BeyondTrust Privileged Remote Access vs F5 BIG-IP Access Policy Manager (APM) comparison

BeyondTrust Privileged Remote Access vs. F5 BIG-IP Access Policy Manager (APM)

Download the complete report

Helped 787,779 peers since 2012

Categories and Ranking

BeyondTrust Privileged Remo...

Ranking in Remote Access

6th

Average Rating

8.6

Number of Reviews

Ranking in other categories

Privileged Access Management (PAM) (3rd)

F5 BIG-IP Access Policy Man...

Ranking in Remote Access

10th

Average Rating

8.2

Number of Reviews

Ranking in other categories

Secure Web Gateways (SWG) (16th), Network Access Control (NAC) (6th), SSL VPN (4th), Access Management (6th)

Mindshare comparison

As of June 2024, in the Remote Access category, the mindshare of BeyondTrust Privileged Remote Access is 3.4%, up from 2.2% compared to the previous year. The mindshare of F5 BIG-IP Access Policy Manager (APM) is 2.1%, up from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Remote Access

Unique Categories:

Privileged Access Management (PAM)

6.0%

Secure Web Gateways (SWG)

0.4%

Network Access Control (NAC)

1.2%

Featured Reviews

Sorin Hrincu

PAM SecOps Team Manager at Getronics UK Limited

Jun 21, 2023

A reliable PAM that eliminates the need for a VPN and allows integration with authentication providers

Firstly, when doing protocol panel jumps, the tool does not restrict what is recorded on the user's computer. So if a user has, let's say, three desktop monitors, the tool will expand to the entire desktop and record everything that happens on those screens, and not in the PRA window alone. Since a lot of people hold sensitive information outside of the PRA window, this creates some friction because they do not want that information recorded. Restricting the recording to the PRA window during a protocol tunnel jump will be an improvement. The second improvement is that PRA could be more flexible with privilege elevation on Linux endpoints. The third improvement is that PRA should have more connectors for the most common applications it integrates with.

Read full review

Ibrahim Reda

Network and Security Engineer at CITG - Continental Information and Telecom Group

Oct 27, 2023

Helps secure remote connections and create customized portals

We use F5 BIG-IP APM to control and monitor device access based on MAC addresses F5 BIG-IP Access Policy Manager (APM) has improved our organization's ability to manage and secure remote connections, particularly from external partners. The product allows us to create customized portals for your…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I like the enterprise credential manager. It's a connector that sits in PRA and tests the credentials for the end user with a process that will clean the password. This is one of PRA's primary features and simplifies user onboarding. There aren't many restrictions or complications. We can add the user while only opening one port, which is more than enough to access the PRA server. Every organization requires only four critical servers out of a hundred and some 50 production servers."

"Its security, simplicity, and ease of deployment and maintenance are the most valuable. It is FIPS compliant, so it goes through severe penetration testing every one year or two years. They have to maintain this compliance. It is very safe. Customers have been using it in the last eight years because of the simplicity of getting it deployed quickly. Most of the people using the solution had been hacked already, so they needed it quickly. As compared to the other solutions in the market, it can be turned on in production very quickly. You don't really need to have a server. It can be deployed very rapidly on VMware or Hyper-V, and you don't need to do an installation. It is a kind of an all-included package that you just deploy in a VM environment. It is basically a VM that is specifically built for a customer. The way the PRA data solutions work is that you need to build them for each customer because of being hard-coded with their SSL certificate, their web page name, and all that."

"We can truly elevate our admin rights while we're in there to fully take control of a system and manage it as if it was sitting right here on our desk. Most of the organization has gone to remote work or work from home. With that being the case, this solution allows us to be able to still work with our end-users, even though they're not always sitting on our network."

"The scalability is excellent."

"When it comes to the Privileged Remote Access (PRA) solution, instead of depending on a VPN client, from Cisco or any other vendor, we can directly use this product from the internet. It is very easy to do the implementation, and it is easy for every user to access the server from outside of their organization. They can open the URL and put their name and password, and it'll do the multi-factor authentication. They can easily access the server. Prior to this solution, the users had to log into the VPN, which is not required with BeyondTrust. Now, they can use their computer over the internet."

"It is a real fortress. Its security is very strong. Multi-factor came as a feature out-of-the-box, which was big for us. That helps us meet another compliance requirement. It enforces encryption. Nobody can see what we are doing in our remote system if they happen to be listening for unencrypted traffic. That is its biggest strength."

"We like the integration with Active Directory. It allows us to discover the endpoints and user accounts that need protection. It's a good way of securing our privileged access."

"The privileged remote access platform is able to track and record everything that happens within a session."

More BeyondTrust Privileged Remote Access pros

"The product allows us to create customized portals for your users."

"The tool is reliable and easy to configure."

"The most valuable feature is the virtual IP creation. It's our most frequently used feature."

"The load balancing features are valuable."

"In my opinion, the GUI is perfect with the configuration options provided. F5 BIG-IP has given customization options and policy configuration tools in the GUI. It's good and good enough to work."

"The solution is stable and reliable."

"The performance of the solution is valuable."

"This is a product that is easy to install and integrate, and it is simple to use."

More F5 BIG-IP Access Policy Manager (APM) pros

Cons

"When doing protocol panel jumps, the tool does not restrict what is recorded on the user's computer."

"There is no connectivity to the appliance side. There is no API, and it is just difficult for me to capture what version the device is on without going in and doing screenshots. It is a little too secure in that regard, where they don't even trust their product owner. Since a lot of hacks come from the inside, they are probably doing what they need to do out of necessity. It is just that I have to work pretty hard to produce compliance data on the box."

"In terms of the ability to automate the creation of new accounts within it, it's still a bit laborious."

"The price is pretty expensive."

"At the moment, I don't see any major problems with it. If anything, they can just change the look and feel of the login screen because it looks too simple to me. It does not have so much information. When you get to the login screen of the solution, you should have more information. We also have BeyondTrust Remote Support, and the login page looks similar to BeyondTrust Privilege Remote Access. I would love to see more rich information on the login screen or landing page so that rather than having a regular sign-in screen or page where you just provide a username and password and get into the solution, you should have more insight into what the solution does. I've mentioned this to them every time I have had an opportunity."

"Its access process for third-party vendors needs to be simplified."

"The solution's Vault is a nice feature. It helps to securely share a security password in teams, but it is not at the level of a password management solution. So, it is just really a vault. We were expecting to have more features to better manage passwords, but that is something that you can work around if you also have a password safe solution. I would like them to have features like password rotation or password auditing, e.g., old passwords."

"The integration of the solution with many platforms is a difficult area to manage and needs to be made easy."

More BeyondTrust Privileged Remote Access cons

"In my opinion, the GUI side needs some improvement based on my usage. Sometimes, it doesn't work as efficiently as the CLI side."

"The technical support’s response time must be improved."

"The solution’s GUI looks very old."

"The solution is quite costly."

"We do not have knowledgeable support teams locally."

"I'd suggest improved documentation integration directly within the GUI. Right now, finding comprehensive documentation often requires going to external websites like the community portal."

"The operational deployment is not great."

"Integrating identity providers and single sign-on solutions can simplify user authentication and access control."

More F5 BIG-IP Access Policy Manager (APM) cons

Pricing and Cost Advice

"Though the solution was a bit expensive, the overall pricing was average."

"PRA was one of the cheapest solutions that we evaluated."

"The price is pretty expensive, but you get what you pay for and this is a great product."

"PRA's pricing is competitive."

"My client found the solution a bit expensive but considering their use case and requirements, they didn't have any other choice. As far as I know, implementation and licensing are the only costs."

"Its price is pretty good for the features and services that it provides. It is not outrageous. I'm not aware of any additional charges or anything like that."

"I wasn't directly involved in the licensing and pricing, but I can say that PRA is licensed per endpoint added to the Vault. I would advise users to take frequent exports of their license usage package; it's a simple feature that provides a spreadsheet of every machine in the Vault. This helps to cut down on duplicate licenses, which can happen by adding the same endpoint using an IP address and a fully qualified domain name, for instance. The implementation is an additional cost, and they offer several tiers, so the price varies. There are also some optional add-ons, so I would advise people to research the product well and find out precisely what they need regarding features. The Advanced Web Access add-on provides some required functionality when interfacing with websites; that's one to consider."

"I rate the product's pricing a four on a scale of one to ten, where one is high, and ten is low. It is an expensive product."

More BeyondTrust Privileged Remote Access pricing and cost advice

"Recently, they have simplified the licensing"

"The tool is a little bit expensive."

"The product is very expensive."

See which vendors are best for you

Use our free recommendation engine to learn which Remote Access solutions are best for your needs.

See recommendations

787,779 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Financial Services Firm

10%

Government

Manufacturing Company

Financial Services Firm

13%

Computer Software Company

11%

Government

11%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about BeyondTrust Privileged Remote Access?

The product has improved remote support capabilities since it works fine.

What needs improvement with BeyondTrust Privileged Remote Access?

The issue I found with the product revolves around the fact that RDP and SSH sessions take too much time, making it an area of concern where improvements are required. The product should be able to...

What is your primary use case for BeyondTrust Privileged Remote Access?

I use the tool in my lab. I am involved in the product's testing phase in my lab, where I am trying to check out the solution.

What do you like most about F5 BIG-IP Access Policy Manager (APM)?

In my opinion, the GUI is perfect with the configuration options provided. F5 BIG-IP has given customization options and policy configuration tools in the GUI. It's good and good enough to work.

What is your experience regarding pricing and costs for F5 BIG-IP Access Policy Manager (APM)?

The tool is a little bit expensive. I rate the pricing a six out of ten.

What needs improvement with F5 BIG-IP Access Policy Manager (APM)?

I'd suggest improved documentation integration directly within the GUI. Right now, finding comprehensive documentation often requires going to external websites like the community portal. In the AP...

CyberArk Privileged Access Manager vs BeyondTrust Privileged Remote Access

Comparisons

Compared 17% of the time

WALLIX Bastion vs BeyondTrust Privileged Remote Access

Compared 12% of the time

Citrix DaaS (formerly Citrix Virtual Apps and Desktops service) vs BeyondTrust Privileged Remote Access

Compared 12% of the time

BeyondTrust Remote Support vs BeyondTrust Privileged Remote Access

Compared 10% of the time

Appgate SDP vs BeyondTrust Privileged Remote Access

Compared 3% of the time

More BeyondTrust Privileged Remote Access Competitors

Citrix Gateway vs F5 BIG-IP Access Policy Manager (APM)

Compared 13% of the time

CyberArk Privileged Access Manager vs F5 BIG-IP Access Policy Manager (APM)

Compared 11% of the time

Ivanti Connect Secure vs F5 BIG-IP Access Policy Manager (APM)

Compared 7% of the time

Cisco ISE (Identity Services Engine) vs F5 BIG-IP Access Policy Manager (APM)

Compared 7% of the time

More F5 BIG-IP Access Policy Manager (APM) Competitors

Product Reports

BeyondTrust Privileged Remote Access

Download BeyondTrust Privileged Remote Access product report

BeyondTrust Privileged Remote Access report

F5 BIG-IP Access Policy Manager (APM)

Download F5 BIG-IP Access Policy Manager (APM) product report

F5 BIG-IP Access Policy Manager (APM) report

Also Known As

Bomgar Privileged Access

F5 Access Policy Manager

Learn More

BeyondTrust

Overview

BeyondTrust Privileged Remote Access (formerly Bomgar Privileged Access) lets you secure, manage, and audit vendor and internal remote privileged access without a VPN.

Privileged Remote Access provides visibility and control over third-party vendor access, as well as internal remote access, enabling your organization to extend access to important assets, but without compromising security.

Features include:

- Privileged Access Control: Enforce least privilege by giving users the right level of access.

- Monitor Sessions: Control and monitor sessions using standard protocols for RDP, VNC, HTTP/S, and SSH connections.

- Reduce the Attack Surface: Reduce attacks by consolidating the tracking, approval, and auditing of privileged accounts in one place and by creating a single access pathway.

- Integrate with Password Management: Inject credentials directly into servers and systems with just one click, so users never need to know or see plain text credentials.

- Mobile & Web Consoles: Use mobile apps or web-based consoles anytime, anywhere.

- Audit & Compliance: Create audit trails, session forensics, and other reporting features by capturing detailed session data in real-time or post- session review, and provide attestation reports to prove compliance.

F5 BIG-IP Access Policy Manager (APM) is an access management proxy solution for managing global access to the enterprise networks, cloud providers, applications, and application programming interfaces (APIs). Through a single management interface, BIG-IP APM consolidates remote, mobile, network, virtual, and web access.

BIG-IP APM can also serve as a bridge between modern and classic authentication and authorization protocols and methods. For applications which are unable to support modern authentication and authorization protocols, like SAML and OAuth with OIDC, but which do support classic authentication methods, BIG-IP APM converts user credentials to the appropriate authentication standard supported by the application.

BIG-IP APM Benefits:

Ease of use
Flexibility
Ability to integrate with other systems
Security features
Granular access control
Responsive and helpful support team

BIG-IP APM Features:

Support for Identity Aware Proxy (IAP) enabling Zero Trust application access
Context-based authorization with dynamic L4/L7 ACLs
Integration with third-party MFA solutions
DTLS 2.0 mode for delivering and securing applications
SAML 2.0 identity federation support
Support for OAuth 2.0 authorization protocol
SSO support for classic authentication (Kerberos, header- based, etc.), credential caching, OAuth 2.0, SAML 2.0, and FIDO2 (U2F)
AAA server authentication and high-availability
Integration with leading IAM vendor products (Microsoft, Okta, Ping Identity)
BIG IP Edge Client and F5 Access integrate with VMware Horizon ONE (AirWatch), Microsoft Intune and IBM MaaS360
Risk-based access leveraging third-party UEBA and risk engines (HTTP Connector)

Reviews from Real Users

Below are some reviews and helpful feedback written by BIG-IP APM users.

Mahmmoud Rabie, Senior Site Reliability Engineer, writes that BIG-IP APM is "A highly stable solution for load balancing, but the initial setup is complex."

Clyde Livingston, Senior Process Specialist at Telstra, says that BIG-IP APM is "Easy to use, useful access remotely, but lacking stability."

Chris Lam, Senior Solution Consultant at Macroview Telecom Limited, states that BIG-IP APM is "Useful for remote access VPN and VPI integration with VMware.

Sample Customers

Horizon Beverage, Air Liquide, Gateway Bank of Florida

City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office

BeyondTrust Privileged Remote Access vs. F5 BIG-IP Access Policy Manager (APM)