F5 BIG-IP Access Policy Manager (APM) vs Fortinet FortiProxy comparison

F5 BIG-IP Access Policy Manager (APM) is an access management proxy solution for managing global access to the enterprise networks, cloud providers, applications, and application programming interfaces (APIs). Through a single management interface, BIG-IP APM consolidates remote, mobile, network, virtual, and web access. 

BIG-IP APM can also serve as a bridge between modern and classic authentication and authorization protocols and methods. For applications which are unable to support modern authentication and authorization protocols, like SAML and OAuth with OIDC, but which do support classic authentication methods, BIG-IP APM converts user credentials to the appropriate authentication standard supported by the application.

BIG-IP APM Benefits:

• Ease of use
• Flexibility
• Ability to integrate with other systems
• Security features
• Granular access control
• Responsive and helpful support team

BIG-IP APM Features:

• Support for Identity Aware Proxy (IAP) enabling Zero Trust application access
• Context-based authorization with dynamic L4/L7 ACLs
• Integration with third-party MFA solutions
• DTLS 2.0 mode for delivering and securing applications
• SAML 2.0 identity federation support
• Support for OAuth 2.0 authorization protocol
• SSO support for classic authentication (Kerberos, header- based, etc.), credential caching, OAuth 2.0, SAML 2.0, and FIDO2 (U2F)
• AAA server authentication and high-availability
• Integration with leading IAM vendor products (Microsoft, Okta, Ping Identity)
• BIG IP Edge Client and F5 Access integrate with VMware Horizon ONE (AirWatch), Microsoft Intune and IBM MaaS360
• Risk-based access leveraging third-party UEBA and risk engines (HTTP Connector)

Reviews from Real Users

Below are some reviews and helpful feedback written by BIG-IP APM users.

Mahmmoud Rabie, Senior Site Reliability Engineer, writes that BIG-IP APM is "A highly stable solution for load balancing, but the initial setup is complex."

Clyde Livingston, Senior Process Specialist at Telstra, says that BIG-IP APM is "Easy to use, useful access remotely, but lacking stability."

Chris Lam, Senior Solution Consultant at Macroview Telecom Limited, states that BIG-IP APM is "Useful for remote access VPN and VPI integration with VMware.

Fortinet FortiProxy is a secure web gateway that provides advanced web filtering, malware protection, and SSL inspection capabilities. It is designed to protect organizations from web-based threats and prevent data loss by enforcing granular policies for web access. FortiProxy is available as a physical or virtual appliance and can be deployed on-premises or in the cloud. FortiProxy uses a combination of signature-based and behavior-based detection techniques to identify and block known and unknown threats. It also includes advanced features such as sandboxing and machine learning to detect and prevent zero-day attacks. FortiProxy can inspect SSL traffic to detect and block threats hidden in encrypted traffic. FortiProxy provides granular control over web access by allowing administrators to create policies based on user identity, device type, time of day, and other factors. It also includes pre-defined categories for web filtering, such as social media, gambling, and adult content. FortiProxy can also enforce compliance with regulatory requirements such as GDPR and HIPAA. FortiProxy integrates with Fortinet's Security Fabric, allowing it to share threat intelligence with other Fortinet products and provide a coordinated response to threats. It also includes a web-based management console that provides real-time visibility into web traffic and allows administrators to quickly respond to security incidents. 

Fortinet FortiProxy is a comprehensive web security solution that provides advanced protection against web-based threats and allows organizations to enforce granular policies for web access.