We use the solution to secure web applications running in the organization.
F5 Advanced WAF with LTM, IPI, and Threat Campaigns (PAYG, 3Gbps)
F5, Inc. | 17.5.1-0.0.7Linux/Unix, CentOS 7.3 - 64-bit Amazon Machine Image (AMI)
External reviews
External reviews are not included in the AWS star rating for the product.
Sr security Engineer
It is easy to configure.
The central point of all the applications being scrubbed and checked
What is our primary use case?
What is most valuable?
F5 is one of the best products. We use it for multiple segments within our organization and applications. It is a central point of all the applications being scrubbed and checked.
What needs improvement?
The customer service could be improved.
For how long have I used the solution?
I have been using F5 Advanced WAF for more than ten years.
What do I think about the stability of the solution?
The product is stable.
I rate the solution’s stability a seven out of ten.
What do I think about the scalability of the solution?
The solution is scalable.
Our entire organization and clients use the solution.
How was the initial setup?
The initial setup is easy since I have used the technology for almost 20 years. Some applications require more attention depending on what you are doing and trying to achieve with the particular module. You need some assistance from the team in configuring the different components within the application through the web.
What was our ROI?
The solution is worth the money that you spend.
What's my experience with pricing, setup cost, and licensing?
The solution is expensive.
What other advice do I have?
Whatever you are looking for can be done on the platform. Some features may not be available with IO components. A few features give you the flexibility that no other product can.
Overall, I rate the solution an eight out of ten.
Which deployment model are you using for this solution?
Has valuable monitoring tools and good scalability
What is our primary use case?
We use the product for load-balancing purposes.
What is most valuable?
The product has valuable features for load balancing, monitoring tools, and HPXpress services.
What needs improvement?
They could provide better pricing.
For how long have I used the solution?
We have been using F5 Advanced WAF for a year.
What do I think about the stability of the solution?
I rate the product's stability an eight out of ten.
What do I think about the scalability of the solution?
The product is highly scalable. It is suitable for enterprise businesses. I rate its scalability an eight out of ten.
How was the initial setup?
I rate the initial setup process a seven out of ten.
What's my experience with pricing, setup cost, and licensing?
I rate F5 Advanced WAF's pricing a three out of ten.
What other advice do I have?
I rate F5 Advanced WAF an eight out of ten.
Which deployment model are you using for this solution?
Ensures a robust and unified security approach for our clients
What is our primary use case?
My clients often seek a comprehensive security solution for their hybrid environments, with both cloud and on-premise web applications. To address this, I recommend combining F5 Advanced WAF for web application security with Fortinet solutions, including FortiGate, FortiSign, and FortiAnalyzer, for broader network security aspects like vulnerability ranking, patch management, and remediation. I focus on FortiGate and FortiAnalyzer, collaborating with a colleague who manages firewall setup, ensuring a robust and unified security approach for our clients.
What is most valuable?
F5's user-friendly interface and seamless integration stand out as the most valuable features for us. The intuitive interface streamlines tasks, providing a straightforward experience. F5's adaptability in diverse environments sets it apart, especially when compared to alternatives like FortiGate. Despite being pricier, the ease of integration and user-friendly design make F5 Advanced WAF our preferred choice for securing web applications. F5's commitment to customer engagement, exemplified by hosting a certification event in Nigeria, further shows its support and involvement in our region.
What needs improvement?
One area for improvement in the product is its SSO integration, which posed challenges and required significant effort to resolve. The complexity of SSO deployment, coupled with high associated costs, could be addressed to enhance usability. Streamlining the SSO process and revisiting cost considerations would contribute to an improved user experience.
For how long have I used the solution?
I have been working with F5 Advanced WAF for three years.
What do I think about the stability of the solution?
I would rate the stability as a nine out of ten.
What do I think about the scalability of the solution?
I would give the scalability of the solution an eight out of ten. It is quite scalable and performs well. I would recommend F5 Advanced WAF for medium-sized businesses and enterprises, primarily due to considerations around cost and sustainability. The solution is well-suited for companies of this size, ensuring that not only is it deployed effectively, but it can also be sustained over time to meet ongoing security needs.
How are customer service and support?
The technical support is good. I would rate it as a seven out of ten.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
For an end-to-end solution, Fortinet stands out over F5 Advanced WAF. Fortinet's comprehensive product suite, including FortiGate, FortiAnalyzer, and integrated features like CMDD, provides a more seamless and holistic approach to security. While F5 is strong in certain areas, the integrated capabilities of Fortinet make it my preferred choice for a comprehensive security solution.
How was the initial setup?
The initial setup for F5 Advanced WAF is user-friendly and relatively straightforward.
What's my experience with pricing, setup cost, and licensing?
The main drawback of F5 is the cost, which can be a challenge.
What other advice do I have?
Overall, I would rate F5 Advanced WAF as a nine out of ten.
Which deployment model are you using for this solution?
Stable product with essential capabilities to protect the web applications
What is our primary use case?
We use F5 Advanced WAF to protect web applications on HTTPS, APIs, and portals.
What is most valuable?
F5 Advanced WAF helps our engineers to learn the complete configuration, including fundamental and advanced policies.
What needs improvement?
Most customers encounter stability issues with the product's Big-IP logs. It works slowly while retrieving logs.
For how long have I used the solution?
We have been using F5 Advanced WAF since this year.
What do I think about the stability of the solution?
The product is more stable than Fortinet.
What do I think about the scalability of the solution?
The product has modular appliances. It works well, scalability-wise.
How are customer service and support?
The technical support services are good. The team includes professional engineers to communicate with the customers regarding cases.
How was the initial setup?
It is easy to set up F5 Advanced WAF. Although, it is difficult to deploy and maintain compared to Fortinet. The deployment process involves gathering customer information regarding virtual servers to be protected. Later, we select the best design suitable for their requirements and start with license provisioning. Further, we configure LTM with special servers and nodes and proceed with configuring the security policy and advanced directory. It takes a week to protect the infrastructure fully. Once we have license provisioning, it is good to run.
What's my experience with pricing, setup cost, and licensing?
F5 Advanced WAF's pricing is high. Fortinet and some other vendors are more affordable.
What other advice do I have?
F5 Advanced WAF has good capabilities, powerful tools, and professional services. I advise others to compare pricing with vendors in terms of their use cases before purchasing the product.
I rate it a ten out of ten.