My main use case for F5 Advanced WAF is protecting our web application servers. I am using it as an advanced security module for advanced web application security for our web application servers, so we can stop advanced web attacks from OWASP Top 10 and other attacks.
External reviews
16 reviews
from
External reviews are not included in the AWS star rating for the product.
Strong web attack protection has reduced incidents but pricing still needs improvement
What is our primary use case?
What is most valuable?
After we implemented F5 Advanced WAF, it has been really helpful to stop the attacks, especially since we have been attacked many times on web servers before using an ASM module from F5 Advanced WAF.
In my experience, F5 Advanced WAF offers the best features that are capable of stopping any type of attack, and it is a really reliable and stable product that you can rely on to stop any type of attack. What stands out to me is its signature-based detection, behavioral analysis, bot protection, and the customization options it provides. It also supports rapid deployment with examples for some signatures to use in your advanced WAF policy.
F5 Advanced WAF has positively impacted my organization by stopping most web application attacks on our web servers. It provides a WAF solution as the first line of defense in our web traffic, which is really helpful. I have noticed a great reduction in successful attacks, fewer incidents, and I can say zero incidents after we implemented F5 Advanced WAF.
What needs improvement?
I think the most significant improvement needed is reconsidering the price, as it is really expensive compared to other vendors. I do not have anything else to add about the needed improvements besides pricing.
For how long have I used the solution?
I have been using F5 Advanced WAF for about eight years.
What do I think about the stability of the solution?
F5 Advanced WAF is stable in my experience.
What do I think about the scalability of the solution?
F5 Advanced WAF is a scalable product, and I can rely on it to protect my web applications.
How are customer service and support?
Customer support for F5 Advanced WAF is very professional, but I think it needs improvement to provide a fast response to customers.
F5 Advanced WAF provides the insights and notifications I need in terms of reporting and alerting. My experience with updates or support from F5 has been smooth, with no challenges faced.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
I have used FortiWeb before, and I switched to F5 Advanced WAF because of its stability.
How was the initial setup?
Managing and maintaining F5 Advanced WAF is not difficult for me; it does not require a lot of manual intervention.
What about the implementation team?
The learning curve for new team members using F5 Advanced WAF is very fast. After studying F5 implementation, the team learns quickly and can easily configure and manage F5 Advanced WAF.
What was our ROI?
F5 Advanced WAF protects our organization and provides security, achieving a return on investment.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup costs, and licensing is that it is too expensive.
Which other solutions did I evaluate?
Before choosing F5 Advanced WAF, I evaluated FortiWeb as another option.
What other advice do I have?
Everything great about F5 Advanced WAF has been mentioned.
I would rate F5 Advanced WAF a seven out of ten. The price held it back from being higher, which is why I rate it a seven.
F5 Advanced WAF is deployed in my organization across all modules, including hardware modules, public cloud, and hybrid cloud. For our public or hybrid cloud deployments, we use Amazon AWS. I purchased F5 Advanced WAF through the AWS Marketplace.
I have integrated F5 Advanced WAF by implementing two-arm mode, creating an external VLAN for a VIP, while the other arm is connected to the web servers to handle requests from the internet. After that, we published it through a firewall, so everything is straightforward, and F5 Advanced WAF supports many design types you can configure.
My advice for others looking into using F5 Advanced WAF is to reconsider the cost and review other products before making a choice.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Comprehensive threat protection enhances security while user interface improvement needed
What is our primary use case?
I use and recommend F5 Advanced WAF as a web application firewall to protect various applications. It is particularly effective in load balancing and enforcing security policies.
How has it helped my organization?
F5 Advanced WAF efficiently handles traffic and secures web applications, protecting sensitive data best for governmental organization. It ensures compliance with security standards by providing features like PCI DSS checks.
What is most valuable?
F5 Advanced WAF provides valuable features like signature-based protection, which includes up-to-date threat signatures for common attacks such as SQL injections and DoS protection. It also supports a load balancer for enhanced security and traffic management.
What needs improvement?
There are opportunities for improvement in updating the user interface to a more modern look. Additionally, the speed of technical support and community responses could be enhanced.
For how long have I used the solution?
I have been working with F5 Advanced WAF for two years.
What do I think about the stability of the solution?
F5 Advanced WAF is very stable when configured properly.
What do I think about the scalability of the solution?
F5 Advanced WAF is highly scalable and can handle large amounts of traffic due to its advanced load balancing capabilities.
How are customer service and support?
The technical support team provides responses within a day for critical issues, however, the community support can be slow, sometimes taking up to two weeks for a response.
How would you rate customer service and support?
Negative
Which solution did I use previously and why did I switch?
I have also used open-source WAF solutions such as OpenAppSec.
How was the initial setup?
The initial setup of F5 Advanced WAF is complex and requires detailed planning, especially for configuration files and management interfaces.
What about the implementation team?
Our internal team implemented F5 Advanced WAF with support from F5's sales engineers.
What was our ROI?
While F5 Advanced WAF is expensive, the investment is justified by its comprehensive security features.
What's my experience with pricing, setup cost, and licensing?
F5 Advanced WAF is notably costly, especially for small companies, however, it provides strong protection for its price.
Which other solutions did I evaluate?
l evaluated open-appsec as an alternative WAF solution.
What other advice do I have?
I would rate F5 Advanced WAF a seven out of ten.
It is important to learn the network and security landscape before deploying. Understanding cybersecurity concepts and signature-based attacks is crucial.
showing 1 - 2