F5 BIG-IP DNS Room for Improvement

DL
- at a computer software company with 51-200 employees

For me, F5 is a great solution. I think all the features we have in the solution now are good.

In the product, one of the shortcomings is related to its configuration part. So, F5 issues certificates, and one needs to be a certified engineer to understand the product. Though you can find some manuals or F5 documents, in real life, it's very hard to understand this product. Documentation is an aspect that can be considered for improvement.


View full review »
KepaAyerbe - PeerSpot reviewer
Connectivity Platform Cyber Security Specialist at BASF

The costs could always be a bit lower. 

View full review »
Raja Waqar Ahmad - PeerSpot reviewer
Sr. Network Engineer at Tekboox

F5 is working on improving its identity management features. This is an important area for improvement, as it is a key component of Zero Trust architecture. 

So, when I was working on the zero-trust architecture, I noticed that there was a lack of documentation.

The National Institute of Standards and Technology (NIST) has published some documentation and frameworks for ZTA implementation.

In the NIST framework, multiple vendors can be used for different components of the architecture. For example, for identity management, common vendors include Azure, Intune, AWS, Cisco Duo, and Zscaler. I remember reading about F5 mentioned in the context of the ZTA framework. 

So, it's encouraging to read that F5 is being considered for ZTA implementations. Netskope is also using F5 for their ZTA solutions.

I would also like to see all of F5's features integrated into a single box, as it would be the most beneficial for end customers. F5 is already enhancing its security capabilities. 

Initially, load balancing and security required separate devices, but now F5 offers solutions that combine both functionalities in a single device.

View full review »
Buyer's Guide
F5 BIG-IP DNS
March 2024
Learn what your peers think about F5 BIG-IP DNS. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
765,386 professionals have used our research since 2012.
SRI GANESH  PHANIYAPPA - PeerSpot reviewer
Sub Divisional Engineer NOC Bangalore at a comms service provider with 10,001+ employees

They only have a few sub-vendors, but competition for the reduced-price listing has increased. 

This one requires a few more vendors who can join the F5 network. 

In my opinion, brand recognition can be increased. I would like them to focus on marketing and brand awareness.

In India, for example, the product is not well known, and it is difficult to find F5 partners or vendors.

It's not widely known.

The weakness is that extensive training is required to hire the people who need to work on the project. Training is only part of it, the other is marketing, where and whom to approach.

I would like them to concentrate on training sessions or educational webinars to educate the users and customers.

We are only trained after we have installed it. The training was provided during the deployment.

The main point is that intelligence will be infused into this panel. The product server is prevented from accessing a malicious server site. CNC (control and command) communication would be beneficial.

We would like to have control and command blocking to prevent visiting malicious websites.

We would like them to have a prevention feature included, to prevent them from visiting these websites.

View full review »
John Edwards - PeerSpot reviewer
Manager Cyber Security at Dept. of the Premier and Cabinet

It would be great to see a F5 BIG-IP DNS cloud version. What we within the Australian government are looking at doing is utilizing a secured DNS service much the same as the English GCHQ version of their protected DNS service. That's a fully-managed external platform and it's used by multiple government agencies, so we get a better holistic view of all malicious DNS traffic that is occurring. 

View full review »
PE
Manager at Telkom Mobile

There is room for improvement in pricing. It is very pricey. So we don't have a performance problem at this stage. Because the appliances that we use are not the virtual edition. We know that NGINX started using the virtual edition for containers. But, from a performance perspective, we're happy. And from just the price perspective, it's very expensive.

View full review »
Sushil Gaund - PeerSpot reviewer
L3 Project Engineer at Inspira Enterprise

The monitoring capabilities of F5 BIG-IP DNS could be improved. Sometimes, it requires additional work to monitor details effectively.

View full review »
Michael GEgziabher - PeerSpot reviewer
Network Administrator at Bank of Abyssinia

The tool needs to improve its UI. 

View full review »
RT
Technical Consultant at a financial services firm with 1-10 employees

The IP intelligent services are good for mitigating threats, but there are also false positives.  So, it's not a standalone solution that can cover everything.

F5 can consider enhancing the security profiles.

Another area of improvement is documentation. 

View full review »
Sudhanshu Singh - PeerSpot reviewer
Associate Software Engineer at a tech services company with 10,001+ employees

F5 BIG-IP DNS is quite old and may go extinct in a few days, months, or years, depending on whether it offers additional features. I first heard about the solution over ten years ago. People are moving away from it slowly to cloud-based load-balancing solutions. I don't have any strong evidence to back up my opinion, but that's what I believe based on what I've seen. Cloud-based tools are already available in the market, so no one will consider an on-prem tool unless it's affordable for small organizations. The solution can improve by adding cloud integration through plugins or additional configurations so we can use F5 BIG-IP DNS to communicate with the cloud.

View full review »
Md. Al Imran Chowdhury - PeerSpot reviewer
Cyber Security Analyst at Link3 Technologies

The solution's initial setup is complex compared to Fortinet.

View full review »
PP
Head of Infrastructure division at a comms service provider with 501-1,000 employees

The solution is complicated to use. It is difficult to write to. F5 BIG-IP DNS is powerful but challenging to use.

I would like to see the login facilities improved, as well as more troubleshooting.

View full review »
AM
System Engeneer at CROC

Hand management and working with rules are two areas that need to be improved.

It would be beneficial to have information and categorize it for licensing, features, and what is included in which license. I would like to see more marketing documentation, rather than technical documentation.

View full review »
IS
Sr. Technical Specialist at a retailer with 10,001+ employees

Pricing could be reduced.

Scalability is a concern, it could be improved.

View full review »
NitinSharma7 - PeerSpot reviewer
Senior Network Specialist at Intuitive Technology Partners

I sometimes encounter issues with the porting of F5 BIG-IP DNS. The porting functionality is not up to the mark when troubleshooting or attempting to access logs or connections. Additional attention is needed to ensure smooth operation. 

View full review »
Onur Pinargozu - PeerSpot reviewer
Network & Security Specialist at Infrasis

The initial setup could be easier.

View full review »
EM
Technical Services Manager at ProComm technologies

The messaging between NGINX and F5 should be simplified. When I do presentations to customers, they sometimes are confused about this issue. It is not clear where NGINX gets into the network.

I would like to see deeper integration with VMware in the sense that F5 compliments VMware, in the context of application availability. VMware has the Site Recovery Manager that looks at the virtual machine side of things. If there's deep integration with VMware, where F5 is able to figure out that an application is impaired and it wants to failover, it should be able to tell VMware to trigger that process.

Better pricing for this product would make it more competitive on the market.

View full review »
Buyer's Guide
F5 BIG-IP DNS
March 2024
Learn what your peers think about F5 BIG-IP DNS. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
765,386 professionals have used our research since 2012.