Try our new research platform with insights from 80,000+ expert users

Barracuda Web Application Firewall vs F5 BIG-IP Local Traffic Manager (LTM) comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
71
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Barracuda Web Application F...
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
42
Ranking in other categories
Web Application Firewall (WAF) (17th)
F5 BIG-IP Local Traffic Man...
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
120
Ranking in other categories
Application Delivery Controllers (ADC) (2nd)
 

Mindshare comparison

Web Application Firewall (WAF)
Application Delivery Controllers (ADC)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Carlo Bertini - PeerSpot reviewer
Provides strong issue discovery capabilities; enhance the security parameters of web applications and suitable for medium to large enterprises
The Barracuda support depends. Sometimes, they solve the issue promptly, but normally, they are not so fast and are not entirely focused on the problem. For example, sometimes I write many requests on the tickets, asking for one, two, three, or four steps and asking for one to three resolutions. Often, they respond with only one or two. So, I need to push again and again. In other cases, I ask questions and get positive feedback immediately, depending on who the technician is. Barracuda has engineers in the USA, UK, and other countries, so it depends on the technician's location and expertise. So, I am not completely satisfied, but sometimes it is okay, and sometimes it is not okay. So, depending on the region and depending on the person who actually receives these tickets, the technical support could be more knowledgeable. So they may need some training or education for the entire staff to respond immediately without any delays. Often, it happens that they respond because they need to, not because they understand the technology I'm using. So they respond just because it's required by the service level agreement, which specifies a response time within four hours. But this is just a response, not a resolution of the case. Sometimes, the response is within the agreed time, but the solution takes much longer.
Richard Polyak - PeerSpot reviewer
Reduces maintenance downtime and has a strong user community
The advice I would give to others who are looking to implement F5 BIG-IP Local Traffic Manager is this: look at their user knowledge base first to see if the solution truly fits what you need. On a scale of one to 10, I would give F5 BIG-IP Local Traffic Manager a nine.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"From what I've seen so far, there are no negatives to report as of yet"
"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service."
"The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs."
"The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules."
"It's very user-friendly."
"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"The solution's most valuable feature is that it actually protects our website, and it provides all the required security functions."
"The solution offers multiple security features. There are machine learning features and great URL encryption. It also offers multi-protocol support against DDoS attacks."
"Has a good dashboard."
"Some of the most valuable features are the ease of deployment, the Barracuda support, the easy-to-use console, and the granularity of the reports."
"The most valuable feature is the automatic content filtering."
"Setup of this solution is straightforward. It's a stable and scalable solution, with good performance and fast technical support."
"The most valuable feature is the ease of use and the signature base."
"The product's advanced bot and threat protection capabilities are valuable."
"Stable and scalable network traffic management solution for applications. It has good performance."
"The combination of ADC and WAN is good."
"iRule feature is useful."
"The most valuable feature is the proxy."
"The configuration and integration into the AWS environment was pretty easy."
"The value and impact of using F5 BIG-IP LTM for application delivery control in our organization are significant."
"The web application firewall feature is the most valuable and useful feature. It is a leading industry product when it comes to load balancing. Its user interface is very simple. There isn't a steep learning curve. When we initiate someone to F5, they start using it quickly."
"The main reason that we suggest this product to our clients is the great integration with other security tools, such as IBM Guardium."
 

Cons

"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"We are a product integrator and reseller, and we would like to have a better partner relationship, similar to a channel sales relationship. Sometimes we are on our own or get diverted by Cloudflare because they have direct sales, which competes with us and makes it difficult to build a relationship with this company since we want to be an MSP or a managed service provider for the solution."
"I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us."
"The reporting can definitely be improved to offer a lot more explanation on something that may have happened or has actually happened."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"DNS Management."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"I have found F5 more stable than Barracuda Web Application Firewall. They should improve the stability."
"The GUI needs to be improved because it sometimes hangs and needs to be restarted."
"The platform's pricing needs improvement."
"I have to go to an individual obligation, make changes, and come out, and go to the next obligation and make the same changes. There is no grouping option."
"It is not stable nor mature."
"The incident reporting needs to be improved."
"An area for improvement in Barracuda Web Application Firewall is attack identification. Other banks identified attacks and tracked logs that the solution wasn't able to identify because of its ready-made rules pre-deployed by the vendor. My organization raised this issue with the technical support team. Another area to improve in Barracuda Web Application Firewall is its service desk. The team resorted to stonewalling because they couldn't accept that a feature was missing in the solution, and it was only after a lot of drilling down that the service desk team accepted that, and would be adding that feature in the future. My organization had to submit a report to the Reserve Bank of India with information on the logs identified and the attacks that happened, and that there was a failure on the part of the Barracuda Web Application Firewall. The Reserve Bank of India conducts a tri-monthly cyber risk audit in all Indian banks. Even smaller banks identified and caught attacks that my organization wasn't able to do, so I was looking into other solutions that competitor banks could be using because Barracuda Web Application Firewall failed to identify some of the attacks."
"One of Barracuda's limitations is its user interface. The GUI for configuration is not intuitive and has remained largely unchanged for the past 10 to 12 years."
"A lot of functions that are attributed to iRules can actually be simple profile changes. iRules do have a certain performance impact. Therefore, instead of writing simple iRules, they can create certain profiles for classes that will perform the same function."
"It would possibly help to get more training, even better in local languages."
"Performance: Using the product, applications are jittery.​"
"Implementing whitepapers with a lot more applications could easily be added."
"The solution's initial setup process was quite complex. I"
"Security and Reporting."
"There is a challenge in Pakistan. This is when there is a hardware failure. Sometimes, it takes more time to get a replacement because it is sent out from the U.S. or some other regional outpost. Thus, it takes two to three days to receive a replacement."
"We would like to see load balancing between the cloud and the on-premise, a straightforward deployment feature."
 

Pricing and Cost Advice

"That is one of the great features. I was able to access the majority of the features and services for free."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"The price of the solution is expensive."
"The product's pricing is minimal compared to other products."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"The cost primarily depends on the size of the organization."
"The price is reasonable."
"The product is inexpensive."
"The solution is based on a licensing model and might be $360 for the hybrid version."
"The pricing is reasonable."
"They have competitive pricing."
"The product pricing was competitive for the value it offers regarding security features."
"In my opinion, the product is fairly priced."
"The price of this solution is okay."
"They only offer a yearly licensing plan."
"Purchasing through the AWS Marketplace was good. We chose to go through the AWS Marketplace because everything that we needed was a soft appliance. We needed something to work in Amazon, and this product was available there."
"LTM is a good product, but it's expensive. They should make it more competitive because cloud providers offer free load balancing. Cloud providers can't cover all the security aspects of F5, but you get a decent amount of security. Cloud environments are becoming the norm across the IT industry. Many of the larger companies that previously used on-prem infrastructure are switching to the cloud, so companies like Fortinet and Palo Alto are reducing their prices. Otherwise, they can't compete in the cloud."
"F5 is expensive."
"The cost that they have with AWS are almost prohibitive. I'm being forced to use F5 WAF. I would not simply use it based on cost. I agree that they have some great features, but for me, cost is key in terms of AWS."
"The licensing strategy for F5 is good."
"BIG-IP LTM is considered a premium product, so it's quite expensive and isn't affordable for all customers."
"It's fair, it's not too expensive. Maybe just a little high."
"The licensing pricing seems relatively easy enough to get your head around. I would advise anyone to ensure that you have a conversation with an F5 consultant before purchasing, as you would with most products."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
829,634 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
25%
Computer Software Company
13%
Comms Service Provider
8%
Financial Services Firm
7%
Computer Software Company
20%
Financial Services Firm
10%
Manufacturing Company
8%
Government
7%
Financial Services Firm
17%
Computer Software Company
14%
Government
9%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Barracuda Web Application Firewall?
It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs...
What is your primary use case for Barracuda Web Application Firewall?
I'm using Barracuda as a web application firewall for any application. It is too smart and user-friendly, making it e...
What is your experience regarding pricing and costs for Barracuda Web Application Firewall?
On a scale, pricing is nine out of ten. It's a reasonable price for this product.
What needs improvement with F5 BIG-IP?
There are no specific areas for improvement as it is already well-resolved and doesn't require further enhancements.
What is your primary use case for F5 BIG-IP?
The primary use case includes load balancing to serve application servers and basic web application firewall solution...
 

Also Known As

Cloudflare DNS
No data available
F5 BIG-IP, BIG-IP LTM, F5 ASM, Viprion, F5 BIG-IP Virtual Edition , Crescendo Networks Application Delivery Controller, BIG IP
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Oracle, CBS, Pioneer, Hyundai, Publix, Barnes Noble, Calzedonia, Nordstrom, Samsung, Nascar
Riken, TransUnion, Tepco Systems Administration, Daejeon University, G&T Bank, Danamon, CyberAgent Inc.
Find out what your peers are saying about Barracuda Web Application Firewall vs. F5 BIG-IP Local Traffic Manager (LTM) and other solutions. Updated: September 2020.
829,634 professionals have used our research since 2012.