F5 Advanced WAF vs NGINX App Protect comparison

Cancel
You must select at least 2 products to compare!
F5 Logo
12,122 views|9,561 comparisons
97% willing to recommend
F5 Logo
3,410 views|2,539 comparisons
94% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between F5 Advanced WAF and NGINX App Protect based on real PeerSpot user reviews.

Find out in this report how the two Web Application Firewall (WAF) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed F5 Advanced WAF vs. NGINX App Protect Report (Updated: March 2024).
770,458 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"This solution inspects your traffic and based on that, automatically create distinct qualities for you, so you can add this to the policy already created. That's what I like most.""Very easy to implement and works well.""F5 Advanced WAF secures our connectivity and combines both the main functions of WAF (balancing and web application security).""Identification, ease of use, and ease of modifying it to most of our needs are valuable.""The most valuable features of F5 Advanced WAF are the balancer and you can change policies very easily.""F5 Advanced WAF has very good stability and scalability. Its initial setup was straightforward.""I like them because I like the security solution. They get extra marks compared to other solutions or competitors. There are more features than any other product I can think of. They're always monitoring, and the security features offer more than other, lesser products.""In terms of F5 Advanced WAF's most valuable features, I would definitely say its stability. F5 is one the most stable products. Either as the load balancer or the web application firewall, it is very stable."

More F5 Advanced WAF Pros →

"The most valuable feature of NGINX App Protect is the reverse proxy.""It's very easy to deploy.""The policies are flexible based on the technologies you use.""NGINX App Protect is stable.""We were looking for a product that is capable of complete automation and a container based solution. It's working.""I tested specific features and evaluated the solution against the Web Application Firewall. I conducted research to test different detection percentages. I did not use it directly for protection but for evaluation purposes.""WAF is useful to track mitigation, inclusion, prevention, and the parametric firewall.""The most valuable feature of NGINX App Protect is its open source."

More NGINX App Protect Pros →

Cons
"Most customers encounter stability issues with the product's Big-IP logs.""The solution could improve by having an independent capture module. It has a built feature that you can deploy the capture on your published website. However, it's not very user-friendly. When you compare this feature to Google Capture or other enterprise captures, they are very simple. It needs a good connection to the F5 Advanced WAF sandbox. When you implement this feature in the data center, you may suffer some complications with connecting to the F5 Advanced WAF sandbox. This should be improved in the future.""There should be more ability to rate limit certain scenarios. The majority of the time, it is either on or off. For certain types of use cases, there should be the ability to rate limit, not just enable or disable.""There is a learning curve that extends the time of implementation.""The tool needs to improve its pricing.""Nevertheless, F5 products are generally considered to be hard to deploy.""It's sometimes difficult to customize APIs with F5 Advanced WAF.""I would not expect traffic details to pass through the web application firewall across the length of the whole application. I think that there is a web application where it can let the application function without traffic going in into the WAF."

More F5 Advanced WAF Cons →

"The product's user interface is an area with shortcomings as it can be quite confusing for users, making it an area where improvements are required.""Currently, the policies have to be handled manually, and you have to create from scratch, which can be a bit time-consuming, in a large environment.""The setup of NGINX App Protect is complex. The full process took one week to complete. Additionally, we had to change the network infrastructure platform which took one month.""Areas for improvement would be if NGINX could scan for vulnerabilities and learn and update the signatures of DoS attacks.""As far as scalability, it takes a long time for deployment.""The integration of NGINX App Protect could improve.""Right now, the tool doesn't provide an option revolving around update feeds, specifically the signature update option in the UI.""NGINX App Protect would be improved with integration with Shape and F5 WAF, which would make it easy for users to manage all their web application security with a single solution."

More NGINX App Protect Cons →

Pricing and Cost Advice
  • "The pricing is too high."
  • "I think the price is very high."
  • "After buying the program, you just pay for the support every year."
  • "Licensing fees for this solution are paid on a yearly basis."
  • "It's more expensive than other solutions and depending on the modules, there can be additional fees."
  • "F5 bundles up services and the bundle is what you pay for rather than individual components."
  • "Its price is fair. We have done a couple of deals where they were able to give some kind of discount to the customers. The price was initially high for the customers, but after a couple of negotiations, it came within their budget. They were happy with that."
  • "There are various plans available for Fortinet FortiWeb Cloud WAF as a Service, including a trial version."
  • More F5 Advanced WAF Pricing and Cost Advice →

  • "The licensing fees for this solution are pretty expensive for what it does, but there is no alternative."
  • "Our licensing costs are about $40,000 a year."
  • "Really understand the licensing model, because we underestimated that."
  • "There are no additional fees."
  • "NGINX is not expensive."
  • "The pricing is reasonable because NGINX operates on an instance basis."
  • "There is a license needed to use NGINX App Protect."
  • "There are not any additional costs we had to pay to use NGINX App Protect."
  • More NGINX App Protect Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
    770,458 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:It's a fairly easy-to-use and user-friendly tool. My administrators and team also like its ability to customize the rules per the requirements.
    Top Answer:The self-service aspect could be improved. The user interface (UI) also seems a bit outdated. Making it more user-friendly would be beneficial.
    Top Answer:The solution has yearly, three-year, and five-year subscriptions.
    Top Answer:NGINX App Protect could provide a better user interface.
    Ranking
    Views
    12,122
    Comparisons
    9,561
    Reviews
    22
    Average Words per Review
    415
    Rating
    8.6
    Views
    3,410
    Comparisons
    2,539
    Reviews
    9
    Average Words per Review
    334
    Rating
    8.7
    Comparisons
    Also Known As
    NGINX WAF, NGINX Web Application Firewall
    Learn More
    Overview

    F5 Advanced WAF is a web application security solution for financial and government sectors, e-commerce, and public-facing websites. It offers protection against various attacks, including botnets, web scraping, and foreign entities. The solution can be deployed on-premises or in the cloud and is often used with other security tools. Its most valuable features include DDoS and DNS attack protection, SSL uploading, anomaly detection, and the ability to input custom rules. 

    F5 Advanced WAF has helped organizations to expose more services to the public while providing an extra layer of protection, preventing revenue loss, and securing connectivity.

    NGINX App Protect application security solution combines the efficacy of advanced F5 web application firewall (WAF) technology with the agility and performance of NGINX Plus. The solution runs natively on NGINX Plus and addresses some of the most difficult challenges facing modern DevOps environments:

    • Integrating security controls directly into the development automation pipeline
    • Applying and managing security for modern and distributed application environments such as containers and microservices
    • Providing the right level of security controls without impacting release and go-to-market velocity
    • Complying with security and regulatory requirements

    NGINX App Protect offers:

    • Expanded security beyond basic signatures to ensure adequate controls
    • F5 app‑security technology for efficacy superior to ModSecurity and other WAFs
    • Confidently run in “blocking” mode in production with proven F5 expertise
    • High‑confidence signatures for extremely low false positives
    • Increases visibility, integrating with third‑party analytics solutions
    • Integrates security and WAF natively into the CI/CD pipeline
    • Deploys as a lightweight software package that is agnostic of underlying infrastructure
    • Facilitates declarative policies for “security as code” and integration with DevOps tools
    • Decreases developer burden and provides feedback loop for quick security remediation
    • Accelerates time to market and reduces costs with DevSecOps‑automated security
    Sample Customers
    MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
    Information Not Available
    Top Industries
    REVIEWERS
    Financial Services Firm34%
    Computer Software Company25%
    Non Tech Company6%
    Media Company6%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Financial Services Firm15%
    Government7%
    Comms Service Provider7%
    REVIEWERS
    Comms Service Provider33%
    Financial Services Firm33%
    Insurance Company17%
    Computer Software Company17%
    VISITORS READING REVIEWS
    Computer Software Company19%
    Financial Services Firm11%
    Comms Service Provider9%
    Healthcare Company7%
    Company Size
    REVIEWERS
    Small Business31%
    Midsize Enterprise24%
    Large Enterprise45%
    VISITORS READING REVIEWS
    Small Business19%
    Midsize Enterprise16%
    Large Enterprise65%
    REVIEWERS
    Small Business26%
    Midsize Enterprise26%
    Large Enterprise47%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise14%
    Large Enterprise61%
    Buyer's Guide
    F5 Advanced WAF vs. NGINX App Protect
    March 2024
    Find out what your peers are saying about F5 Advanced WAF vs. NGINX App Protect and other solutions. Updated: March 2024.
    770,458 professionals have used our research since 2012.

    F5 Advanced WAF is ranked 2nd in Web Application Firewall (WAF) with 55 reviews while NGINX App Protect is ranked 15th in Web Application Firewall (WAF) with 19 reviews. F5 Advanced WAF is rated 8.6, while NGINX App Protect is rated 8.2. The top reviewer of F5 Advanced WAF writes "Flexible configuration, reliable, and highly professional support". On the other hand, the top reviewer of NGINX App Protect writes "Capable of complete automation but is costly ". F5 Advanced WAF is most compared with Fortinet FortiWeb, Microsoft Azure Application Gateway, AWS WAF, Imperva Web Application Firewall and Azure Web Application Firewall, whereas NGINX App Protect is most compared with AWS WAF, Microsoft Azure Application Gateway, Fortinet FortiWeb, Cloudflare Web Application Firewall and Noname Security. See our F5 Advanced WAF vs. NGINX App Protect report.

    See our list of best Web Application Firewall (WAF) vendors.

    We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.