I work for a bank, and we have a mobile banking app with around 25,000 users. We use LTM for load balancing on the internal network, and the web feature helps us fill holes in application security due to vulnerabilities in legacy applications.
It also provides perimeter protection against DDoS attacks and SQL injection.
LTM's cloud capabilities could be improved. Cloud providers all offer load balancing, but you can't get the same level of security. F5's cloud service is still not on par with its on-prem service. F5 acquired multiple companies a few years ago, but they still haven't integrated those solutions. For example, F5 acquired Shape Security, which had an excellent solution for detecting bots and automated login attacks, but F5 offers the solution in an inflexible way. It is only available as a cloud-based solution. It isn't zone-based. Some companies are restricted from sending financial data outside the country because of GDPR in Europe or other national regulations. Here in the UAE, we can't send host data out.
