Try our new research platform with insights from 80,000+ expert users

Cloudflare Web Application Firewall vs F5 Advanced WAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
74
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
Cloudflare Web Application ...
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
23
Ranking in other categories
Web Application Firewall (WAF) (6th)
F5 Advanced WAF
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
68
Ranking in other categories
Web Application Firewall (WAF) (3rd)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
SachidDoshi - PeerSpot reviewer
Offers a huge signature repository and is superiorly effective in mitigating DDoS attacks
The solution's learning curve can still be further reduced, which presently stands at two or three months. The product has a custom rule set that users can modify and manifest as needed. The vendor can probably shorten the learning curve using cutting-edge technologies like AI. The solution provider can also work around the web applications and identify the toolset that needs to be implemented to deploy the solution in less time. The vendor has launched a SASE product that can function with Cloudflare Web Application Firewall, but many improvements are needed in terms of features, such as the web filtering feature, and CASB has not yet been added.
Richard Polyak - PeerSpot reviewer
Easy event identification, highly stable, and customizable
Generally, F5 Advanced WAF initial setup is straightforward. However, our environment was more complex and it took us a little more time to customize the solution to where we needed it to be. Additionally, the customization didn't rectify everything. We had to do customization to a certain event to prevent attacks that it wasn't catching, but that might not necessarily be the solutions' fault. It could be more of our setup than the solution's fault and not being able to run the latest version or the newer version could be more of a limitation on our ability to put it in the right place. The whole implementation to have the solution run at the level we wanted it to take approximately five months. Our company's environment is one that we can't put a canned solution in front of. Our environment, cannot have a canned solution that might fit everybody else because of how customized this environment is. It does need a lot of tuning to meet our environment's requirements. I rate the initial setup of F5 Advanced WAF a three out of five.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's very user-friendly."
"Generally, I am satisfied with this product."
"Cloudflare allows us to self-host services such as Rocket.Chat and Node-RED, in high-availability mode, thanks to round robin DNS which allows us to share one hostname between our two locations."
"It is a fast and secure DNS."
"The most valuable feature is its usability."
"The most valuable features of the solution are performance and security."
"I rate its stability a ten out of ten."
"The solution offers the flexibility to control configuration rules."
"The product has a valuable security control functionality."
"Does a good job preventing web application attacks."
"The Cloudflare Web Application Firewall's most valuable feature is its ease of configuration."
"Some of the most valuable features of Cloudflare Web Application Firewall include its DNS zone setup and the zero trust policy."
"Cloudflare is cheaper compared to Azure WAF, which I have considered before."
"We like that there's load balancing, firewall capabilities, DDoS protection, et cetera, all covered by Cloudflare."
"There is a huge signature repository"
"Cloudflare WAF provides protection through rules and functionalities like Cloudflare's SDRAP."
"Identification, ease of use, and ease of modifying it to most of our needs are valuable."
"Good dashboard and reporting."
"It provides web application security and reduces bot attacks."
"The AOF solution provides numerous security features."
"The bot defense capability, as well as protection from brute force attacks and OWASP Top Ten, are notable features."
"It's flexible and powerful, and the users can input their own rules to the system."
"It also has antivirus and DDoS mitigation capabilities. We have enabled these features."
"F5's user-friendly interface and seamless integration stand out as the most valuable features for us."
 

Cons

"The analytics, basically the dashboard, doesn't have much to it."
"If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag."
"DNS Management."
"I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"The pricing could be improved."
"We're facing challenges due to an upgrade in the machine learning model. The problem arises from some users abusing the APIs, resulting in an influx of suspicious traffic. Cloudflare's learning model mistakenly identifies this traffic as human. Consequently, it assigns it a higher trust score, akin to legitimate human traffic, causing complications in our architecture. Previously, such traffic would have been categorized as suspicious, enabling us to apply appropriate blocking rules. However, we encounter difficulties distinguishing between genuine and suspicious traffic with the new categorization. Despite these challenges, overall, Cloudflare remains the preferred solution compared to Azure, AWS CloudFront, and Google Cloud Armor."
"The solution could be more user-friendly."
"We have noticed some latency when the call goes through the firewall. That could be improved."
"The platform's control features related to real-time authentication and response time need improvement."
"The product can improve by having more multitenancy capability, which is currently not available."
"If they add logs history within the Cloudflare offering, that would be a great benefit."
"There could be an option to duplicate the cluster to maintain the consistency of rules."
"The learning curve was steep initially."
"I have experienced some difficulties with Cloudflare's support as a customer based in India."
"It would be ideal if the solution offered better log integration and more integration with different platforms."
"I would like for there to be a cloud-based solution, this would also help to improve scalability."
"For me, an area for improvement in F5 Advanced WAF is the reporting as it isn't so clear. The vendor needs to work on the reporting capability of the solution. What I'd like to see in the next release of F5 Advanced WAF is threat intelligence to protect your web application, particularly having that capability out-of-the-box, and not needing to pay extra for it, similar to what's offered in FortiWeb, for example, any request that originates from a malicious IP will be blocked automatically by FortiWeb. F5 Advanced WAF should have the intelligence for blocking malicious IPs, or automatically blocking threats included in the license, instead of making it an add-on feature that users have to pay for apart from the standard licensing fees."
"There is a learning curve that extends the time of implementation."
"It's sometimes difficult to customize APIs with F5 Advanced WAF."
"It's a powerful tool yet can be complex for new users."
"We get false positives sometimes."
"They could provide better pricing."
"While F5 Advanced WAF does limit the number of partners in certain regions to ensure successful business transactions, they could also benefit from expanding their partnerships and making it easier for more people to learn about and become experts in F5 Advanced WAF. By doing so, they could increase the reach and exposure of their solution, similar to how Cisco has become widely recognized in the security industry."
 

Pricing and Cost Advice

"We are using the free tier of the solution."
"There are no additional costs beyond the standard licensing fees."
"The price of the solution is expensive."
"The product's pricing is minimal compared to other products."
"We are using the free version."
"A free version of the solution is available."
"The cost primarily depends on the size of the organization."
"That is one of the great features. I was able to access the majority of the features and services for free."
"What's my experience with pricing, setup cost, and licensing? I believe the pricing is not the best, but it's reasonable and acceptable. We also use the McAfee system in parallel. In terms of pricing, its okay - not great, but not bad either. It falls in the middle, which is acceptable. In terms of support licensing, last time, we were searching for a solution, and we considered products from resellers rather than directly from the cloud provider. However, the pricing we encountered was exceptionally high. As a result, we are inclined to select support from the reseller."
"We pay $210 per month for CloudFlare WAF."
"The annual licensing fee is $10,000 USD."
"The solution's pricing option needs to be more transparent for enterprise clients."
"It is not too pricey."
"The pricing model is very straightforward compared to the competition. You just pay per month for the product and usage."
"The solution is expensive."
"Cloudflare Web Application Firewall is more affordable than other solutions."
"F5 Advanced WAF technical support comes at a cost, and it's expensive."
"F5 Advanced WAF is not a cost-effective solution. Although they are attempting to reduce prices with their VE and cloud options, they are more expensive than other solutions. The solution is more expensive on average."
"A yearly license for F5 Advanced WAF is expensive."
"I don't have any issue with the pricing of this solution."
"It is a little bit costly, but it has all the features that are required."
"F5 Advanced WAF's pricing is high."
"The pricing of F5 Advanced WAF is more expensive than other solutions like Radware and CD18, it is quite high."
"There are various plans available for Fortinet FortiWeb Cloud WAF as a Service, including a trial version."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
842,296 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
21%
Computer Software Company
13%
Comms Service Provider
9%
Financial Services Firm
8%
Educational Organization
25%
Computer Software Company
14%
Financial Services Firm
7%
Manufacturing Company
5%
Financial Services Firm
15%
Computer Software Company
14%
Government
8%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about Cloudflare Web Application Firewall?
The product has a valuable security control functionality.
What is your experience regarding pricing and costs for Cloudflare Web Application Firewall?
Cloudflare is cheaper compared to Azure WAF, which I have considered before.
What needs improvement with Cloudflare Web Application Firewall?
The product can improve by having more multitenancy capability, which is currently not available. This improvement wo...
What do you like most about F5 Advanced WAF?
It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the r...
What is your experience regarding pricing and costs for F5 Advanced WAF?
Subscription models have competitive pricing, while perpetual licenses involve an upfront higher cost, leading to amb...
What needs improvement with F5 Advanced WAF?
F5 Advanced WAF sells perpetual licenses as perpetual assets during sales without informing me that support ends afte...
 

Also Known As

Cloudflare DNS
Cloudflare WAF
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
crunchbase, udacity, marketo, okcupid, zendesk
MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
Find out what your peers are saying about Cloudflare Web Application Firewall vs. F5 Advanced WAF and other solutions. Updated: March 2025.
842,296 professionals have used our research since 2012.