I use it for load balancing.
Director at ST Electronics
Is flexible, powerful, stable, and scalable
Pros and Cons
- "It's flexible and powerful, and the users can input their own rules to the system."
- "The pricing could be more flexible."
What is our primary use case?
What is most valuable?
It's flexible and powerful, and the users can input their own rules to the system.
What needs improvement?
The pricing could be more flexible.
For how long have I used the solution?
I've been using it for three to four years.
Buyer's Guide
F5 Advanced WAF
July 2025

Learn what your peers think about F5 Advanced WAF. Get advice and tips from experienced pros sharing their opinions. Updated: July 2025.
861,524 professionals have used our research since 2012.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
F5 Advanced WAF is a scalable solution. We have 20 people using it in our company, mainly from our operations team.
How are customer service and support?
F5 has a partner in Singapore, and he's very supportive.
How was the initial setup?
It is reasonably easy to set up and took about a month.
What about the implementation team?
I used a third party for the deployment.
What's my experience with pricing, setup cost, and licensing?
The cost is slightly above average.
What other advice do I have?
I would rate this solution at eight on a scale from one to ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Sr. Architect at NBC Universal
Easy event identification, highly stable, and customizable
Pros and Cons
- "The most valuable features of F5 Advanced WAF are the easy identification of events and customization. We can pinpoint our settings."
- "F5 Advanced WAF could improve resource usage, it is CPU intensive. Additionally, adding automated remediation would be a benefit. For example, an easy button alerts us of the events that are occurring, and what we want to do at the time. An automated approach where somebody could be alerted very quickly. Instead of going and reconfiguring everything, an automated approach is what I'm looking at."
What is our primary use case?
We are using F5 Advanced WAF to protect certain environments. It protects us against everything, such as botnets, web scraping attacks, and foreign entities attacks. It allows us to hone in on exactly the area that we need to focus on. It's a web-based firewall.
How has it helped my organization?
F5 Advanced WAF has benefited our company by protecting us against revenue loss. It's prevented hacks that would have taken us offline or caused us a loss of revenue in different areas.
What is most valuable?
The most valuable features of F5 Advanced WAF are the easy identification of events and customization. We can pinpoint our settings.
What needs improvement?
F5 Advanced WAF could improve resource usage, it is CPU intensive. Additionally, adding automated remediation would be a benefit. For example, an easy button alerts us of the events that are occurring, and what we want to do at the time. An automated approach where somebody could be alerted very quickly. Instead of going and reconfiguring everything, an automated approach is what I'm looking at.
For how long have I used the solution?
I have been using F5 Advanced WAF for approximately five years.
What do I think about the stability of the solution?
We can scale the F5 Advanced WAF very easily. We could configure it to be a canned solution or a customized solution. It goes from canned to full customization to what we need.
What do I think about the scalability of the solution?
After we sized F5 Advanced WAF just right and identified the correct way to configure it, it's very stable.
The solution is not being extensively used.
Which solution did I use previously and why did I switch?
We have used other solutions previously and in parallel.
How was the initial setup?
Generally, F5 Advanced WAF initial setup is straightforward. However, our environment was more complex and it took us a little more time to customize the solution to where we needed it to be. Additionally, the customization didn't rectify everything. We had to do customization to a certain event to prevent attacks that it wasn't catching, but that might not necessarily be the solutions' fault. It could be more of our setup than the solution's fault and not being able to run the latest version or the newer version could be more of a limitation on our ability to put it in the right place.
The whole implementation to have the solution run at the level we wanted it to take approximately five months.
Our company's environment is one that we can't put a canned solution in front of. Our environment, cannot have a canned solution that might fit everybody else because of how customized this environment is. It does need a lot of tuning to meet our environment's requirements.
I rate the initial setup of F5 Advanced WAF a three out of five.
What about the implementation team?
We did the implementation of this solution in-house. We have a very small group that is managing it. However, because it's for external users it's not a company use solution. Managing it, it's a very small subset of users that will manage the solution and the environment behind it. It is for external customers only.
What was our ROI?
We have received a return on investment by using F5 Advanced WAF which has saved us from losing revenue.
I rate the return of investment from F5 Advanced WAF a four out of five.
What other advice do I have?
My advice to others would be to define the parameters well in the beginning, and then they will be fine. They could define it as a regular canned solution and go from there, instead of working it as not a canned solution. Define the environment and what you need to protect, that way you can build a base protection profile that you could deploy elsewhere instead of building the policy to the environment first because then customizing cannot be deployed easily.
I rate F5 Advanced WAF an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
F5 Advanced WAF
July 2025

Learn what your peers think about F5 Advanced WAF. Get advice and tips from experienced pros sharing their opinions. Updated: July 2025.
861,524 professionals have used our research since 2012.
IT Manager at Chong Hua Hospital
High availability, many features, and scales well
Pros and Cons
- "The most valuable features of F5 Advanced WAF are the overall capabilities, there is not a comparable solution on the market."
- "F5 Advanced WAF could improve the reporting. It's a bit difficult to populate, them. If you're not so familiar with the functions, such as where to find the logs and other settings."
What is our primary use case?
We are using F5 Advanced WAF for the applications that we are publishing mainly for intrusion prevention and proxy features.
What is most valuable?
The most valuable features of F5 Advanced WAF are the overall capabilities, there is not a comparable solution on the market.
What needs improvement?
F5 Advanced WAF could improve the reporting. It's a bit difficult to populate, them. If you're not so familiar with the functions, such as where to find the logs and other settings.
In a future release, it would be beneficial to have a DNS boost feature.
For how long have I used the solution?
I have been using F5 Advanced WAF for approximately five years.
What do I think about the stability of the solution?
I rate the stability of F5 Advanced WAF a ten out of ten.
What do I think about the scalability of the solution?
We have approximately 300 users using this solution in my organization.
I rate the scalability of F5 Advanced WAF a nine out of ten.
Which solution did I use previously and why did I switch?
I was previously using NGINX App Protect and we switched to F5 Advanced WAF because the GUI was better.
How was the initial setup?
The full implementation of the solution took approximately eight hours. There are sections of the configuration at can be difficult.
What about the implementation team?
We used a third party to do the implementation.
What other advice do I have?
I rate F5 Advanced WAF an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer.
Territory Manager at a computer software company with 51-200 employees
Useful balancer, simple policy changes, and scalable
Pros and Cons
- "The most valuable features of F5 Advanced WAF are the balancer and you can change policies very easily."
- "The overall price of F5 Advanced WAF could improve."
What is our primary use case?
F5 Advanced WAF can be deployed on-premise or in the cloud. When it comes to local governmental organizations, it's mostly on-premises solutions they use. However, we recommend using virtual ones.
F5 Advanced WAF is used for protecting applications.
What is most valuable?
The most valuable features of F5 Advanced WAF are the balancer and you can change policies very easily.
What needs improvement?
The overall price of F5 Advanced WAF could improve.
For how long have I used the solution?
I have been familiar with F5 Advanced WAF for approximately one year.
What do I think about the stability of the solution?
I have not had any customers complaining about the stability.
What do I think about the scalability of the solution?
F5 Advanced WAF is scalable.
How was the initial setup?
The initial setup of F5 Advanced WAF is easy.
I rate the setup of F5 Advanced WAF a four out of five.
What about the implementation team?
The ease of maintenance of F5 Advanced WAF depends from customer to customer. If the company had someone trained or they have an inside person who is reliable for this maintenance, they typically do not have any problems.
What's my experience with pricing, setup cost, and licensing?
The price of F5 Advanced WAF could improve it is expensive.
There can be extra features added at an additional cost.
I rate the price of F5 Advanced WAF a three out of five.
Which other solutions did I evaluate?
Our clients pick this solution over others because it is one of the leading companies in the category.
What other advice do I have?
I can recommend F5 Advanced WAF to any customer because we have experience, and referrals from customers using it within different models. If it comes to WAF, LTM, or whatever. I'm very happy to sell it because it is one of the leading vendors within its line. Our customers within the financial market, such as banking organizations, are very happy with it.
I rate F5 Advanced WAF a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Information Security Officer at a computer software company with 11-50 employees
Beneficial enhanced features, performs well, and reliable
Pros and Cons
- "The most valuable features of the F5 Advanced WAF are the enhanced ASM and the performance. Additionally, the usability and effectiveness are very good."
- "F5 Advanced WAF could improve on its funding for WAF features. There is a need to be more advanced WAF features."
What is our primary use case?
We are using F5 Advanced WAF to defend against web application attacks.
What is most valuable?
The most valuable features of the F5 Advanced WAF are the enhanced ASM and the performance. Additionally, the usability and effectiveness are very good.
What needs improvement?
F5 Advanced WAF could improve on its funding for WAF features. There is a need to be more advanced WAF features.
For how long have I used the solution?
I have been using F5 Advanced WAF for several years.
What do I think about the stability of the solution?
My advice to others is F5 Advanced WAF is a powerful WAF for many years in the market, and it has powerful security features.
F5 Advanced WAF is a stable solution.
What do I think about the scalability of the solution?
I have found that F5 Advanced WAF is scalable but there is a limit.
We have hundreds of people using this solution in my organization.
How are customer service and support?
I have not used the support from F5 Advanced WAF.
How was the initial setup?
The initial setup of F5 Advanced WAF is straightforward, but the process is lengthy.
What about the implementation team?
We did the deployment of F5 Advanced WAF in-house. We have a team that's always ready and aligned with the process of maintaining F5 Advanced WAF.
What's my experience with pricing, setup cost, and licensing?
There are different licenses available to use F5 Advanced WAF, such as BT, ASM, and LPM.
I rate the price of F5 Advanced WAF a four out of five.
What other advice do I have?
I rate F5 Advanced WAF an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Technology Consultant at Netwiser
Enhanced web security and significant bot detection capabilities and good support
Pros and Cons
- "Web attack signatures are very important for detecting web attacks."
- "The product could be more user-friendly, particularly the user interface for administrators."
What is our primary use case?
We use the solution for load balancing and web application firewall (WAF) balancing. We operate in a data center and use it for web application security and services.
How has it helped my organization?
The solution provides strong web security, particularly against web attacks, and has effective bot detection that helps reduce bot attacks.
What is most valuable?
Web attack signatures are very important for detecting web attacks. The bot detection feature is also crucial in reducing bot attacks.
What needs improvement?
The product could be more user-friendly, particularly the user interface for administrators. Additionally, configuration can be quite complex and needs improvement to be less complex.
For how long have I used the solution?
I've been using it for almost three years.
What do I think about the stability of the solution?
The product is very stable. From one to ten, I would rate its stability at a nine out of ten.
What do I think about the scalability of the solution?
The solution is scalable. We use it for multiple customers and data centers, and I would rate its scalability as nine.
How are customer service and support?
The customer service is good. That siad, sometimes it takes too long to reach the right person. I would rate their effectiveness as an eight.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I am familiar with Citrix NetScaler and F5.
How was the initial setup?
The initial setup was not too challenging. Post-initial configurations can be complex.
What about the implementation team?
Two to three engineers are typically involved in maintenance operations.
What's my experience with pricing, setup cost, and licensing?
I don't know the exact pricing. It is not the cheapest yet not the most expensive. It depends on needs, budget, and vision.
Which other solutions did I evaluate?
I have experience with Citrix solutions.
What other advice do I have?
I recommend this product to others.
I'd rate the solution eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer.
Last updated: Oct 31, 2024
Flag as inappropriateSystem Engineer at DShield
A cost-effective solution for load balancing with data loss prevention
Pros and Cons
- "It protects and mitigates damage in the network."
- "They should work on the virtualization of NGINX."
What is our primary use case?
We use the solution for load balancing.
What needs improvement?
They should improve the capability, and then they should work on the virtualization of NGINX. Currently, most environments are virtualized. F5 Advanced WAF will not be able to protect it.
For how long have I used the solution?
I have been using F5 Advanced WAF as a reseller for 5 years.
How are customer service and support?
Technical support is good but not enough. It takes a lot of time to get support.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup is not so easy nor not so complex. There is a learning phase, and there are policies to apply. It complies with regulations. Recently, we used it for Formula One, and it proved very effective.
What was our ROI?
ROI is covered in one year. You can see how it protects and mitigates damages in the network.
What's my experience with pricing, setup cost, and licensing?
The product is not so expensive. It depends on the assets.
What other advice do I have?
There are other solutions for data loss prevention, such as Symantec and IP solutions. There are options available for DNS blocking. While these solutions may specialize in certain aspects, They offer comprehensive coverage across various areas. Each vendor specializes in different aspects, but F5 Advanced WAF excels in its particular domain.
I recommend the solution. Most of the environment is going to virtualization.
Overall, I rate the solution an 8 out of 10.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
A highly stable and scalable load balancing solution
Pros and Cons
- "Customers find the load balancer feature as the most valuable."
- "The tool needs to improve its pricing."
What is our primary use case?
It is used for application security and load balancing. As we have a few customers who are using banking applications, and stock market applications, they are more concerned about security and how to protect the product and their business applications. And that's why we offer security applications. Besides that, there are new features for load balancing in the F5.
What is most valuable?
Customers find the load balancer feature as the most valuable.
What needs improvement?
The tool needs to improve its pricing.
For how long have I used the solution?
I have been using it for two years.
What do I think about the stability of the solution?
It is a very stable product. It is the favourite product of banking customers in Egypt.
What do I think about the scalability of the solution?
It is a very scalable product. You can write down any iRule you want as it is very convenient.
Which solution did I use previously and why did I switch?
We used Citrix ADC, Fortinet FortiWeb, and Barracuda before F5 Advanced WAF. We switched to F5 Advanced WAF due to its efficiency and the port lockdown feature that the customers in Egypt like. Also since it's certified by Gartner, the customers feel confident using it.
How was the initial setup?
The initial setup was simple.
What other advice do I have?
If you are looking for a really good product, you should consider F5 Advanced WAF.
I would rate it a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator

Buyer's Guide
Download our free F5 Advanced WAF Report and get advice and tips from experienced pros
sharing their opinions.
Updated: July 2025
Product Categories
Web Application Firewall (WAF)Popular Comparisons
Prisma Cloud by Palo Alto Networks
Microsoft Azure Application Gateway
Azure Front Door
AWS WAF
Fortinet FortiWeb
NetScaler
Cloudflare Web Application Firewall
Imperva Web Application Firewall
Imperva DDoS
Akamai App and API Protector
Azure Web Application Firewall
Gigamon Deep Observability Pipeline
Radware Alteon
NGINX App Protect
Buyer's Guide
Download our free F5 Advanced WAF Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Does F5 Advanced WAF work with Azure App Service?
- Which is better, Barracuda Web Application Firewall or F5 Advanced WAF?
- Which lesser known firewall product has the best chance at unseating the market leaders?
- Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
- What do you recommend for a securing Web Application?
- Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
- Imperva WAF vs. Barracuda: Which One is Better?
- F5 vs. Imperva WAF?
- When should companies use SSL Inspection?
- NGFW with URL Filtering vs Web Proxy