Item: F5 Distributed Cloud WAF (Web Application Firewall)
Rating: 8
Author: Verified User

Overall Satisfaction with F5 Distributed Cloud WAF (Web Application Firewall)

Use Cases and Deployment Scope

We use WAF to protect two main systems available to our partners and customers. We need to protect them from web application threats and organize one console view for both the on-premise and cloud parts of the system.

Pros and Cons

Pros

Enable us to show all threats in the same console for on-premise and cloud systems.
Show and protect against modern threats.
Do not require modification of the core system to deploy on scale.
Relatively easy management of the system.

Cons

Easy integration with cloud-based SIEM systems like MS Sentinel.
Configuration console that would also be more understandable to people from on-premise experience as the existing one is more familiar with DevOps systems.

Return on Investment

Improved security posture and efficacy.

App Security Simplification

It allows us to standardize the security policies across on-premise and cloud apps, provide a single pane of glass console view of all the security events, and push all of the alerts to the SIEM system, effectively reducing the mean time to triage. This allows us to provide unified security across our environments with limited deployment time.

Distributed environments

Yes - It allows us to standardize the security policies across on-premise and cloud apps, provide a single pane of glass console view of all the security events, and push all of the alerts to the SIEM system, effectively reducing the mean time to triage. This allows us to provide unified security across our environments with limited deployment time.

Alternatives Considered

Azure Application Gateway

It provides fewer false positives and a more granular approach to eliminating them, allowing us to focus on threats. Also, with the need to secure both on-premise and cloud-based web applications, we can only use Azure on the cloud part, but we still need to cover on-premise apps with WAF, so we would need to double the time to deploy and manage. Also, its flexibility of deployment scenarios offers us a faster time to deploy WAF without adjusting the app delivery process to WAF's existence.

Key Insights

Do you think F5 Distributed Cloud WAF (Web Application Firewall) delivers good value for the price?

Yes

Are you happy with F5 Distributed Cloud WAF (Web Application Firewall)'s feature set?

Yes

Did F5 Distributed Cloud WAF (Web Application Firewall) live up to sales and marketing promises?

Yes

Did implementation of F5 Distributed Cloud WAF (Web Application Firewall) go as expected?

Yes

Would you buy F5 Distributed Cloud WAF (Web Application Firewall) again?

Yes

Other Software Used

Microsoft Defender for Business, Microsoft Defender for Cloud, Microsoft Defender for Office 365

Likelihood to Recommend

It is doing its job effectively, and its scalability is superb. So, if you have a mixed environment with cloud and on-premise systems to protect this product, provide a solution to the challenge. However, its management is more suited to DevOps teams rather than to the ones responsible for on-premise systems, making the management a bit more complex.

Comments

Please log in to join the conversation

My review.

Modules Used