In Pakistan, the banking and financial sector requires F5 WAF solutions. I worked with other companies that had more clients, but my current company is a start-up. We have Palo Alto business, but we're trying to get F5 business.
Unit Head - Network and Security Solutions at FPM Solutions
Their support engineers are experts who always provide the right solution,
Pros and Cons
- "F5 technical support is excellent. They are experts who always provide the right solution, and they understand the problem. Their response and resolution times are good."
- "Nevertheless, F5 products are generally considered to be hard to deploy."
What is our primary use case?
What is most valuable?
F5 products are highly stable, top-notch solutions, and we have also the expertise to deploy and design the F5 and Palo Alto product lines. I have more than 10 years of experience with F5 and Palo Alto. I have deployed around F5 products for around seven or eight customers of F5.
What needs improvement?
F5 should consider adding network detection and response.
For how long have I used the solution?
We have been using F5 solutions for two years, including load balancers and Advanced WAF.
Buyer's Guide
F5 Advanced WAF
November 2024
Learn what your peers think about F5 Advanced WAF. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
815,854 professionals have used our research since 2012.
What do I think about the stability of the solution?
Advanced WAF is highly stable.
What do I think about the scalability of the solution?
F5 products are scalable, and they have an excellent R&D department. Their product is constantly maturing.
How are customer service and support?
F5 technical support is excellent. They are experts who always provide the right solution, and they understand the problem. Their response and resolution times are good.
How was the initial setup?
Advanced WAF is a difficult product for new users, but it's not too challenging if you have experience. Nevertheless, F5 products are generally considered to be hard to deploy.
What's my experience with pricing, setup cost, and licensing?
F5's hardware product line is called BIG-IP, and they have many software licenses for IP DNS, Advanced WAF, APM, anti-spam, etc. We have around 10 licenses.
What other advice do I have?
I rate F5 Advanced WAF 10 out of 10. I would highly recommend the entire F5 product line.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Sr. Cybersecurity Solutions Architect at BMB
A highly stable and scalable load balancing solution
Pros and Cons
- "Customers find the load balancer feature as the most valuable."
- "The tool needs to improve its pricing."
What is our primary use case?
It is used for application security and load balancing. As we have a few customers who are using banking applications, and stock market applications, they are more concerned about security and how to protect the product and their business applications. And that's why we offer security applications. Besides that, there are new features for load balancing in the F5.
What is most valuable?
Customers find the load balancer feature as the most valuable.
What needs improvement?
The tool needs to improve its pricing.
For how long have I used the solution?
I have been using it for two years.
What do I think about the stability of the solution?
It is a very stable product. It is the favourite product of banking customers in Egypt.
What do I think about the scalability of the solution?
It is a very scalable product. You can write down any iRule you want as it is very convenient.
Which solution did I use previously and why did I switch?
We used Citrix ADC, Fortinet FortiWeb, and Barracuda before F5 Advanced WAF. We switched to F5 Advanced WAF due to its efficiency and the port lockdown feature that the customers in Egypt like. Also since it's certified by Gartner, the customers feel confident using it.
How was the initial setup?
The initial setup was simple.
What other advice do I have?
If you are looking for a really good product, you should consider F5 Advanced WAF.
I would rate it a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator
Buyer's Guide
F5 Advanced WAF
November 2024
Learn what your peers think about F5 Advanced WAF. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
815,854 professionals have used our research since 2012.
Security team leader at a aerospace/defense firm with 10,001+ employees
A reliable and user-friendly solution that provides positive and negative security and has antivirus and DDoS mitigation capabilities
Pros and Cons
- "The web application firewall itself is most valuable. It provides positive security and negative security. In negative security, it blocks a task such as cross-site scripting, code injection, etc. In positive security, it lets you specify and enforce things, such as the parameters allowed in username and password fields and the number of characters allowed in a field."
- "It also has antivirus and DDoS mitigation capabilities. We have enabled these features."
- "It is also quite intuitive and user-friendly. They have several webinars that are actually like labs. You can use these webinars to learn about how to use all features of the product."
- "Its price should be better. It is expensive."
What is our primary use case?
We have several websites that are exposed to external users. We have a website for interaction with supply chain customers. We also have a website that gives access to CRM functionality to allow our customers to open tickets and disputes. F5 WAF is at the front for security and attack mitigation. It ensures that users are able to access only allowed pages.
What is most valuable?
The web application firewall itself is most valuable. It provides positive security and negative security. In negative security, it blocks a task such as cross-site scripting, code injection, etc. In positive security, it lets you specify and enforce things, such as the parameters allowed in username and password fields and the number of characters allowed in a field.
It also has antivirus and DDoS mitigation capabilities. We have enabled these features.
It is also quite intuitive and user-friendly. They have several webinars that are actually like labs. You can use these webinars to learn about how to use all features of the product.
What needs improvement?
Its price should be better. It is expensive.
What do I think about the stability of the solution?
In general, it is stable and reliable. Over the past few months, several vulnerabilities were found in the product, but which product doesn't have vulnerabilities? The main question is how fast do you get the fix for it, and they provided the fix quite quickly. We had to upgrade it as soon as possible to mitigate the risks.
What do I think about the scalability of the solution?
I didn't try to expand it. We have two staff members who are using F5 Advanced WAF.
In terms of its usage, we are deploying it on all points through which we are exposing services, but we are currently not exposing too many services.
How are customer service and technical support?
I had only one case for which I had to call tech support. It wasn't a straightforward ticket. It was quite a challenging ticket. Eventually, they found a solution, but it took some time. It was challenging to find the bug in one of the previous versions. They also didn't know about it. We did the troubleshooting together until we found the problem.
Which solution did I use previously and why did I switch?
We were using another solution before switching to F5 Advanced WAF. We didn't have success with that solution because the integrator failed to deploy it properly. It was more complex and not user-friendly.
How was the initial setup?
It was a little bit complex. If you want to add an additional layer or model like APM with two-factor authentication, then it requires a little bit more integration.
What's my experience with pricing, setup cost, and licensing?
It is expensive. Its price should be better.
Its licensing is on a yearly basis. Its licensing is also based on the model. There are no additional costs.
What other advice do I have?
I would recommend this solution to other users. I will advise others to learn a little bit about how the HTTP protocol works. They should be familiar with the functionality of the product. They should not use it without understanding what they are actually doing.
I would rate F5 Advanced WAF a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
System Engineer at DShield
A cost-effective solution for load balancing with data loss prevention
Pros and Cons
- "It protects and mitigates damage in the network."
- "They should work on the virtualization of NGINX."
What is our primary use case?
We use the solution for load balancing.
What needs improvement?
They should improve the capability, and then they should work on the virtualization of NGINX. Currently, most environments are virtualized. F5 Advanced WAF will not be able to protect it.
For how long have I used the solution?
I have been using F5 Advanced WAF as a reseller for 5 years.
How are customer service and support?
Technical support is good but not enough. It takes a lot of time to get support.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup is not so easy nor not so complex. There is a learning phase, and there are policies to apply. It complies with regulations. Recently, we used it for Formula One, and it proved very effective.
What was our ROI?
ROI is covered in one year. You can see how it protects and mitigates damages in the network.
What's my experience with pricing, setup cost, and licensing?
The product is not so expensive. It depends on the assets.
What other advice do I have?
There are other solutions for data loss prevention, such as Symantec and IP solutions. There are options available for DNS blocking. While these solutions may specialize in certain aspects, They offer comprehensive coverage across various areas. Each vendor specializes in different aspects, but F5 Advanced WAF excels in its particular domain.
I recommend the solution. Most of the environment is going to virtualization.
Overall, I rate the solution an 8 out of 10.
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Last updated: Apr 30, 2024
Flag as inappropriateInformation Security Manager at Chong Hua Hospital
High availability, many features, and scales well
Pros and Cons
- "The most valuable features of F5 Advanced WAF are the overall capabilities, there is not a comparable solution on the market."
- "F5 Advanced WAF could improve the reporting. It's a bit difficult to populate, them. If you're not so familiar with the functions, such as where to find the logs and other settings."
What is our primary use case?
We are using F5 Advanced WAF for the applications that we are publishing mainly for intrusion prevention and proxy features.
What is most valuable?
The most valuable features of F5 Advanced WAF are the overall capabilities, there is not a comparable solution on the market.
What needs improvement?
F5 Advanced WAF could improve the reporting. It's a bit difficult to populate, them. If you're not so familiar with the functions, such as where to find the logs and other settings.
In a future release, it would be beneficial to have a DNS boost feature.
For how long have I used the solution?
I have been using F5 Advanced WAF for approximately five years.
What do I think about the stability of the solution?
I rate the stability of F5 Advanced WAF a ten out of ten.
What do I think about the scalability of the solution?
We have approximately 300 users using this solution in my organization.
I rate the scalability of F5 Advanced WAF a nine out of ten.
Which solution did I use previously and why did I switch?
I was previously using NGINX App Protect and we switched to F5 Advanced WAF because the GUI was better.
How was the initial setup?
The full implementation of the solution took approximately eight hours. There are sections of the configuration at can be difficult.
What about the implementation team?
We used a third party to do the implementation.
What other advice do I have?
I rate F5 Advanced WAF an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer:
F5 Product Manager at Westcon-Comstor
A solution that would benefit with more documentation regarding bot protection
Pros and Cons
- "The most valuable features of F5 Advanced WAF are the security features and the protection."
- "F5 Advanced needs to improve its bot protection. The solution needs to have machine learning to learn the behavior of the customer to recognize the human versus the bot. This is a difficult feature to explain to our customers. I would like documentation about the bot feature to make it easier for the customer to understand."
What is our primary use case?
We are distributors in Vietnam. We consult for our customers and I am a Product Manager. We use F5 Advanced WAF as a firewall for our website applications and the websites of our customers.
What is most valuable?
The most valuable features of F5 Advanced WAF are the security features and the protection.
In the future, I would like to see F5 include AI in the hardware of F5 Advanced WAF.
What needs improvement?
F5 Advanced needs to improve its bot protection. The solution needs to have machine learning to learn the behavior of the customer to recognize the human versus the bot. This is a difficult feature to explain to our customers. I would like documentation about the bot feature to make it easier for the customer to understand.
For how long have I used the solution?
I have been using F5 Advanced WAF for two years.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
F5 Advanced WAF is scalable.
How are customer service and support?
We tend to handle our own technical support for our customers. My experience with F5 support is a three out of five overall. They need to improve the information and training of the receiver.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup was neither easy nor difficult. I would rate setup as a four out of five.
What's my experience with pricing, setup cost, and licensing?
The pricing of F5 Advanced WAF is more expensive than other solutions like Radware and CD18, it is quite high. I rate the product a one out of five for price, with one being expensive.
What other advice do I have?
Overall, I would rate F5 Advanced WAF an eight out of ten overall.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer:
Director at ST Electronics
Is flexible, powerful, stable, and scalable
Pros and Cons
- "It's flexible and powerful, and the users can input their own rules to the system."
- "The pricing could be more flexible."
What is our primary use case?
I use it for load balancing.
What is most valuable?
It's flexible and powerful, and the users can input their own rules to the system.
What needs improvement?
The pricing could be more flexible.
For how long have I used the solution?
I've been using it for three to four years.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
F5 Advanced WAF is a scalable solution. We have 20 people using it in our company, mainly from our operations team.
How are customer service and support?
F5 has a partner in Singapore, and he's very supportive.
How was the initial setup?
It is reasonably easy to set up and took about a month.
What about the implementation team?
I used a third party for the deployment.
What's my experience with pricing, setup cost, and licensing?
The cost is slightly above average.
What other advice do I have?
I would rate this solution at eight on a scale from one to ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Territory Manager at a computer software company with 51-200 employees
Useful balancer, simple policy changes, and scalable
Pros and Cons
- "The most valuable features of F5 Advanced WAF are the balancer and you can change policies very easily."
- "The overall price of F5 Advanced WAF could improve."
What is our primary use case?
F5 Advanced WAF can be deployed on-premise or in the cloud. When it comes to local governmental organizations, it's mostly on-premises solutions they use. However, we recommend using virtual ones.
F5 Advanced WAF is used for protecting applications.
What is most valuable?
The most valuable features of F5 Advanced WAF are the balancer and you can change policies very easily.
What needs improvement?
The overall price of F5 Advanced WAF could improve.
For how long have I used the solution?
I have been familiar with F5 Advanced WAF for approximately one year.
What do I think about the stability of the solution?
I have not had any customers complaining about the stability.
What do I think about the scalability of the solution?
F5 Advanced WAF is scalable.
How was the initial setup?
The initial setup of F5 Advanced WAF is easy.
I rate the setup of F5 Advanced WAF a four out of five.
What about the implementation team?
The ease of maintenance of F5 Advanced WAF depends from customer to customer. If the company had someone trained or they have an inside person who is reliable for this maintenance, they typically do not have any problems.
What's my experience with pricing, setup cost, and licensing?
The price of F5 Advanced WAF could improve it is expensive.
There can be extra features added at an additional cost.
I rate the price of F5 Advanced WAF a three out of five.
Which other solutions did I evaluate?
Our clients pick this solution over others because it is one of the leading companies in the category.
What other advice do I have?
I can recommend F5 Advanced WAF to any customer because we have experience, and referrals from customers using it within different models. If it comes to WAF, LTM, or whatever. I'm very happy to sell it because it is one of the leading vendors within its line. Our customers within the financial market, such as banking organizations, are very happy with it.
I rate F5 Advanced WAF a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Buyer's Guide
Download our free F5 Advanced WAF Report and get advice and tips from experienced pros
sharing their opinions.
Updated: November 2024
Product Categories
Web Application Firewall (WAF)Popular Comparisons
Cloudflare
Microsoft Azure
Prisma Cloud by Palo Alto Networks
Microsoft Azure Application Gateway
Azure Front Door
AWS WAF
F5 BIG-IP Local Traffic Manager (LTM)
Fortinet FortiWeb
NetScaler
Cloudflare Web Application Firewall
Imperva Web Application Firewall
Imperva DDoS
Akamai App and API Protector
Azure Web Application Firewall
Radware Alteon
Buyer's Guide
Download our free F5 Advanced WAF Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Does F5 Advanced WAF work with Azure App Service?
- Which is better, Barracuda Web Application Firewall or F5 Advanced WAF?
- Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
- What do you recommend for a securing Web Application?
- Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
- Imperva WAF vs. Barracuda: Which One is Better?
- F5 vs. Imperva WAF?
- When should companies use SSL Inspection?
- NGFW with URL Filtering vs Web Proxy
- How does a WAF help to protect against DDoS attacks?