F5 Advanced WAF Reviews

Name: F5 Advanced WAF
Brand: F5
Rating: 4.2 (71 reviews)

Vendor: F5

4.2 out of 5

71 reviews
98% willing to recommend

Leave a review

What is F5 Advanced WAF?

F5 Advanced WAF is a web application security solution for financial and government sectors, e-commerce, and public-facing websites. It offers protection against various attacks, including botnets, web scraping, and foreign entities. The solution can be deployed on-premises or in the cloud and is often used with other security tools. Its most valuable features include DDoS and DNS attack protection, SSL uploading, anomaly detection, and the ability to input custom rules.

Get the F5 Advanced WAF Buyer's Guide and find out what your peers are saying about F5 Advanced WAF, Prisma Cloud by Palo Alto Networks, Imperva Application Security Platform and more!

F5 Advanced WAF is the #2 ranked solution in top Web Application Firewalls. PeerSpot users give F5 Advanced WAF an average rating of 8.4 out of 10. F5 Advanced WAF is most commonly compared to Prisma Cloud by Palo Alto Networks: F5 Advanced WAF vs Prisma Cloud by Palo Alto Networks. F5 Advanced WAF is popular among the large enterprise segment, accounting for 54% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 15% of all views.

Helped 886,664 peers since 2012

Featured F5 Advanced WAF reviews

Kallamuddin Ansari

Cyber Security Consultant at ProTechmanize

F5 Advanced WAF performs well overall, but I have noticed some points that could enhance the solution. Initially, policy tuning could be simpler, as while the learning engine is powerful, initial tuning still requires experienced engineers, which can be challenging for new teams due to the complexity of options and parameters. A more guided and simple tuning workflow would help reduce the learning curve. Additionally, tighter native integration with SIEM or SOAR tools would simplify correlation and investigations for security teams, although log exports are available. Overall, these are not blockers, merely enhancement opportunities, and once tuned, F5 Advanced WAF is very stable and reliable; improving usability, reporting, and onboarding would make it even more effective for larger environments.

Read full review

Kkc Casey

Security Solutions Architect at a consultancy with 1-10 employees

On the features I wish existed, Big-IP Advanced WAF is primarily an on-premises solution and in that solution, there are not enough features that need to be there to protect API-based applications. F5 somehow tends to force clients to go for a cloud WAF solution where it provides a solution for API security at least at some granular level, but Big-IP Advanced WAF in itself does not provide a complete API security solution. There could be a bit more of an easier way that I could configure things, and the resources that F5 provides should be freely available. Maybe some training and many other things regarding application-specific configurations and all those things would help. It is fine in itself, but the main thing that I wish should be there or it would be great if it was there is the API security solution that was supposed to be there in Big-IP Advanced WAF itself but which is not completely there. Only the basic features are there. F5 Advanced WAF can be improved by including some features that need to be included regarding API security solutions and all, but as of now, it is improving and it will keep on improving. It is fine for now, but it is improving itself. If some of the features that I mentioned above are integrated into the application or the solution itself, then it will be good to go. Regarding the needed improvements, it would be better if F5 Advanced WAF could have some professional-level training and some curated training and not just paywall-backed training, but some free-of-cost training that administrators can access and complete. F5 itself provides a good amount of knowledge base articles and documentation and a help menu in the solution itself in the user interface. It is not that tough, but it could have been a bit more easier.

Read full review

Pawan Thakur

Project Manager at IBM

To assess the effectiveness of DDoS mitigation in F5 Advanced WAF, we checked internally using JMeter, on which we wrote a script and tried multiple users at the same time. The DDoS feature blocked all that traffic according to our threshold. We tested this internally. The ability to enforce granular policy adjustments has helped my organization with compliance adherence because in the last three to four months, we put our application in blocking mode. We have not configured granular level settings; we have configured at a high level currently. Going forward, we will be planning to add additional security in the WAF. I have not used advanced analytics and traffic insights features. I also have not used vulnerability management features, as we have different solutions for that. From my perspective, whatever we have used of F5 Advanced WAF, I do not think it needs improvement because I am currently satisfied with the features provided. We just need to work more on the WAF. If there is anything that needs attention, we will definitely let you know. Currently, ten to twelve people are using it in my company. I would rate this solution an eight out of ten.

Read full review

F5 Advanced WAF mindshare

As of April 2026, the mindshare of F5 Advanced WAF in the Web Application Firewall (WAF) category stands at 6.0%, down from 10.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Web Application Firewall (WAF) Mindshare Distribution
Product	Mindshare (%)
F5 Advanced WAF	6.0%
Imperva Application Security Platform	7.6%
Fortinet FortiWeb	6.5%
Other	79.9%

Web Application Firewall (WAF)

PeerResearch reports based on F5 Advanced WAF reviews

Type	Title	Date
Category	Web Application Firewall (WAF)	Apr 15, 2026	Download
Product	Reviews, tips, and advice from real users	Apr 15, 2026	Download
Comparison	F5 Advanced WAF vs Fortinet FortiWeb	Apr 15, 2026	Download
Comparison	F5 Advanced WAF vs Imperva Application Security Platform	Apr 15, 2026	Download
Comparison	F5 Advanced WAF vs Radware Cloud WAF Service	Apr 15, 2026	Download

Valuable Features

F5 Advanced WAF is lauded for network detection intelligence, threat protection, and anti-bot features. Users appreciate its behavior analysis, granular policy controls, stability, and adaptability. Key features valued include advanced threat detection, DDoS mitigation, IP intelligence, and machine learning. It offers rich functionality like load balancing and threat intelligence integration, customizable security policies, signature-based detection, and comprehensive attack protection. Reporting and user-friendly configuration further enhance its appeal to businesses seeking robust web application security.

"After we introduced the web application firewall, it increased our ability to expose more of the services to the public."
"F5 Advanced WAF is a stable solution, we are satisfied."
"When you choose to go with F5, be sure to size your box properly so that the capacity is taken care of."

Room for Improvement

F5 Advanced WAF's user interface is often perceived as outdated and complex, while its reporting and logging features are seen as lacking clarity. Many users desire easier integration with third-party tools and improved pricing. Enhanced security capabilities, including automated threat intelligence and better API protection, are needed. Additionally, users seek a more streamlined onboarding experience and more intuitive configuration options to improve overall usability and effectiveness.

"The reporting portion of F5 Advance WAF is not great. They need to work out something better, as it is very basic."
"F5 Advanced WAF could improve the precision of the scanning. There are many false positives."
"I would like for there to be a cloud-based solution, this would also help to improve scalability."

ROI

F5 Advanced WAF provides a high ROI by protecting revenue, ensuring compliance, and improving efficiency. Users report cost savings from easy web application onboarding and reduced need for additional investments. Security and network teams gain time savings due to automatic updates and reduced manual rule management. F5 Advanced WAF efficiently blocks malicious traffic, reducing backend server issues and incident costs. Despite its initial expense, many find the investment justified by its comprehensive security features.

Pricing

F5 Advanced WAF is known for its high pricing, making it a significant investment for enterprises, especially compared to competitors like FortiWeb and Radware. Its licensing is typically structured annually and varies with additional features impacting costs. While some users find the price justified by its superior protection features and integration within the F5 ecosystem, others feel it's out of reach for smaller companies. Discounts and negotiations may help align with budgets, offering some relief.

"It is a little bit costly, but it has all the features that are required."
"I would rate the pricing as seven out of ten"
"I rate F5 Advanced WAF's pricing a three out of ten."

Popular Use Cases

Companies primarily use F5 Advanced WAF to secure web applications and APIs against threats like SQL injection, cross-site scripting, and DDoS attacks. They deploy it for data protection, load balancing, and threat mitigation. Organizations, especially in the financial sector, apply F5 Advanced WAF for PCI DSS compliance, bot mitigation, and traffic control. They operate it on either cloud or on-premises infrastructure to support secure application delivery and monitor traffic behavior.

Service and Support

F5 Advanced WAF offers a strong technical support experience, with users praising its knowledgeable and professional team. While response times are generally efficient, some users report delays in reaching the right individual. The support quality can vary based on the service level agreement. International offices provide support, but communication can sometimes be challenging. Users often mention satisfaction with local and global assistance but note room for improvement in response speed and first-responder skills.

Deployment

F5 Advanced WAF's setup varies in complexity, with users experiencing both straightforward and complex processes. Manual configuration can be challenging, while automatic options simplify the task. Experienced users find it relatively easy, requiring a few hours to days depending on the environment. However, more advanced scenarios necessitate a longer deployment, often involving customization and policy tuning over weeks to months. The interface is deemed user-friendly, but improvements in modernity could enhance usability.

Scalability

F5 Advanced WAF is highly adaptable, allowing configuration changes for expanding functions. Users appreciate the flexible licensing, enabling easy feature additions and performance upgrades. Licensing extensions facilitate resource allocation, enhancing the hardware's capability to handle large-scale traffic. They find F5 Advanced WAF suitable for both large enterprises and small businesses, with its flexibility in resource management and virtual or physical options. It excels in handling heavy traffic with advanced load balancing and integration into various environments.

Stability

F5 Advanced WAF is acclaimed for high stability, scoring frequently between nine and ten out of ten. Users, including larger installations and enterprise environments, report no crashes or major interruptions, citing excellent performance even during high traffic periods. Proper configuration and regular updates further enhance its robustness. Some mention specific deployment scenarios where high availability features ensure reliability. Despite isolated concerns related to infrastructure, stability remains a strong attribute associated with F5 Advanced WAF.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our F5 Advanced WAF Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company Size	Count
Small Business	25
Midsize Enterprise	11
Large Enterprise	27

By reviewers

By visitors reading reviews
Company Size	Count
Small Business	353
Midsize Enterprise	165
Large Enterprise	607

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

10%

Government

Comms Service Provider

Manufacturing Company

Healthcare Company

Retailer

Insurance Company

University

Outsourcing Company

Construction Company

Energy/Utilities Company

Non Profit

Real Estate/Law Firm

Media Company

Legal Firm

Educational Organization

Marketing Services Firm

Wholesaler/Distributor

Hospitality Company

Performing Arts

Transportation Company

Recreational Facilities/Services Company

Consumer Goods Company

Pharma/Biotech Company

Non Tech Company

Logistics Company

Compare F5 Advanced WAF with alternative products

Learn more about F5 Advanced WAF

F5 Advanced WAF has helped organizations to expose more services to the public while providing an extra layer of protection, preventing revenue loss, and securing connectivity.

F5 Advanced WAF customers

MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank

Product Categories

Web Application Firewall (WAF)

Popular Comparisons

Prisma Cloud by Palo Alto Networks vs F5 Advanced WAF

Imperva Application Security Platform vs F5 Advanced WAF

Cloudflare Web Application Firewall vs F5 Advanced WAF

Fortinet FortiWeb vs F5 Advanced WAF

NetScaler vs F5 Advanced WAF

Azure Front Door vs F5 Advanced WAF

Microsoft Azure Application Gateway vs F5 Advanced WAF

AWS WAF vs F5 Advanced WAF

Gigamon Deep Observability Pipeline vs F5 Advanced WAF

Akamai App and API Protector vs F5 Advanced WAF

F5 Distributed Cloud Services vs F5 Advanced WAF

Azure Web Application Firewall vs F5 Advanced WAF

Radware Alteon vs F5 Advanced WAF

Fastly vs F5 Advanced WAF

Check Point CloudGuard WAF vs F5 Advanced WAF

See all alternatives

F5 Advanced WAF Reviews Summary
Author info	Rating	Review Summary
Cyber Security Consultant at ProTechmanize	4.0	I find F5 Advanced WAF crucial for securing critical banking applications, effectively blocking attacks and bots. Behavioral learning minimizes false positives. Though initial tuning is complex, it delivers high stability and ROI after proper implementation.
Security Solutions Architect at a consultancy with 1-10 employees	4.0	I deploy F5 Advanced WAF for banks, valuing its granular configurability, visibility, stability, and scalability. However, the on-premises version lacks comprehensive API security, and its high cost and limited free training are drawbacks.
Project Manager at IBM	4.0	I value F5 Advanced WAF's strong features, including accurate ML for false positives, making it superior to Radware. While setup is easy, GTM is complex, and I'm dissatisfied with technical support's availability and skill. Overall, I rate it 8/10.
CEO at CyberApp	4.0	I have used F5 Advanced WAF for ten years, finding its combined negative and positive security, along with bot protection, very effective. It works well, support is good, and the cost is affordable. I rate it 8/10.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees	5.0	I find F5 Advanced WAF performs well with unique features. However, perpetual licensing lacks support transparency, making ROI difficult, and partner training is poor, hindering growth. Subscription models offer clearer value.
Senior Network Consultant at Visionet Systems Inc.	4.0	I find F5 Advanced WAF effective for protecting VPNs and APIs and meeting compliance. It's stable with good features and easy to set up. However, support is slow, and the hardware is costly. I rate it an 8/10.
Senior Security Engineer at a financial services firm with 1,001-5,000 employees	4.5	I find F5 Advanced WAF significantly improves security by fending off diverse attacks, offering DDoS protection and bot blocking. It's stable, scalable, and provides good ROI, but I desire better legacy protocol support and more skilled initial tech support.
Senior Security Solutions Architect at Orange	4.0	I find F5 Advanced WAF excellent for protecting applications, with strong features, stability, and scalability. Its setup is easy, and support is great. However, I believe its DDoS capabilities and pricing could be improved.

Title	Rating	Mindshare	Recommending
Prisma Cloud by Palo Alto Networks	4.2	2.0%	98%	114 interviews Add to research
Imperva Application Security Platform	4.3	7.6%	95%	135 interviews Add to research

F5 Advanced WAF Reviews

What is F5 Advanced WAF?

Featured F5 Advanced WAF reviews

F5 Advanced WAF mindshare

PeerResearch reports based on F5 Advanced WAF reviews

Valuable Features

Room for Improvement

ROI

Pricing

Popular Use Cases

Service and Support

Deployment

Scalability

Stability

Review data by company size

Top industries

Compare F5 Advanced WAF with alternative products

Learn more about F5 Advanced WAF

F5 Advanced WAF customers

Related questions

Product Categories

Popular Comparisons