F5 BIG-IP Advanced Firewall Manager (AFM) Room for Improvement
RP
reviewer1250289
Sr. Architect at a media company with 10,001+ employees
The solution doesn't really meet our requirements for an edge firewall. It meets the requirements for a data center and that is the intended use of the base product.
View full review »F5 BIG-IP AFM can improve the reporting interface in relation to advanced troubleshooting depending on CLI. They should have enhanced troubleshooting with the use of GUI.
In an upcoming release, F5 BIG-IP AFM should add more free online applications, tutorials, and guides for total enhancements.
View full review »RP
reviewer1250289
Sr. Architect at a media company with 10,001+ employees
There should be simplified and better integration with BIG-IQ. There should also be a more modular approach. I believe they are working on it, and it is just a matter of deployment.
View full review »Buyer's Guide
F5 BIG-IP Advanced Firewall Manager (AFM)
March 2024
Learn what your peers think about F5 BIG-IP Advanced Firewall Manager (AFM). Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
765,386 professionals have used our research since 2012.
The solution's UI could be improved. The solution takes a high CPU computing power.
View full review »There is room for improvement in Advanced Firewall Manager's dashboard statistics, especially during attacks. Enhancements in graphical representation and more detailed reports would be beneficial for a more comprehensive understanding of the security landscape.
JM
Jabu Mtsweni
Head: Cyber and Information Research Centre at Council for Scientific and Industrial Research
The web gateway feature could improve in F5 BIG-IP Advanced Firewall Manager (AFM).
In the next release, the automation and AI aspect are very important nowadays, particularly from the incident point of view. I know they've added automation and AI in the recent update, but it could improve. The solution comes with devices and is more device-based, but it could be beneficial to have a software-defined load balancer. If there were less hardware it would save on costs.
View full review »We are looking for API discovery and protection-oriented solutions. F5 could provide a distributed cloud version. Additionally, they should give better pricing options to justify the ROI. It would help make investments within the budget considering the use cases. If both the criteria match, I can opt for it or look for other alternatives.
View full review »If you're looking for a plain vanilla firewall or IPS, then this is a good tool. If you compare it with the next-generation firewalls, then definitely this tool is not comparable. The next generation tools are user centric and application centric at the same time.
View full review »The solution's initial setup is not easy.
View full review »Some spam can go by the firewall. The processing is a bit slow, and spam can get by.
We'd like to be able to do a deep packet inspection. We haven't enabled that. Hopefully, the next-generation firewalls will be able to do that for us.
The solution is a bit pricey.
View full review »We seem to have confusing logic from the solution itself. This needs to be addressed.
For configuring the firewall, every single vendor on the planet has pretty much the same logic when it comes to firewalls, and F5 has a completely different approach and completely different behavior. When you first encounter the AFM, it can be really complicated to understand and find a way how to achieve the desired configuration. It's not logical. It's completely different than any other solution. In the end, it gives you similar results - just in a much more complicated way.
Technical support could be better.
View full review »HA
HaniAsaad
Senior Presales Consultant at Innovative Solutions
The product is expensive.
View full review »DG
Diego Gullo
IT Service Delivery Manager at Consys.it
It used to not be simple to use because the GUI was complex. The GUI has evolved and is better now.
The database is not simple. It's not easy to understand.
We needed to protect the database but the solution doesn't offer certain features to do so.
Customers have requested container features.
View full review »F5 BIG-IP Advanced Firewall Manager's pricing and technical support services need improvement.
View full review »JH
Frwllmgr677
Computer & Network Security Professional at a financial services firm with 10,001+ employees
The interface for applying the features could use improvement. There are too many buttons. For the buttons, you don't get a clear description. With the interface, you don't get a clear idea of what you are doing. This affects what is enabled and what is disabled. So if there is a little help, maybe some descriptions on them, it would be better. At least you wouldn't need to go to use Google before you find a particular feature to enable.
View full review »SC
reviewer1306038
Contracted IP Development Engineer at a media company with 10,001+ employees
We aren't using the most recent version. The most recent version is 15. Therefore, there may have been improvements on the solution we're not aware of.
The should add, if they aren't already going to, some features surrounding location awareness, station awareness and segregation of users. I'm not sure of which version supports these items and which port version doesn't. However, I hope they will continue to develop out the product to ensure they are included.
In order to overcome some of the problems in the industry, I would like to see the solution offer a hardware device with strong ASICs, and a stand-alone AFM tool to prevent attacks.
View full review »I've had a very impressive four-year experience deploying F5, so it is difficult to pinpoint one weakness in the solution. On the other hand, honestly in all of the deployments I have done with F5, there has not been one customer that has used up to 40% capacity of what the modules can provide. That's a case of underutilization. If anything, the product is already more powerful than any client I know has needed. It would be difficult for them to improve in this particular area.
View full review »MH
reviewer1189323
Senior Security Engineer at a tech services company with 201-500 employees
Firstly, geolocation currently relies on manual updates. It has to move to automatic updates. There are no automatic updates for this feature. If some IPs, countries, or service providers move to another country, now we will allow IPs that were previously denied. This is because you depend on the database, which doesn't update automatically. This is really a very important area that they need to improve.
I also want to see something like application inspection. If they can add application inspection like a DC firewall, it would be a good added feature for them.
View full review »RB
reviewer1003632
Founder / Senior Security Architect at a tech services company with 1-10 employees
The pricing of the solution could be a little bit better.
View full review »JA
reviewer1434246
Technology Consultant / Cloud Security Architect at a tech services company with 11-50 employees
Currently, we have eighty F5s and we need some kind of management software. It would be very helpful.
In the next release, I would like to have management and monitoring software included.
View full review »Buyer's Guide
F5 BIG-IP Advanced Firewall Manager (AFM)
March 2024
Learn what your peers think about F5 BIG-IP Advanced Firewall Manager (AFM). Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
765,386 professionals have used our research since 2012.