F5 BIG-IP Advanced Firewall Manager (AFM) vs Prolexic comparison

F5 BIG-IP Advanced Firewall Manager (AFM) is a high-performance, full-proxy network security solution designed to protect networks and data centers against incoming threats that enter the network. Built on F5’s industry-leading BIG-IP hardware and software platforms, BIG-IP AFM provides a scalable platform that delivers the flexible performance and control needed to mitigate aggressive distributed denial-of-service (DDoS) and protocol attacks before they overwhelm and degrade applications and infrastructure availability.

For service providers, BIG-IP AFM IPS does even more, protecting the network edge and performing traffic inspection and protocol adherence for prevalent service provider protocols such as SS7, Diameter, HTTP/2, GTP, SCTP and SIP traffic coming into the network over UDP, TCP, and SCTP.

Akamai Prolexic is a cloud-based DDoS protection solution that defends your data center and hybrid infrastructure to ensure availability and uptime. It provides comprehensive port and protocol protection against the broadest range of DDoS attacks, including high-bandwidth sustained attacks and complex multi-vector attacks. Prolexic is available as an always-on or on-demand service, contains a Network Cloud Firewall, and offers flexible integration models based on your desired security posture across hybrid origins. Prolexic is backed by a proven platform with more than 20 Tbps of dedicated DDoS defense capacity and our 24/7/365 global SOCC for a fully managed solution.

Prolexic stops DDoS attacks closer to the source to maximize performance for users and to maintain network resiliency through cloud distribution. Instead of originating advertisements for your prefixes from your cloud/data centers, you’ll make either a border gateway protocol route advertisement change or DNS redirection (A record or CNAME record) to originate from one of many Akamai scrubbing centers globally. Your intended traffic is then routed to the user via Anycast through the closest scrubbing center. Prolexic will inspect the traffic to determine if it is good or bad, and apply proactive and/or custom mitigation controls designed to stop attacks instantly if needed. This ensures fast and accurate DDoS protection. Clean traffic is then returned to the customer origin via GRE tunnels, Layer 2 VLAN connections, and/or VIP-to-origin back-end mapping with little perceived latency. Prolexic also features a Network Cloud Firewall that allows IT teams to auto generate or manually manage access control lists.