enables micro segmentation and advanced security at the application layer, utilizing IP reputation and allow/deny lists to block clients with known bad TLS fingerprints, ASNs from suspicious countries.
  • Supported: Automatic attack signature tuning: Determines if a signature-identified attack is really a threat, helping reduce the number of false positives.
  • Supported: Streamlined set-up and management: Deploy through a simple UI or automate via APIs including best- practice default protections and the flexibility to create custom rules.
  • Supported: Multi-app dashboards: Observability via a single dashboard with a 360-degree view of app performance and security events across distributed applications.

F5 Distributed Cloud WAF (Web Application Firewall) Videos

F5 Distributed Cloud WAF Demo
F5 Distributed Cloud API Security
F5 Distributed Cloud Bot Defense
F5 Distributed Cloud DDoS Mitigation

F5 Distributed Cloud WAF (Web Application Firewall) Integrations

F5 Distributed Cloud WAF (Web Application Firewall) Competitors

F5 Distributed Cloud WAF (Web Application Firewall) Technical Details

Deployment TypesSoftware as a Service (SaaS), Cloud, or Web-Based
Operating SystemsUnspecified
Mobile ApplicationNo

F5 Distributed Cloud WAF (Web Application Firewall) Downloadables

Frequently Asked Questions

F5 Distributed Cloud WAF leverages F5's Advanced WAF technology, delivering WAF-as-a-Service and combining signature- and behavior-based protection for web applications. It acts as an intermediate proxy to inspect application requests and responses to block and mitigate a broad spectrum of risks stemming from the OW ASP Top 10, persistent and coordinated threat campaigns, bots, and layer 7 DoS.

Cloudflare, Fastly Edge Cloud Platform, and Imperva Application Firewall are common alternatives for F5 Distributed Cloud WAF (Web Application Firewall).

The most common users of F5 Distributed Cloud WAF (Web Application Firewall) are from Enterprises (1,001+ employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(103)

Reviews

(1-25 of 51)
Companies can't remove reviews or game the system. Here's why
April 06, 2024

F5 WAF

Zhe Cheng | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User
Incentivized
Migrate web app attacks and vulnerabilities with comprehensive security controls and uniform policy and observability via SaaS delivered WAF that is quick to set up and deploy, and easy to manage and scale across any environment. And simply app security by seamlessly integrating protections into the development process with core security functionality.
  • Easy to use
  • Reduce the time
  • Save the cost
  • Comprehensive protection
  • Flexible and agility
  • None
  • None
N.A
Quoc Nguyen | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
ResellerIncentivized
Protect our App in any where, quickly deployment and leverage all features of F5 Distributed Cloud WAF.
  • Easy to deployment to protect your app in anywhere
  • F5 Distributed Cloud WAF features is the same Big-IP
  • Don't care performance
  • One console with BIG-IP on premise
  • More Hub (DC) in the world
You should use F5 Distributed Cloud WAF when you have app on cloud, app on multi-cloud, need to expand and best WAF to protect your app.
March 22, 2024

Review

Score 8 out of 10
Vetted Review
ResellerIncentivized
Deploying WAF instances in a distributed manner across multiple locations or cloud environments to protect web applications and APls. Configuring security policies to mitigate various types of attacks and vulnerabilities. Protection against cyber threats: It helps in defending against a wide range of cyber threats, including OWASP Top 10 vulnerabilities, DDoS attacks, SQL injection, cross-site scripting (XSS),
  • Protect against cyber threat
  • API protection
  • Central management
Performing up to expectation
March 22, 2024

F5 app worlds

Score 8 out of 10
Vetted Review
Verified User
Incentivized
It help to prevent attack from public internet
  • It help prevent api attack
  • It help prevent AI Bot attack
  • It help prevent ddos attack
  • Less analysis info on dashboard
  • Not easy to set up
f5 product is very compatible with different cloud platforms
March 22, 2024

Great

AUNG THU HTET | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
ResellerIncentivized
We use XC WAAP and mostly use for the WAF and also API Protection
  • it is quick easy using with the WAF template.
  • it is powerful in the bot defense
  • we can monitor realtime about our application vulnerability
  • these can protect our multicloud application and reduce the complex and can do the single pane of glass management.
It is easy to use and powerful and protect from our application across multicloud and edge environment and can manage centralize to our application.
March 22, 2024

F5 review

Score 10 out of 10
Vetted Review
Verified User
Incentivized
we used WAF as a measure product to secure our web application inside our organisation.It is a very helpful product to isolate and secure all our application.
  • secure web application
  • to prevent from any malware attack
  • to provide the secure environment
  • WAF should use more filter to isolate the paticular issue
  • WAF should be detect and filter the malware attack and notify
WAF is very useful for web application and to secure the company internal web application.It is highly recommended to use WAF in the highly secure environmentWAF is really very handy product where all the company using now a days very offten. WAF provided secure environment and very reliable product
Score 10 out of 10
Vetted Review
ResellerIncentivized
So it's the upgraded version of ASM, which is the actual layer seven protection on applications. So what it does now with the cloud base and the way it's set up, distributed cloud, you have that now. Capabilities in the cloud are what happens. So anytime you need to protect an app or lockdown or do anything with that, that's where it comes into place. For layer seven.
  • So if an application is getting attacked, this can protect that application from hackers or DDoS or any of those other areas.
  • Actually right now there's not much because it's handling everything we need to within the layer seven suite. Probably just getting it out there more to the customers is the biggest thing. That's where it needs to be improved. Education.
So a lot of companies that have a digital side and they have a lot of applications in the cloud, this is one of those areas that it can protect the net so it can lock 'em down, it'll build a baseline so you understand what that application's doing. So if it sees something not normal, it'll get protected against that.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
For all types of publications, both critical and internal, security is the first thing taken into account in our organization. Applying all the security layers that the product offers from DNS, WAF, APM I really consider it to be an all-in-one approach in multiple security vectors that should not be lost focus
  • integration
  • protection
  • security
  • DNS cost
  • Integration simple
Distributed Cloud WAF (Web Application Firewall) is well suited, for any client that has a hybrid scheme, regardless of its size (from an SME to a large company), the XC solution applies to everyone since the migration to cloud tools It is inevitable, it is not possible to stay with solely on-premise ideologies because that is not where progress is made.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
F5 Distributed Cloud WAF (Web Application Firewall) is used to protect our public and private web applications. We were using BIGIP previously, and patching the appliance was cumbersome, having to do it a couple times per year. BIGIP also did not provide much application observability for devs and admin staff. XC, being a WAF-aaS, solves these issues and provides dashboards for understanding web application traffic
  • Global Service Policies to push to all web applications
  • Up to date attack signature detection
  • dashboard to show why requests are being blocked and to help troubleshoot issues
Out-of-the-box F5 Distributed Cloud WAF (Web Application Firewall) offers plenty of protection already, but if you need to make exceptions, it can be easily done using the dashboard and a few clicks. Global service policies can also be applied per company policies to all web applications/ load balancers
Score 10 out of 10
Vetted Review
Verified User
Incentivized
F5 Distributed Cloud WAF helped us from managing a legacy web application firewall that was on premises. It greatly expediated our ability to manage and configure our firewalls. We have a small team and it has made us more efficient. The scope was protecting a website and securing it. The F5 purchase was a great decision.
  • Ease of Use
  • Security
  • Role Based Access
  • Scalability
  • Modernize GUI
  • Dark Mode
  • Permissions by User
The F5 Distributed Cloud WAF is great for hybrid or cloud accounts but even does well on-premises. For organizations that want the latest and greatest security with an abundance of features that focus on protecting your apps, website and organization. It prevents all types of threats. This is a great product and I would recommend it.
Score 9 out of 10
Vetted Review
ResellerIncentivized
I use to protect my web applications in the company where my users access daily where can you to receive attacks from hackers from any country.
A large number of attacks related to malicious code have been reviewed on the platform on a daily basis that the tool successfully blocked.
  • Protection against sql injection at level code
  • Protection against file inclusion al directory level
  • Protection against Cross Site Encryption
  • Protection against vulnerabilities
  • Allow custom Dashboard for diferent suser roles
  • Interface more intuitive for beginner users
  • Reports more details or granulars
The platform is excelent in escenarios from there web applications that use personal information and thousands of transactions with account banks. This leads to maintaining the company's reputation in a reliable way for the users who use it This leads to maintaining the company's reputation in a reliable way for the users who use it.
Score 7 out of 10
Vetted Review
Verified User
Incentivized
  • Securing the apps
  • Api Service calls through nginx
  • We use F5 for request to got Database as well
  • they has to be easy to deploy
  • UI should be faster to load
  • IRules to be made easy to understand
At my Company we use F5 for loadbalancing and securing the apps. We do lot of Layer 4 and Layer 7 requests route. All the Cert to secure the apps get terminated at the F5 layer. We are in near future planning to do a F5 Distributed cloud platform so that we can have one stop shop for all the esrvices we require
Score 10 out of 10
Vetted Review
ResellerIncentivized
With applications shifting from on prem solutions to multi-cloud and on prem hybrid models, F5 Distributed Cloud WAF allows us to manage the security of applications in a singular view. This allows cloud teams to own their environments and run them on a way that they understand, but the security of the application can be delivered in a consistent fashion even as the application moves from on prem to the cloud and between clouds.
  • Simple deployment model
  • Single pane of glass
  • Policy import from legacy AWAF would be amazing.
Anytime you have an application that requires security from DDpS and bot prevention from the internet, F5 Distributed Cloud WAF is a great choice.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
We use F5 Distributed Cloud WAF (Web Application Firewall) in healthcare to merge all of our cloud environments, we had problems in the past with combining each of the cloud environments and we plan to keep expanding as the healthcare industry is growing more rapidly than ever.
  • Showing statistics in one dashboard
  • Make the cloud seamless
  • Merge all of the environments together
  • It is hard to implement into larger environments that were always traditionally on premise
Sometimes it is less appropriate at big corporate instances where there are multiple teams that do not deal with F5 Distributed Cloud WAF (Web Application Firewall) but deal with some of the cloud operations.
Score 6 out of 10
Vetted Review
Verified User
Incentivized
we currently are using F5 Distributed Cloud WAF (Web Application Firewall) but distributed cloud is a worthwhile endeavor for a lot of organizations.
  • Attack false positive rates
  • signature updates for zero day speed
  • scaling for apps with millions of users
  • custom signatures
  • ability to write iRules as responses to event triggers
  • ability to retrieve threat information from third party appliations for intelligence
F5 Distributed Cloud WAF (Web Application Firewall) is well suited for applications hosted in public cloud and multcloud. it is NOT a great solution when on-premise only is required especially since the dependency on the cloud portal to manage it.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
F5 Distributed Cloud WAF (Web Application Firewall) is able to detect Bots and prevent DDoS attacks and other attacks launched against websites.
  • Easy to implement.
  • Bot detection.
  • DDoS Prevention
F5 Distributed Cloud WAF (Web Application Firewall) has specific examples of why I would recommend it, including DDoS and Bot management prevention.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Installed the F5 Distributed Cloud WAF (Web Application Firewall) with Bot and DDoS Defense and Management…couldn’t be kore satisfied with the product and service! I highly recommend!
  • Easy to Install
  • Easy yo understand dashboard
  • Bot Detection
  • DDoS prevention
F5 Distributed Cloud WAF (Web Application Firewall) is prerfect for preventing DDoS attacks, detecting bot and detecting screen scaping. The gui is clean and the dashboards are easy to understand. Also the F5 team is very responsive and detail oriented. In the event that issues arise or you have questions they will be right there to partner with you and find resolutions.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
We use F5 Distributed Cloud WAF (Web Application Firewall) for security purposes.
  • DDOS
  • Credential Stuffing
  • LOGGING for events.
  • Confusing at first
  • Expensive
  • Complicated
I recommend F5 Distributed Cloud WAF (Web Application Firewall).
Score 9 out of 10
Vetted Review
Verified User
Incentivized
I use F5 Distributed Cloud WAF (Web Application Firewall) acorss our federal deployment for CRA
  • deployment ability across existing F5 integration
  • management
  • Operational Dashboarding
  • Better overall dashboards
  • Greater AI Capabilities
We recommend F5 Distributed Cloud WAF (Web Application Firewall) across Federal instances
Score 10 out of 10
Vetted Review
Verified User
Incentivized
I use F5 Distributed Cloud WAF (Web Application Firewall) when trying to prevent Web application attacks and reduce the attack surface, security incidents and data breaches. Protecting our endpoints from exposure. Mitigate web attacks and vulnerabilities with comprehensive security controls.
  • Prevents web attacks
  • Policy
  • SaaS WAF
  • ease of management
  • quicker software updates
Great products, and cutting edge technology
Score 9 out of 10
Vetted Review
Verified User
Incentivized
I moved web apps to a cloud-based F5 Distributed Cloud WAF (Web Application Firewall) versus virtual appliances that were difficult to manage.
  • Centralized management
  • Cloud agnostic
F5 Distributed Cloud WAF (Web Application Firewall) is a great service to take advantage of moving on-prem app to the cloud without losing security policy management and visibility.
Melbin Cruz | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We use the F5 Distributed Cloud WAF (Web Application Firewall) to protect our public API from attacks
  • Block attacks
  • Moniyor traffic
  • Protect private API
  • More documentation
  • Training labs
F5 Distributed Cloud WAF (Web Application Firewall) is good for on premise apps that you need to expose to external traffic or cloud APIs protection it should be any provider
Score 10 out of 10
Vetted Review
Verified User
Incentivized
I use F5 Distributed Cloud WAF (Web Application Firewall) for simplifying management and monitoring. Also the ease of migrating apps.
  • Ease of migrating.
  • Monitoring made simple.
  • Production input increase.
  • Easier authentication.
I give F5 Distributed Cloud WAF (Web Application Firewall) a ten out of ten for the ease of managing multiple apps.
Return to navigation