Try our new research platform with insights from 80,000+ expert users

AWS Shield vs F5 BIG-IP Advanced Firewall Manager (AFM) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Ranking in Distributed Denial-of-Service (DDoS) Protection
1st
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (12th)
AWS Shield
Ranking in Distributed Denial-of-Service (DDoS) Protection
8th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
11
Ranking in other categories
No ranking in other categories
F5 BIG-IP Advanced Firewall...
Ranking in Distributed Denial-of-Service (DDoS) Protection
9th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
25
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2025, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of Cloudflare is 18.8%, up from 17.4% compared to the previous year. The mindshare of AWS Shield is 5.3%, down from 6.8% compared to the previous year. The mindshare of F5 BIG-IP Advanced Firewall Manager (AFM) is 1.2%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Distributed Denial-of-Service (DDoS) Protection Market Share Distribution
ProductMarket Share (%)
Cloudflare18.8%
AWS Shield5.3%
F5 BIG-IP Advanced Firewall Manager (AFM)1.2%
Other74.7%
Distributed Denial-of-Service (DDoS) Protection
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Ifeanyi Stanly Nwokoro - PeerSpot reviewer
Has ensured ongoing protection against cyber threats and provides timely automated response while requiring improvements in cost structure and performance transparency
Business inherently involves risk, and it's important that services continue to improve. AWS Shield is not an exception. Regarding advanced Shield protection pricing, there should be cost protection for most DDoS events. The pricing model should be based on service usage rather than a flat monthly rate. The advanced technique package, while premium and not available to every user due to cost implications of $3,000 per month, offers valuable features including real-time attack visibility and 24/7 access to the DDoS response team. Integration is paramount, particularly with the Web Application Firewall's rule-based blocking paradigm that helps in balancing routes, especially route 53 and the global accelerator. AWS Shield uses pattern recognition to analyze traffic, and certain attributes are immediately intercepted. The assessment process is profound, and the service maintains consistent availability. From a software perspective, there are improvements needed regarding antivirus and network security. Additional engineering improvement requirements would benefit AWS Shield.
Pawel Augustyn - PeerSpot reviewer
Provides outstanding resource management and application security across multiple geographies
The most valuable features for me are stability, availability, and security, along with the ability to manage multiple features to secure my applications. The solution also monitors and blocks unconventional requests and maintains security efficiently. The scalability feature also allows me to manage and allocate resources dynamically without disrupting production traffic.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"From what I've seen so far, there are no negatives to report as of yet"
"When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
"The solution provides good load balancing and protection against DDoS attacks."
"The most valuable feature is the web application firewall."
"The DDoS protection is the most valuable aspect of the solution."
"It is easier to configure and develop documentation to see how we have configured firewalls."
"The most valuable features of the solution are performance and security."
"The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules."
"The product has a good mechanism to analyze trends and trigger events."
"The product is easy to use."
"It is quite scalable, and we have not faced any issues with its scalability."
"AWS Shield offers numerous protection features that are crucial at the application layer, safeguarding users from distributed denial of service attacks, man-in-the-middle assaults, and hacker orchestrations."
"We have integrated the tool with Active Directory. The most important feature is that it's transparent and doesn't degrade the performance of our solution. Additionally, it's easy to configure, which is crucial for us. It's easy to use and set up and stops attacks on our servers. We haven't encountered any attack problems because the solution stops them in real-time. AWS Shield specifically focuses on defending against denial-of-service attacks, making it a great solution for that type of threat."
"The solution's ease of use is the most valuable feature."
"It is integrated with AWS. So, it gives you a good first step."
"The solution operates smoothly at its baseline level, and we do not encounter any issues at that level."
"This product excells in every aspect from installation and the interface to providing superior network security."
"It excels in preventing downtime and maintaining application performance, which is crucial for our clients' security and operational continuity."
"We use three main features. The first one is access control. The second feature we use is called IP intelligence. Finally, we have a DDoS safety feature."
"The most valuable features of F5 BIG-IP Advanced Firewall Manager (AFM) are the web gateway, load balancing, services, and applications available."
"The solution provides behavioral analysis via AI to detect malicious traffic."
"The most valuable feature of F5 BIG-IP AFM is all of my workers enjoy using it."
"The setup and functionality are fairly straightforward."
"The features of F5 BIG-IP Advanced Firewall Manager that have proven most effective in securing the network are significant."
 

Cons

"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"The product needs to improve its automation."
"The solution could work at being less expensive. It costs a lot to use it."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"Cloudflare's console should be made more user-friendly."
"We have noticed multiple instances where Cloudflare falsely indicates that our servers are down, even when there is no actual load on them. This makes it challenging for us to identify the exact issue."
"An integrated SSO feature would be useful for Cloudflare DNS."
"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"The network has been experiencing frustrating performance issues today, which is not typical for Nigeria."
"The time taken to detect anomalies must be reduced."
"AWS Shield Standard requires improvement, particularly regarding its dashboard since it currently provides limited coverage against comprehensive DDoS attacks."
"AWS Shield has limited coverage as it only protects against common and high-volume network and transport layer attacks, such as SYN floods."
"The management of it is a bit hard. If you don't engineer it on the front side, it is hard to go back in and change it. It could be improved in terms of architecture requirements and then ongoing support requirements as a secondary component to it. People tend to set up things like this, and they just expect it to work without the care and feeding that needs to go back into it either from an application team or a network environment team."
"The product should give users more flexibility to customize their security policies according to their requirements."
"The product needs to improve its logs and reports to make it read better."
"We end up having to pay extra for features that AWS adds that we don't need."
"The solution’s initial setup is not easy."
"The solution doesn't really meet our requirements for an edge firewall."
"There is room for improvement in Advanced Firewall Manager's dashboard statistics, especially during attacks."
"F5 could provide a distributed cloud version."
"We would have preferred to have support when we first started"
"F5 should increase its capability to prevent zero-day attacks. Having advanced technology similar to other vendors like Palo Alto for zero-day attack prevention would be valuable."
"For configuring the firewall, every single vendor on the planet has pretty much the same logic when it comes to firewalls, and F5 has a completely different approach and completely different behavior."
"Currently, we have eighty F5s and we need some kind of management software. It would be very helpful."
 

Pricing and Cost Advice

"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"The product's pricing is minimal compared to other products."
"We are using the free tier of the solution."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"We don't have any issues with the price."
"The price of the solution is expensive."
"The price is reasonable."
"The tool is cheap."
"The tool's pricing is good."
"We pay $3000 per month for the solution."
"The cost depends on traffic each month, so on average, it costs us between US$200 and US$300 per month."
"It depends on your subscription level and the volume that you're spending with AWS. So, it is very relative to the consumption alignment in your subscription level. It is a well-constructed, scalable pricing option, but it is relative to how much you're spending on AWS. Because the more you spend, typically, the more you get off on services like this. I find it to be comparable to other solutions."
"We have purchased a five-year licensing package for the product."
"F5 BIG-IP Advanced Firewall Manager is not an expensive solution."
"We need to pay a yearly licensing fee for the solution."
"As per pricing, I would not say cheap, but little higher than cheap, but not very expensive. So you can say kind of value for money solutions."
"F5 BIG-IP Advanced Firewall Manager (AFM) is an expensive solution. They are one of the best in the market, but the price could be cheaper."
"The product is expensive."
"F5 BIG-IP AFM is an affordable solution. There were not any additional fees other than the standard licensing."
"It's very expensive, and you pay extra for the models."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
872,019 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
13%
Comms Service Provider
12%
Financial Services Firm
10%
Insurance Company
8%
Financial Services Firm
16%
Computer Software Company
14%
Performing Arts
10%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise7
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise5
Large Enterprise14
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about AWS Shield?
We have integrated the tool with Active Directory. The most important feature is that it's transparent and doesn't de...
What needs improvement with AWS Shield?
Perhaps the time required to detect anomalies can be reduced. Presently, it takes some time to determine whether a si...
What is your experience regarding pricing and costs for F5 Advanced Firewall Manager?
The standard license is reasonably priced, but additional features like the WAF can be more expensive. There are plen...
What needs improvement with F5 Advanced Firewall Manager?
The appliance and features could be enhanced further, especially in terms of security. Some features like the WAF ( /...
 

Also Known As

Cloudflare DNS
No data available
F5 AFM, F5 Advanced Firewall Manager
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
netflix, dow jones, mapbox, pearson, rovio, youview, moviestar planet, asurion, payplug, hour of code
City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office
Find out what your peers are saying about AWS Shield vs. F5 BIG-IP Advanced Firewall Manager (AFM) and other solutions. Updated: September 2025.
872,019 professionals have used our research since 2012.