Try our new research platform with insights from 80,000+ expert users

F5 Advanced WAF vs F5 BIG-IP Local Traffic Manager (LTM) comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
71
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (14th)
F5 Advanced WAF
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
67
Ranking in other categories
Web Application Firewall (WAF) (2nd)
F5 BIG-IP Local Traffic Man...
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
120
Ranking in other categories
Application Delivery Controllers (ADC) (2nd)
 

Mindshare comparison

Web Application Firewall (WAF)
Application Delivery Controllers (ADC)
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Richard Polyak - PeerSpot reviewer
Easy event identification, highly stable, and customizable
Generally, F5 Advanced WAF initial setup is straightforward. However, our environment was more complex and it took us a little more time to customize the solution to where we needed it to be. Additionally, the customization didn't rectify everything. We had to do customization to a certain event to prevent attacks that it wasn't catching, but that might not necessarily be the solutions' fault. It could be more of our setup than the solution's fault and not being able to run the latest version or the newer version could be more of a limitation on our ability to put it in the right place. The whole implementation to have the solution run at the level we wanted it to take approximately five months. Our company's environment is one that we can't put a canned solution in front of. Our environment, cannot have a canned solution that might fit everybody else because of how customized this environment is. It does need a lot of tuning to meet our environment's requirements. I rate the initial setup of F5 Advanced WAF a three out of five.
Mahmoud-Yassin - PeerSpot reviewer
You can fully automate disaster recovery
LTM's cloud capabilities could be improved. Cloud providers all offer load balancing, but you can't get the same level of security. F5's cloud service is still not on par with its on-prem service. F5 acquired multiple companies a few years ago, but they still haven't integrated those solutions. For example, F5 acquired Shape Security, which had an excellent solution for detecting bots and automated login attacks, but F5 offers the solution in an inflexible way. It is only available as a cloud-based solution. It isn't zone-based. Some companies are restricted from sending financial data outside the country because of GDPR in Europe or other national regulations. Here in the UAE, we can't send host data out.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The technical support is good."
"The attacker won't have details since my public IP is anonymous. It offers us good privacy."
"The most valuable feature is the web application firewall."
"The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules."
"The most valuable features of the solution are performance and security."
"I get a lot of value from Cloudflare's API because it enables you to build a separate environment inside the solution. You can create a domain for performing test requests before you move to the production environment and connect various domains."
"The most valuable feature of Cloudflare is the GUI. You are able to control the solution very well through the interface. There is a lot of functionality that is embedded in the service."
"Generally, I am satisfied with this product."
"It's flexible and powerful, and the users can input their own rules to the system."
"We can monitor IP locations, but we have constraints from each country. It has a replication feature. Licenses can be shared, taking turns with each license."
"F5's user-friendly interface and seamless integration stand out as the most valuable features for us."
"It protects and mitigates damage in the network."
"I like them because I like the security solution. They get extra marks compared to other solutions or competitors. There are more features than any other product I can think of. They're always monitoring, and the security features offer more than other, lesser products."
"Very easy to implement and works well."
"This solution is an enterprise-class firewall that provides both load-balancing and security."
"Feature-wise, they are always cutting edge and up-to-date. Many features aren't available via competitors. There's always a lot of enhanced critical features that just aren't available through anyone else, or, if they are, are too lightweight."
"Secure and scalable traffic management solution for applications. Good for bigger environments."
"I've worked a little bit with iRules and it is amazing."
"What we like best about this solution is its stability. It is extremely stable."
"We are fond of the load balancing feature for DNS and servers."
"F5 BIG-IP Local Traffic Manager is a stable and reliable solution."
"Stable and scalable network traffic management solution for applications. It has good performance."
"The most valuable features of the solution are in the area of DDoS and WAF."
"The F5 GTM/BIGIP DNS (Global Traffic Manager) is a valuable feature. This feature allows for DNS load balancing, which means that high availability and load sharing can be done across services locally, as well as across datacenters with advanced capabilities​."
 

Cons

"The timing aspect can lead to it being considered overpriced. This is a particular concern we have with Cloudflare, as they may struggle with accurately detecting the client."
"The analytics, basically the dashboard, doesn't have much to it."
"Cloudflare's console should be made more user-friendly."
"The reporting can definitely be improved to offer a lot more explanation on something that may have happened or has actually happened."
"Even if I wanted to, I wouldn't be able to buy Cloudflare in my country."
"In the last two years, there has been a certain amount of downtime when using the VDM."
"There might be helpful if there was some web application firewall feature."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"I would like to see the API Protection improved."
"I would like for there to be a cloud-based solution, this would also help to improve scalability."
"The overall price of F5 Advanced WAF could improve."
"The solution should include RASP for another level of protection at the code itself."
"This solution can be made more user-friendly."
"Its price should be better. It is expensive."
"The interface is old-looking, it's not modern, which is why it's not always comfortable to use."
"The tool needs to improve its pricing."
"I would like there to be more device security. I would like the tool to support SSL links, along with SSL and TLS."
"We would like to have integration into encryption and PKI integration with SafeNet. That is probably the key component in using External PKIs, letting people bring their PKIs with them."
"Implementing whitepapers with a lot more applications could easily be added."
"Performance: Using the product, applications are jittery.​"
"Improvements should enable customers to build a tailor-made solution in the future through a service portal."
"This is a very expensive solution."
"Technical support could be improved."
"I'm not very sure about the security with F5 BIG-IP Local Traffic Manager (LTM). We have our own private data center, but we are going to migrate our private data center into the Azure cloud environment. Security will then be a major concern when we migrate our own whole infrastructure to the public cloud."
 

Pricing and Cost Advice

"I give the price a five out of ten."
"A free version of the solution is available."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"The product's pricing is cheap."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"We are using the free version."
"The cost primarily depends on the size of the organization."
"There is a perpetual license that comes with your hardware. There is also an additional fee for support."
"The price of F5 Advanced WAF could improve it is expensive."
"There is an annual subscription for this solution."
"I think the price is very high."
"Its price is fair. We have done a couple of deals where they were able to give some kind of discount to the customers. The price was initially high for the customers, but after a couple of negotiations, it came within their budget. They were happy with that."
"I am not sure about pricing but licenses are available on Google."
"I don't have any issue with the pricing of this solution."
"The way we deployed it, I would rate it a four out of five in terms of pricing."
"F5 is expensive."
"It's not a cheap product, but there are no other replacements for what we do with it."
"The pricing is inclusive of many features."
"It is a little pricey. I wish the pricing was cheaper, but I wish the pricing was cheaper for everything."
"It is sort of a commodity product. A load balancer is a load balancer. What will be, at the end of the day, the cheapest option or have the best performance, that is what it will come down to."
"Though functionality is high, its cost can be considered slightly higher than its competitors​."
"F5 isn’t cheap but is worth the price."
"There are a few licensing options available for F5 BIG-IP LTM. You can have a perpetual license which is a lifetime license. You then only need to renew the support, if you choose to open a ticket with the support."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
831,020 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
25%
Computer Software Company
13%
Comms Service Provider
8%
Financial Services Firm
7%
Computer Software Company
15%
Financial Services Firm
15%
Government
8%
Manufacturing Company
6%
Financial Services Firm
17%
Computer Software Company
14%
Government
9%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about F5 Advanced WAF?
It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the r...
What is your experience regarding pricing and costs for F5 Advanced WAF?
The setup cost is normal, yet not the best in terms of the commercial aspect. Other competitors like Fortinet are che...
What needs improvement with F5 Advanced WAF?
One improvement for AOF could be focusing on enhancing its AI engine to make it more mature.
What needs improvement with F5 BIG-IP?
There are no specific areas for improvement as it is already well-resolved and doesn't require further enhancements.
What is your primary use case for F5 BIG-IP?
The primary use case includes load balancing to serve application servers and basic web application firewall solution...
 

Also Known As

Cloudflare DNS
No data available
F5 BIG-IP, BIG-IP LTM, F5 ASM, Viprion, F5 BIG-IP Virtual Edition , Crescendo Networks Application Delivery Controller, BIG IP
 

Learn More

 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
Riken, TransUnion, Tepco Systems Administration, Daejeon University, G&T Bank, Danamon, CyberAgent Inc.
Find out what your peers are saying about F5 Advanced WAF vs. F5 BIG-IP Local Traffic Manager (LTM) and other solutions. Updated: September 2020.
831,020 professionals have used our research since 2012.