F5 Advanced WAF Questions

Rajan K
Senior Technical Manager at Novac Technology Solutions
Sep 08 2021

Hello,

At the moment, I'm doing research about WAFs and I'd like to get your inputs on which product is better in terms of features and application security control: F5 WAF or Barracuda WAF.

Thanks for the help!

Cloud Architect at a computer software company with 10,001+ employees
Sep 08 2021

Hi, 

I'm researching F5 Advanced WAF. Does it work with Azure App Service?

Thanks!
 

Georges SamahaYes, it is definitely supported on most cloud platforms. You can find all… more »
MichaelOgunladeSure. It's available on the Azure Marketplace
Julia Frohwein
Content and Social Media Manager
IT Central Station
Sep 01 2021

Hi everyone,

What do you like most about F5 Advanced WAF?

Thanks for sharing your thoughts with the community!

reviewer1404666The web application firewall itself is most valuable. It provides positive… more »
Julia Frohwein
Content and Social Media Manager
IT Central Station
Jul 30 2021

Hi,

We all know it's really hard to get good pricing and cost information.

Please share what you can so you can help your peers.

Miriam Tover
Content Specialist
IT Central Station
Jul 30 2021

Please share with the community what you think needs improvement with F5 Advanced WAF.

What are its weaknesses? What would you like to see changed in a future version?

Miriam Tover
Content Specialist
IT Central Station
Jul 30 2021

How do you or your organization use this solution?

Please share with us so that your peers can learn from your experiences.

Thank you!

Miriam Tover
Content Specialist
IT Central Station
Jul 30 2021

If you were talking to someone whose organization is considering F5 Advanced WAF, what would you say?

How would you rate it and why? Any other tips or advice?

Web Application Firewall (WAF) Questions
Evgeny Belenky
IT Central Station
Aug 05 2021

Hi peers,

What are the OWASP Top 10 this year? 

What single web app security tool (or a minimum set of tools) would you recommend for overall web app protection (from the most critical security risks covered by these Top 10)?

Andrew Van Der StockWe are due to release the OWASP Top 10 2021 on September 24, 2021. We will be… more »
Curtis YankoI’m not sure the top 10 is changing this year but if it is it will be to squeeze… more »
VarunGoyal
User
Jul 07 2021

Hi community,

I'm trying to understand what limitations AWS WAF has vs other (alternative) Web Application Firewall (WAF) products.

John RendyHi Varun, I have had experienced with several WAF deployments and deep… more »
Edwin EzeOsiago
Head of security solutions at Infodata Professional Services
Jul 26 2021

Should one go for a URL Filtering as an add-on to NGFW or just deploy a Web proxy, instead?

I am one who advocates that firewalls with URL Filtering can't serve better than Web security solutions (i.e., a Web proxy).

What's your opinion?

Mike HounsomeOver 50% of security vulnerabilities are non-Web based traffic, such as DNS… more »
Evgeny BelenkyHi @Oleg Pekar and @Manish Nalawade. Can you share your thoughts?
chiefexe795285Use a Web Proxy that will protect your users when they are working at home as… more »
Steven Mooney
User at ODS

Has anyone ever heard of secureaccess.com? 

The service they are offering appears to tick all the boxes that I'm after.

Any other companies do something remotely similar or the same thing?

I'm going to list a few things that I'm after...

  • I need a service that shields the connection between my employees and the web applications that we use.
  • permission management for individual web applications at both user and group level
  • SSO and 2FA
  • Integrated WAF
  • Integrate LDAP

Thanks

Menachem D Pritzker
Director of Growth
IT Central Station
Aug 10 2021

Hi community, 

There are so many firewall products in the market today. Who are we going to be talking about 3-5 years from now?

imadamNetscope, Zscaler if they continue route they are on now. FIrewalls needs great… more »
Nehad ElkordiCisco Portfolio is focusing on total security inside and outside including cloud… more »
Lipaz HesselWell with the SD-WAN raising it is common to see cloud firewall implementations… more »
Rony_Sklar
IT Central Station
Aug 16 2021

Hi professionals,

There seems to be some controversy around whether or not SSL Inspection should be used by businesses. 

What is your opinion - should they be used, and if so when? Conversely, what are the reasons for not using SSL inspection?

Bruce BennettI am a proponent of SSL inspection, as long as you have another function/service… more »
Leo TseSSL inspection requires high firewall resources, the use depends on what your… more »
David StoreySSL Inspection is great for corporate/organizational security as it allows you… more »
Rony_Sklar
IT Central Station
May 01 2021

Is a WAF the best defense against a DDoS attack? What are the most effective ways of protecting a business against DDoS attacks? 

Georges SamahaHello there In order to Talk about DDoS protection, we have at First to split… more »
Prasert Mahapol
Sales Director with 51-200 employees
Aug 31 2021

I am a Sales Director at a company with less than 1,000 employees. 

I am researching Web Application Firewalls (WAF). I am considering R&S (DenyAll) and Imperva. Which would you recommend? 

Are there others I should consider?

JimDavisImperva is a strong choice, given their security focus and ongoing R&D into the… more »
Unmesh Deshpande
CTO at Kingsway Hospitals
Aug 24 2021

Hello community, 

I am the CTO for a large multi-specialty private hospital.

We are currently researching WAF solutions. Which WAF solution would you recommend with no heritage for subscription charges? We are a hospital with many web apps that need to be published soon and quickly. We have decent internet access. There could be 100 to 125 concurrent sessions.

Thanks! I appreciate your help. 

SrdjanI would always recommend F5 WAF, it is probably the best one on the market… more »
Aum e HaniI myself used Cloudflare as the easiest and quicker solution to implement. But… more »
Jeremy RammalaereWe have been having great success with FortiWeb appliances. They offer various… more »
Sujit Sharma
Information Security Engineer at a tech services company with 1,001-5,000 employees

We required a 24/7 automated vulnerability monitoring tool for securing our web applications. We are looking for options like Sitelock and Immuniweb.

it_user218361I haven't heard about SiteLock or Immuniweb, but I have used Qualys Web… more »
it_user550380In my experience the best option is to make dast and sast before each change of… more »
it_user648771While Cloudflare and AWS offer similar solutions, they do not have the scale, or… more »