Cloudflare vs F5 Advanced WAF comparison

Cancel
You must select at least 2 products to compare!
Cloudflare Logo
8,896 views|7,547 comparisons
96% willing to recommend
F5 Logo
12,122 views|9,561 comparisons
97% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Cloudflare and F5 Advanced WAF based on real PeerSpot user reviews.

Find out in this report how the two Distributed Denial of Service (DDOS) Protection solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Cloudflare vs. F5 Advanced WAF Report (Updated: January 2023).
772,649 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The DDoS protection is the most valuable aspect of the solution.""The solution offers the flexibility to control configuration rules.""It is easier to configure and develop documentation to see how we have configured firewalls.""The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs.""Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. You don't necessarily need a certificate if you have a connection between your website and your host, the server, Cloudflare, and the host.""Centralized, full-featured DNS.""Easier http to https redirect using page rules""Generally, I am satisfied with this product."

More Cloudflare Pros →

"F5 Advanced WAF is a stable solution, we are satisfied. It is more stable than ForiWeb.""In terms of F5 Advanced WAF's most valuable features, I would definitely say its stability. F5 is one the most stable products. Either as the load balancer or the web application firewall, it is very stable.""The solution is stable.""It is easy to obtain dashboard compliance because security policy views are included.""It also has antivirus and DDoS mitigation capabilities. We have enabled these features.""The product has valuable features for load balancing, monitoring tools, and HPXpress services.""Very easy to implement and works well.""It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the rules per the requirements."

More F5 Advanced WAF Pros →

Cons
"It should be easier to collect the logs with companies like Sumo. However, based on my discussions with the salespeople, I understand that's how they make their money. With the enterprise product, they want people doing those kinds of enterprise features to do the logging. They want them to pay a lot of money, and that's where I have an issue with them. That should be a default. You should be able to get the log no matter what. The logging should be universal.""The pricing could be improved.""In the last two years, there has been a certain amount of downtime when using the VDM.""It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues.""The product support needs to be accessible from more places, a wider area of coverage.""I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us.""The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client.""The solution could work at being less expensive. It costs a lot to use it."

More Cloudflare Cons →

"Most customers encounter stability issues with the product's Big-IP logs.""There is a learning curve that extends the time of implementation.""F5 Advanced WAF could improve the precision of the scanning. There are many false positives. They should improve their threat database.""The BIG-IQ is supposed to centralize the management for all of the boxes but it's not very effective.""I would like to see additional controls.""I would say their graphical interface, the GUI. I don't like the GUI as much as before.""The delay times on firmware patches and software updates could be better and improved.""We usually use a third-party tool for logging and reporting. It would be nice if we could do that right on this solution. They have one, but it's not very stable. Logging and reporting effectively would be a big enhancement."

More F5 Advanced WAF Cons →

Pricing and Cost Advice
  • "So far I use free tier and happy with it. You can subscribe to business package if needed."
  • "I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
  • "There are no additional costs beyond the standard licensing fees."
  • "The cost primarily depends on the size of the organization."
  • "We don't have any issues with the price."
  • "The price is reasonable."
  • "The solution is expensive when compared to other products but offers unlimited bandwidth."
  • "It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
  • More Cloudflare Pricing and Cost Advice →

  • "The pricing is too high."
  • "I think the price is very high."
  • "After buying the program, you just pay for the support every year."
  • "Licensing fees for this solution are paid on a yearly basis."
  • "It's more expensive than other solutions and depending on the modules, there can be additional fees."
  • "F5 bundles up services and the bundle is what you pay for rather than individual components."
  • "Its price is fair. We have done a couple of deals where they were able to give some kind of discount to the customers. The price was initially high for the customers, but after a couple of negotiations, it came within their budget. They were happy with that."
  • "There are various plans available for Fortinet FortiWeb Cloud WAF as a Service, including a trial version."
  • More F5 Advanced WAF Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Distributed Denial of Service (DDOS) Protection solutions are best for your needs.
    772,649 professionals have used our research since 2012.
    Comparison Review
    Anonymous User
    Questions from the Community
    Top Answer:Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GRE tunnels. We have decreased site load times on Mobile 3G from 8 to 1,6 seconds by… more »
    Top Answer:Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
    Top Answer:It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the rules per the requirements.
    Top Answer:The product is not so expensive. It depends on the assets.
    Top Answer:The self-service aspect could be improved. The user interface (UI) also seems a bit outdated. Making it more user-friendly would be beneficial.
    Ranking
    Views
    8,896
    Comparisons
    7,547
    Reviews
    17
    Average Words per Review
    520
    Rating
    8.4
    Views
    12,122
    Comparisons
    9,561
    Reviews
    22
    Average Words per Review
    415
    Rating
    8.6
    Comparisons
    Learn More
    Overview

    Cloudflare is a highly-regarded Content Delivery Network (CDN) and a Distribution Denial of Service (DDoS) protection solution. The robust global cloud platform that is Cloudflare ensures users are able to connect to the internet quickly, securely, and reliably. Cloudflare is one of the world's largest networks in the marketplace today. Using Cloudflare, businesses, educational entities, NGOs, vloggers, bloggers, and anyone else with an internet presence can use the solution and experience more secure, faster websites and applications.

    Currently, there are millions of internet locations on Cloudflare, and the Cloudflare network continues to grow every day by the thousands. The solution is able to fulfill the requests for millions of websites seamlessly and serves on average 45 million HTTP requests per second.

    Cloudflare has safe, secure data centers in close to 300 cities worldwide to ensure every client request is filled as quickly as possible. It is Cloudflare’s edge network that makes this possible by keeping content and other services as close to each client as possible, so the information requests are always only seconds away.

    Many organizations that work in democracy, civil society, human rights, or the arts are able to access Cloudflare highest levels of protection for free via Project Galileo. Additionally, official election websites can be secured from hacking and fraud through Cloudflare’s Project Athenian, also at no additional cost.

    Cloudflare can also help organizations of all sizes develop a robust zero-trust strategy to ensure the highest levels of productivity and profitability. Employees, stakeholders, and end-users have a greater level of satisfaction and overall improved user experience, which can, in turn, result in higher revenues and overall ROI. Zero-trust and BYOD ( bring your own device) access ensure end-users and employees always have the best resources and technology available to them at all times.



    Cloudflare Benefits

    Cloudflare has many benefits. Some of its most valuable benefits include:

    • Faster load times
    • Robust DNS security
    • Intuitive cloud Web Application Firewall (WAF)
    • Free universal SSL
    • Image Enhancement
    • Automatic Browser Caching
    • Next-generation cloud load balancer
    • Accelerated Mobile Pages (AMP)
    • Rate Limiting
    • Minification
    • Zero-trust capabilities 
    • Cost-effective
    • Reduced carbon footprint

    Reviews from Real Users

    “Many websites require an SSL certificate because they sell stuff and want SSL. Cloudflare comes with an SSL certificate built in. It's automatic. You sign yourself up for Cloudflare, and an SSL certificate automatically protects your website. If you have a connection between your website and your host, the server, Cloudflare, and the host, you don't necessarily need a certificate.”  Spencer M., Owner at Tech Exchange

    “What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool.” Daniel P., Network engineer at Ufinet

    The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service.” A PeerSpot user who is a Competence Center Manager at a tech services company. 

    F5 Advanced WAF is a web application security solution for financial and government sectors, e-commerce, and public-facing websites. It offers protection against various attacks, including botnets, web scraping, and foreign entities. The solution can be deployed on-premises or in the cloud and is often used with other security tools. Its most valuable features include DDoS and DNS attack protection, SSL uploading, anomaly detection, and the ability to input custom rules. 

    F5 Advanced WAF has helped organizations to expose more services to the public while providing an extra layer of protection, preventing revenue loss, and securing connectivity.

    Sample Customers
    Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
    MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
    Top Industries
    REVIEWERS
    Financial Services Firm22%
    Comms Service Provider22%
    Engineering Company13%
    Marketing Services Firm9%
    VISITORS READING REVIEWS
    Educational Organization38%
    Computer Software Company11%
    Financial Services Firm8%
    Comms Service Provider4%
    REVIEWERS
    Financial Services Firm34%
    Computer Software Company25%
    Non Tech Company6%
    Media Company6%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Financial Services Firm15%
    Government7%
    Comms Service Provider6%
    Company Size
    REVIEWERS
    Small Business65%
    Midsize Enterprise12%
    Large Enterprise23%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise46%
    Large Enterprise36%
    REVIEWERS
    Small Business31%
    Midsize Enterprise24%
    Large Enterprise45%
    VISITORS READING REVIEWS
    Small Business19%
    Midsize Enterprise16%
    Large Enterprise65%
    Buyer's Guide
    Cloudflare vs. F5 Advanced WAF
    January 2023
    Find out what your peers are saying about Cloudflare vs. F5 Advanced WAF and other solutions. Updated: January 2023.
    772,649 professionals have used our research since 2012.

    Cloudflare is ranked 1st in Distributed Denial of Service (DDOS) Protection with 57 reviews while F5 Advanced WAF is ranked 2nd in Web Application Firewall (WAF) with 55 reviews. Cloudflare is rated 8.4, while F5 Advanced WAF is rated 8.6. The top reviewer of Cloudflare writes "It's easy to set up because you point the DNS to it, and it's working in under 15 minutes". On the other hand, the top reviewer of F5 Advanced WAF writes "Flexible configuration, reliable, and highly professional support". Cloudflare is most compared with Akamai, Azure Front Door, Imperva DDoS, AWS Shield and Microsoft Azure Application Gateway, whereas F5 Advanced WAF is most compared with Fortinet FortiWeb, Microsoft Azure Application Gateway, AWS WAF, Imperva Web Application Firewall and Fastly. See our Cloudflare vs. F5 Advanced WAF report.

    We monitor all Distributed Denial of Service (DDOS) Protection reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.