Try our new research platform with insights from 80,000+ expert users

F5 BIG-IP Local Traffic Manager (LTM) vs Rapid7 AppSpider comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

F5 BIG-IP Local Traffic Man...
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
122
Ranking in other categories
Application Delivery Controllers (ADC) (2nd)
Rapid7 AppSpider
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
14
Ranking in other categories
Static Application Security Testing (SAST) (32nd)
 

Mindshare comparison

F5 BIG-IP Local Traffic Manager (LTM) and Rapid7 AppSpider aren’t in the same category and serve different purposes. F5 BIG-IP Local Traffic Manager (LTM) is designed for Application Delivery Controllers (ADC) and holds a mindshare of 15.3%, up 15.4% compared to last year.
Rapid7 AppSpider, on the other hand, focuses on Static Application Security Testing (SAST), holds 0.5% mindshare, down 0.5% since last year.
Application Delivery Controllers (ADC)
Static Application Security Testing (SAST)
 

Featured Reviews

Bonieber  Orofeo - PeerSpot reviewer
Identifying compromised traffic and securing data has been a significant advantage
One of the most beneficial features of F5 BIG-IP Local Traffic Manager (LTM) ( /products/f5-big-ip-local-traffic-manager-ltm-reviews ) is its ability to identify compromised traffic and its capabilities in authentication. Additionally, the security aspect of it provides a significant advantage as it helps us secure our data, which is a major investment and benefit for us. Before using this system, we had difficulties in storing our data and managing the traffic that comes in and out.
Rizwan-Alam - PeerSpot reviewer
Easy automated web app scanning, but gives many false positives and isn't always stable
One of the challenges I have with AppSpider is that it gives you a lot of false positives, especially when compared to other solutions. This is the main aspect that I hope to see Rapid7 improve on. Beyond reducing false positives, I would also like to see them implement better reporting features, particularly in the executive summary type of reports which need to be user-friendly and easily understood by non-technical people. The recommendations and solutions on these reports could always be improved to make them more relevant, too. Lastly, the stability isn't that great, and sometimes it becomes non-responsive. I feel like the stability of the application is very average and currently needs more work.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It helps us recognize sessions from certain IPs that are authorized to manage the application. This is a function we haven't found anywhere else."
"Good application firewall."
"If I were to choose one key feature in particular, perhaps it would be the iRule feature. It’s a really versatile tool."
"It improves the overall performance of applications by decreasing the burden on servers associated with managing and maintaining applications and network sessions, as well as by performing application-specific tasks."
"The most valuable feature is being able to manipulate the iRules, so you can send traffic to different avenues."
"It is a scalable solution."
"The setup is pretty easy."
"It integrates with AWS WAF, which makes it easy to deploy without changes to your infrastructure."
"Rapid7 AppSpider is good at managing different applications. It uses applets and generates reports to cover the PCA/GDPR compliance requirements."
"AppSpider's most valuable feature is reporting - everything is stored in the local database so it can be sent to other machines."
"The most valuable feature is the reporting, which is compliant with international standards."
"I would say that it is stable, as I am not aware of any major issues."
"The most valuable feature of Rapid7 AppSpider is the vulnerability reporting data. Additionally, the data is reported in a convenient way rather than seeing them as a PDF. We are able to generate all the reports exactly what we want in a flexible way."
"It is really accurate and the rate of false positives is very low."
"When it is set up properly, it can do scanning on web apps with multiple engines automatically."
"One of the most valuable features of AppSpider is its broad range of authentication identification, which is a key reason for its utilization."
 

Cons

"I wouldn't recommend the tool to small companies, considering its high price and the infrastructure needs of small businesses."
"A lot of functions that are attributed to iRules can actually be simple profile changes. iRules do have a certain performance impact. Therefore, instead of writing simple iRules, they can create certain profiles for classes that will perform the same function."
"For integration with other AWS environments, we do some tie-ins with some autoscaling groups. This has been challenging for us. We have had issues, where when autoscaling groups scale up, there are some instances which are not showing up in the proper size. Then, those IPs would get registered with F5, but never get released. Therefore, we are ending up with a whole bunch of ghosted IPs."
"The deployment can take some time because you can do a lot of configuring to meet the needs of the use cases for clients."
"In the LTM solution, it would be beneficial to have more algorithms for traffic segmentation or the ability to create user-defined algorithms rather than being restricted to predefined ones."
"The initial setup can be complex - it's quite flexible in terms of configuration, but the person configuring it needs to understand the application side, the network side, and the server."
"I used GitHub for autoscaling CloudFormation, and I found two bugs and I submitted them. Their implementation in GitHub could be cleaner and allow for a bit more customization."
"It requires a particular skill or training before being able to manage it."
"The solution is too slow. It could take a full day to scan. Competitors are much faster."
"One of the challenges I have with AppSpider is that it gives you a lot of false positives, especially when compared to other solutions."
"Implementing Rapid7 AppSpider requires scanning and self-identification mechanisms. You can add different types of authentication to each scan."
"There are some glitches with stability, and it is an area for improvement."
"The enterprise interface is too simple. It should be more customizable."
"For Japanese customers, localization is needed. The product should offer a GUI in Japanese and provide Japanese reports for end-users."
"The product needs to be able to scale for large companies, like ours. We have millions of IP addresses that need to be scanned, and the scalability is not great."
"It needs better integration with mobile applications."
 

Pricing and Cost Advice

"Security should be involved in any base license. When you bring on F5, you only have default license. Then, the ASM product license has to be purchased. It would be great if F5 could include the ASM in the base license."
"I found F5 BIG-IP Local Traffic Manager (LTM) an expensive product. The costs would depend on the appliance and infrastructure size. However, my company didn't have to pay extra to use additional features."
"F5 BIG-IP can be expensive, although there are trial versions available which are helpful to find out if the solution is right for your company."
"It is quite expensive as a product. Because it is very stable, it is also expensive."
"In my view, the cost is somewhat on the higher side. There are discounts available, but I wouldn't say it's overpriced. It's not cheap either, and the value for money is a bit higher from that perspective."
"I would recommend that the cost be lowered."
"If your IT budget is good, go for it."
"It is a little pricey. I wish the pricing was cheaper, but I wish the pricing was cheaper for everything."
"The price is pretty fair."
"It is expensive if you want to buy the Enterprise version that is able to scan multiple applications at once."
"The licensing cost depends on the number of users."
"The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor."
"AppSpider is closed-source software and you need to acquire a license in order to use it."
report
Use our free recommendation engine to learn which Application Delivery Controllers (ADC) solutions are best for your needs.
861,524 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
13%
Government
8%
Manufacturing Company
7%
Financial Services Firm
17%
Computer Software Company
12%
Manufacturing Company
10%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What needs improvement with F5 BIG-IP?
The price needs improvement as it is quite costly.
What is your primary use case for F5 BIG-IP?
We're using F5 BIG-IP Local Traffic Manager (LTM) ( /products/f5-big-ip-local-traffic-manager-ltm-reviews ) for our applications and for managing our incoming and outgoing traffic.
What is your experience regarding pricing and costs for Rapid7 AppSpider?
The price is not high, but for Japanese customers, localization may incur additional costs.
What needs improvement with Rapid7 AppSpider?
For Japanese customers, localization is needed. The product should offer a GUI in Japanese and provide Japanese reports for end-users.
What is your primary use case for Rapid7 AppSpider?
Our clients use AppSpider to address security concerns for their websites. It is particularly used by customers who require security assessments.
 

Also Known As

F5 BIG-IP, BIG-IP LTM, F5 ASM, Viprion, F5 BIG-IP Virtual Edition , Crescendo Networks Application Delivery Controller, BIG IP
AppSpider
 

Overview

 

Sample Customers

Riken, TransUnion, Tepco Systems Administration, Daejeon University, G&T Bank, Danamon, CyberAgent Inc.
Microsoft
Find out what your peers are saying about NetScaler, F5, Microsoft and others in Application Delivery Controllers (ADC). Updated: June 2025.
861,524 professionals have used our research since 2012.