Try our new research platform with insights from 80,000+ expert users

Cloudflare vs F5 BIG-IP Advanced Firewall Manager (AFM) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 5, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Ranking in Distributed Denial-of-Service (DDoS) Protection
1st
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
74
Ranking in other categories
CDN (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
F5 BIG-IP Advanced Firewall...
Ranking in Distributed Denial-of-Service (DDoS) Protection
9th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
23
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2025, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of Cloudflare is 18.9%, down from 19.3% compared to the previous year. The mindshare of F5 BIG-IP Advanced Firewall Manager (AFM) is 1.4%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Distributed Denial-of-Service (DDoS) Protection
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Richard Polyak - PeerSpot reviewer
Straightforward setup with very good granularity and performance
Our company uses the solution as a data center firewall.  It is hard to determine all users within our infrastructure. It depends on systems we put behind the solution. Its internal but also a data center firewall. Sometimes, there are hooks from the solution to our external infrastructure or…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"The most valuable features of the solution are performance and security."
"Cloudflare DNS is widely used, and it's good for websites. If we use Cloudflare DNS and update one record, it updates in their office instantly."
"The UI is good."
"The solution offers the flexibility to control configuration rules."
"The DDoS protection is the most valuable aspect of the solution."
"From what I've seen so far, there are no negatives to report as of yet"
"Easier http to https redirect using page rules"
"The protection is very useful."
"The most valuable feature of this solution is that the blocking of IP's."
"The solution is very straightforward. The usability is great."
"Its performance and ease of use are valuable."
"It is stable."
"The most valuable feature of F5 BIG-IP AFM is the iRules where I can customize the configuration."
"It blocks various attacks and mitigates disasters from occurring."
"The decryption is great."
 

Cons

"Latencies are always a problem."
"Cloudflare's free plan is limited to 5,000 records for their free plan. They should increase that. For example, if I create a domain called abc.com and a subdomain called a.abc.com, my record count will be two. I can make a maximum of 5,000 subdomains. However, if we use our own DNS hosted on another provider, there is no limit. Their free plan also lacks name server customization."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"The product needs to improve its automation."
"The solution could use more analytics on the backend to give us more insights into everything. More reports would be helpful."
"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"Cloudflare could be improved by introducing a mid-tier pricing option."
"Deployment times vary according to the customer. It needs to be heavily configured. You need to look and you need to observe the behavior of the traffic before you can start configuring everything. It can take time."
"Firstly, geolocation currently relies on manual updates. It has to move to automatic updates. There are no automatic updates for this feature. If some IPs, countries, or service providers move to another country, now you will be allow IPs that you previously denied. This is because you depend on the database, which doesn't update automatically. This is really a very important area that they need to improve."
"The solution's UI could be improved."
"There is room for improvement in Advanced Firewall Manager's dashboard statistics, especially during attacks."
"Currently, we have eighty F5s and we need some kind of management software. It would be very helpful."
"The web gateway feature could improve in F5 BIG-IP Advanced Firewall Manager (AFM)."
"This would be absolutely the best network security solution if the price were not so high."
"It doesn't compare to next generation firewalls"
 

Pricing and Cost Advice

"That is one of the great features. I was able to access the majority of the features and services for free."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"A free version of the solution is available."
"We are using the free tier of the solution."
"I give the price a five out of ten."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The price of F5 BIG-IP AFM is a little more expensive than other firewalls on the market."
"We need to pay a yearly licensing fee for the solution."
"F5 BIG-IP Advanced Firewall Manager is not an expensive solution."
"The product is expensive."
"As per pricing, I would not say cheap, but little higher than cheap, but not very expensive. So you can say kind of value for money solutions."
"We have purchased a five-year licensing package for the product."
"F5 BIG-IP Advanced Firewall Manager (AFM) is an expensive solution. They are one of the best in the market, but the price could be cheaper."
"The solution is slightly on the higher priced side."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
839,515 professionals have used our research since 2012.
 

Comparison Review

it_user68487 - PeerSpot reviewer
Nov 6, 2013
CloudFlare vs Incapsula: Web Application Firewall
CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…
 

Top Industries

By visitors reading reviews
Educational Organization
23%
Computer Software Company
13%
Comms Service Provider
8%
Financial Services Firm
8%
Financial Services Firm
20%
Computer Software Company
19%
Insurance Company
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GRE tunnels. We have decreased site load times on Mobile 3G from 8 to 1,6 seconds ...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service that offers great redundancy and advanced security with built-in unmetered and ...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What needs improvement with F5 Advanced Firewall Manager?
I have encountered challenges with the price of the solution. Apart from the price, I feel no other areas need improvement.
 

Also Known As

Cloudflare DNS
F5 AFM, F5 Advanced Firewall Manager
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office
Find out what your peers are saying about Cloudflare vs. F5 BIG-IP Advanced Firewall Manager (AFM) and other solutions. Updated: January 2025.
839,515 professionals have used our research since 2012.