Try our new research platform with insights from 80,000+ expert users

Azure DDoS Protection vs F5 BIG-IP Advanced Firewall Manager (AFM) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.0
Cloudflare enhances performance, reduces operational costs, and boosts revenue, with reported benefits of $903,000 over three years.
Sentiment score
7.2
Azure DDoS Protection offers cost-effective security for public IPs, benefiting users with ROI despite varying enterprise costs.
Sentiment score
7.2
Organizations see positive ROI from F5 BIG-IP Advanced Firewall Manager, particularly when integrated with other F5 tools, despite eventual cost increases.
WordPress security can be tricky, and that's where Cloudflare can be absolutely helpful for small businesses.
We have had ROI with the tool's use since it never gave us downtime and made us lose millions.
For the small project I was working on, using the basic tier provided a huge improvement at zero cost.
 

Customer Service

Sentiment score
7.3
Cloudflare's service is praised for responsiveness, but some users face delays, often relying on extensive documentation for solutions.
Sentiment score
6.3
Educational institutions commend Azure DDoS Protection's swift support, while others experience slower response times affecting satisfaction.
Sentiment score
6.5
F5 BIG-IP AFM support is responsive yet inconsistent, praised for professionalism but needing improvement in communication accuracy and knowledge levels.
This would help us address issues promptly, especially during unforeseen events like DDoS attacks.
We'd like a dedicated account manager.
You can get a support engineer with the best qualifications.
The response time is very slow, especially when multiple teams are required to collaborate on a case.
The responses are generally fast and effective.
The customer service is excellent, and I rate it ten out of ten.
 

Scalability Issues

Sentiment score
8.2
Cloudflare's scalable architecture is praised for efficient traffic handling, seamless expansion, and meeting diverse enterprise needs globally.
Sentiment score
6.9
Azure DDoS Protection excels in scalability and reliability, ideal for large enterprises, enhancing security in extensive environments.
Sentiment score
7.3
F5 BIG-IP Advanced Firewall Manager is praised for its scalability, adaptability, and efficient performance across physical and virtual environments.
I would rate the solution's scalability a ten out of ten since I didn't encounter any issues with it.
I rate its scalability a ten out of ten because I had no issues with it.
I rate the scalability a ten out of ten.
The solution is highly scalable, allowing me to add or remove nodes and manage traffic without interruption, which is essential for meeting application demands.
 

Stability Issues

Sentiment score
7.7
Users praise Cloudflare for improved reliability, effective DDoS protection, and excellent DNS services despite initial configuration needs.
Sentiment score
7.6
Azure DDoS Protection is highly stable, rated 8/10, with minimal configuration issues and no downtime or false positives reported.
Sentiment score
8.4
F5 BIG-IP AFM is highly stable, reliable, well-supported, and offers clear logging with strong performance, rated 8-9/10.
For DDoS protection, I would not recommend Cloudflare.
I rate the solution’s stability an eight out of ten.
The service is very stable with no impacts during high-traffic periods.
 

Room For Improvement

Cloudflare users seek better analytics, integration, support, pricing clarity, and enhanced features like caching and multi-user access.
Azure DDoS Protection requires improved interface consistency, reporting, configuration simplicity, bandwidth optimization, enhanced services, and AI-driven auto-remediation.
F5 BIG-IP Advanced Firewall Manager requires enhancements in interface, features, automation, support, pricing, setup, and zero-day attack prevention.
There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features.
Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor.
the ability to integrate with the on-site active directory instead of just AD through Azure AD
It would be beneficial to have more detailed insights available directly on the dashboard.
I have noticed some false positives with the Web Application Firewall yet not with DDoS Protection.
I suggest adding more services and additional services, which would be beneficial.
Having advanced technology similar to other vendors like Palo Alto for zero-day attack prevention would be valuable.
The appliance and features could be enhanced further, especially in terms of security.
 

Setup Cost

Cloudflare offers flexible pricing plans from free to $1,500 monthly, ideal for businesses of different sizes and traffic needs.
Azure DDoS Protection offers expensive but comprehensive protection with trial, special pricing for education, and no extra fees for some uses.
F5 BIG-IP AFM is valuable for its features and unified platform, despite being pricier than some competitors.
That's where Cloudflare shines for smaller businesses – it's ten times cheaper than Akamai.
I find it to be cheap.
It's cost-effective, but I think they should have a custom pricing model for enterprise customers based on the features you use.
If used with Front Door or Web Application Firewall, DDoS Protection is included without additional cost.
The pricing is somewhat costly, usually around $3,000 to $4,000 per month.
Compared to competitors, it is good.
The standard license is reasonably priced, but additional features like the WAF can be more expensive.
If considering a one-stop solution that provides load balancing, DNS security, AAA authentication, and firewalling on the same hardware, the cost is reasonable.
 

Valuable Features

Cloudflare enhances performance and security with CDN, caching, DDoS protection, easy DNS management, analytics, and intuitive interface.
Azure DDoS Protection offers seamless integration, robust security, and scalability, despite higher costs, providing significant ROI for vulnerable environments.
F5 BIG-IP AFM effectively offers advanced traffic analysis, DDoS protection, easy deployment, and integrates seamlessly with other security tools.
Our scenario consisted of two web servers in different allocations to control access demands, and the load balancer did the job as expected, bringing security and stability to access points.
For me, the valuable feature is DDoS protection.
The most valuable features of the solution are performance and security.
The security architecture with Azure DDoS Protection is critical for safeguarding our financial organization's infrastructure.
The ability to do research and development quickly without waiting for infrastructure is a plus.
The integration of various tools with Azure Firewall, like DDoS Protection, Web Application Firewall, and Azure Front Door, is quite effective.
The solution provides behavioral analysis via AI to detect malicious traffic.
The most valuable features for me are stability, availability, and security, along with the ability to manage multiple features to secure my applications.
 

Categories and Ranking

Cloudflare
Sponsored
Ranking in Distributed Denial-of-Service (DDoS) Protection
1st
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
74
Ranking in other categories
CDN (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Azure DDoS Protection
Ranking in Distributed Denial-of-Service (DDoS) Protection
8th
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
8
Ranking in other categories
Microsoft Security Suite (21st)
F5 BIG-IP Advanced Firewall...
Ranking in Distributed Denial-of-Service (DDoS) Protection
11th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
25
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of Cloudflare is 19.4%, up from 19.2% compared to the previous year. The mindshare of Azure DDoS Protection is 4.0%, up from 3.7% compared to the previous year. The mindshare of F5 BIG-IP Advanced Firewall Manager (AFM) is 1.4%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Distributed Denial-of-Service (DDoS) Protection
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Venkat Raju Mallipudi - PeerSpot reviewer
Acts as an additional layer of protection, provides endpoint security but not very easy to configure
It's not very easy to configure, in my view. We have to do some work behind the scenes. It's not very simple. We have to do it very carefully, and we need to monitor this enablement as well. But apart from that, I didn't see any kind of challenges. So, in my opinion, configuration is the main trouble for them. It is something that can be done to be better. Not just configuration. You need an expert who knows the ins and outs of these security solutions. In my experience, people struggle with configuration. While configuring, we get this error, we get that error, and then we try to fix those issues. I have seen those. It's not straightforward.
Richard Polyak - PeerSpot reviewer
Straightforward setup with very good granularity and performance
Our company uses the solution as a data center firewall.  It is hard to determine all users within our infrastructure. It depends on systems we put behind the solution. Its internal but also a data center firewall. Sometimes, there are hooks from the solution to our external infrastructure or…
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
846,617 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
20%
Computer Software Company
13%
Comms Service Provider
9%
Financial Services Firm
8%
Computer Software Company
18%
Financial Services Firm
13%
Government
8%
Manufacturing Company
7%
Financial Services Firm
22%
Computer Software Company
19%
Insurance Company
9%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Azure DDoS Protection?
Azure DDoS Protection offers superior protection against denial-of-service attacks.
What is your experience regarding pricing and costs for Azure DDoS Protection?
The pricing is somewhat costly, usually around $3,000 to $4,000 per month. Managing this expense is tough, especially...
What needs improvement with Azure DDoS Protection?
The dashboard lacks insights and user-friendliness, as most data is logged into metrics like Log Analytics workspaces...
What is your experience regarding pricing and costs for F5 Advanced Firewall Manager?
If considering a one-stop solution that provides load balancing, DNS security, AAA authentication, and firewalling on...
What needs improvement with F5 Advanced Firewall Manager?
F5 should increase its capability to prevent zero-day attacks. Having advanced technology similar to other vendors li...
 

Also Known As

Cloudflare DNS
No data available
F5 AFM, F5 Advanced Firewall Manager
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Information Not Available
City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office
Find out what your peers are saying about Azure DDoS Protection vs. F5 BIG-IP Advanced Firewall Manager (AFM) and other solutions. Updated: March 2025.
846,617 professionals have used our research since 2012.