No more typing reviews! Try our Samantha, our new voice AI agent.

F5 Advanced WAF vs F5 Rules for AWS WAF comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.6
F5 Advanced WAF offers ROI by saving time, reducing costs, enhancing security, and ensuring compliance for businesses.
Sentiment score
7.2
F5 Rules for AWS WAF enhanced security, reduced manual efforts, decreased malicious traffic, and improved application performance with ROI benefits.
Time savings in daily operations come from the automatic learning and signature update reducing the need for constant manual rule management, allowing the security and network teams to spend significantly less time handling false positive application-related escalations.
Cyber Security Consultant at HR Software Solution
Subscription models offer clearer ROI due to a more competitive pricing scheme.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
The amount of attacks it protects against is immense, more than F5 Advanced WAF itself costs.
Security Solutions Architect at a consultancy with 1-10 employees
I observed around 35 to 45% reduction in malicious application layer traffic reaching the origin, which helped protect the backend systems and reduce risk exposure.
Technical Team Lead - Content Security at Valuepoint Systems
One measurable benefit was a reduction in manual effort required for managing and tuning web application protection policies because the managed rule capabilities and centralized visibility simplified the day-to-day operations.
Senior Technical Consultant at a tech consulting company with 5,001-10,000 employees
I did see a return on my investment with F5 Rules for AWS WAF because I was able to detect attacks earlier, and because of this, my resources were not scaling continuously, thus saving costs on resources.
Cloud Architect at a outsourcing company with 51-200 employees
 

Customer Service

Sentiment score
6.9
F5 Advanced WAF's customer service is highly professional and knowledgeable, but response speed and availability need improvement for some users.
Sentiment score
7.9
F5 Rules for AWS WAF have positive customer service, but users desire quicker solutions and more proactive recommendations.
Both response time and availability need to be improved.
Security Analyst at IBM
While they resolve issues well, the time taken for responses to non-critical issues should be shorter.
Senior Security Systems Engineer at a tech services company with 11-50 employees
If there is a bug, the support is usually understanding and resolves issues.
CEO at CyberApp
They clearly explained what the best options are based on my use case, which helped us shortlist what is required.
Associate Vice President at Hitachi Systems India Private Limited
The support team generally demonstrates strong technical knowledge around application security and traffic management, along with the AWS integrations.
Senior Technical Consultant at a tech consulting company with 5,001-10,000 employees
For critical issues, the response time is quite good, and the support teams are knowledgeable in handling rule tuning, false positives, and other security-related incidents.
Technical Team Lead - Content Security at Valuepoint Systems
 

Scalability Issues

Sentiment score
7.5
F5 Advanced WAF is scalable, efficiently handling large traffic, praised for flexibility, and easily upgraded to meet user needs.
Sentiment score
8.4
F5 Rules for AWS WAF provides scalable, cloud-native security, managing traffic spikes efficiently without compromising performance or requiring manual adjustments.
If you need to scale up, such as moving from a lower model to a higher one, the configuration from the lower model can be migrated easily without issues.
Senior Security Systems Engineer at a tech services company with 11-50 employees
I can run it in HA mode or even divide the traffic volume to the number of instances that I have based on their resource sizing.
Security Solutions Architect at a consultancy with 1-10 employees
In my experience, F5 Rules for AWS WAF handles traffic spikes and high request volumes efficiently, including during attack scenarios such as bot surges or application layer attacks.
Technical Team Lead - Content Security at Valuepoint Systems
Easily handling traffic spikes and high-volume attacks without any manual intervention.
Cloud DevOps Engineer at a tech vendor with 10,001+ employees
It supports scaling without significantly affecting application performance even during high traffic periods or sudden spikes in requests.
Senior Technical Consultant at a tech consulting company with 5,001-10,000 employees
 

Stability Issues

Sentiment score
8.4
F5 Advanced WAF is highly reliable and stable, rarely facing downtime, with user ratings of 8-10 for performance.
Sentiment score
8.6
F5 Rules for AWS WAF offers reliable performance, seamless integration, and minimal intervention, outperforming native AWS rules in effectiveness and coverage.
F5 Advanced WAF has been very reliable and consistent for us; in our on-premise enterprise setup, it has been stable and predictable in day-to-day operations without any unexpected crashes or WAF-related downtime in production.
Cyber Security Consultant at HR Software Solution
F5 Advanced WAF is stable, and there is no doubt it is one of the best WAFs in the market.
Senior Security Systems Engineer at a tech services company with 11-50 employees
F5 Advanced WAF is pretty stable.
Security Solutions Architect at a consultancy with 1-10 employees
F5 Rules for AWS WAF is consistently updated and applied without impacting application availability, and it handles high traffic volumes effectively, even during attack scenarios.
Technical Team Lead - Content Security at Valuepoint Systems
Especially in terms of policy enforcement, traffic inspection, and integration with AWS environments.
Senior Technical Consultant at a tech consulting company with 5,001-10,000 employees
Providing comprehensive managed rules coverage and reducing operational overhead compared to the AWS native managed rules.
DGM at Airtel Digital
 

Room For Improvement

F5 Advanced WAF needs improvements in pricing, usability, API protection, bot detection, deployment, and advanced integration features.
Users want simpler tuning, AI-driven optimization, better documentation, cloud integration, reduced costs, and improved reporting for AWS WAF.
Deployment training for F5 Advanced WAF is lacking and restricts growth by being inaccessible and costly for partners.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
Overall, these are not blockers, merely enhancement opportunities, and once tuned, F5 Advanced WAF is very stable and reliable; improving usability, reporting, and onboarding would make it even more effective for larger environments.
Cyber Security Consultant at HR Software Solution
Another improvement could be refining the bot detection to minimize false positives; it should be able to verify more granularly between legitimate and non-legitimate clients.
Senior Security Systems Engineer at a tech services company with 11-50 employees
To stay safer from a security perspective, continuous improvisation in these security rules is required to ensure we are always up to date with new attacks.
Associate Vice President at Hitachi Systems India Private Limited
The most useful change for F5 Rules for AWS WAF would be rule-level allow listing and exception management.
Senior Technical Lead QA at a computer software company with 501-1,000 employees
Fine-tuning it to match specific application behavior can sometimes be complex and time-consuming, especially for teams without deep WAF expertise.
Technical Team Lead - Content Security at Valuepoint Systems
 

Setup Cost

Enterprise buyers find F5 Advanced WAF's pricing high but justified in banking, with complex licensing and higher setup costs.
F5 Rules for AWS WAF offers cost-effective advanced protection and easy integration, justifying its premium over basic sets.
Licensing is capacity-driven, so you need careful planning based on traffic volume and use cases, and adding features such as Bot Protection impacts costs; once licensing is clear and sized correctly, there are no surprises.
Cyber Security Consultant at HR Software Solution
Subscription models have competitive pricing, while perpetual licenses involve an upfront higher cost.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
The price is affordable and satisfactory.
CEO at CyberApp
It has competitive pricing.
Associate Vice President at Hitachi Systems India Private Limited
There is no significant setup cost involved, as it is a managed service that can be quickly integrated into the existing AWS WAF configuration without additional infrastructure.
Technical Team Lead - Content Security at Valuepoint Systems
F5 Rules for AWS WAF is not very costly and is reasonable, with enterprises being able to afford the cost.
Cloud DevOps Engineer at a tech vendor with 10,001+ employees
 

Valuable Features

F5 Advanced WAF offers robust application security with bot protection, DDoS mitigation, and customizable threat detection for improved efficiency.
F5 Rules for AWS WAF offers advanced threat mitigation, customizable security, and seamless AWS integration for enhanced protection and efficiency.
The Advanced Attack Signature database is very strong and regularly updated, effectively blocking SQL injections, cross-site scripting, command injections, and file inclusion attacks while allowing selective enabling or disabling of signatures to avoid blocking genuine traffic.
Cyber Security Consultant at HR Software Solution
The perpetual license, despite an initial higher cost, lacks transparency regarding support expiration.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
It contains the logic of both negative and positive security combined.
CEO at CyberApp
Now, looking at these rule sets, they ensure that our origin or our application content and code, as well as the application itself or its API, are secure enough, always.
Associate Vice President at Hitachi Systems India Private Limited
F5 Rules for AWS WAF rule sets are highly effective in detecting and mitigating OWASP Top 10 attacks such as SQL injection, XSS, and command injection, which significantly strengthens application security.
Technical Team Lead - Content Security at Valuepoint Systems
Using F5 Rules for AWS WAF has positively impacted my organization by making our AI-integrated application more secure from bot attacks, restricted size bodies, automated rate blocking for DDoS, and managed rules, especially as security has become a common concern across the industry.
Cloud DevOps Engineer at a tech vendor with 10,001+ employees
 

Categories and Ranking

F5 Advanced WAF
Ranking in Web Application Firewall (WAF)
3rd
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
72
Ranking in other categories
No ranking in other categories
F5 Rules for AWS WAF
Ranking in Web Application Firewall (WAF)
14th
Average Rating
8.4
Reviews Sentiment
7.8
Number of Reviews
10
Ranking in other categories
Business Rules Management (3rd)
 

Mindshare comparison

As of August 2026, in the Web Application Firewall (WAF) category, the mindshare of F5 Advanced WAF is 3.9%, down from 8.2% compared to the previous year. The mindshare of F5 Rules for AWS WAF is 0.4%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
F5 Advanced WAF3.9%
F5 Rules for AWS WAF0.4%
Other95.7%
Web Application Firewall (WAF)
 

Featured Reviews

reviewer2797602 - PeerSpot reviewer
Senior Security Systems Engineer at a tech services company with 11-50 employees
Granular security policies have protected critical applications and ensure safe user and admin access
Improvements could be made regarding the log information from the backend CLI. There are enhancements needed; if a request gets blocked on the TCP layer, there should be traces or data to verify which source generated these requests, including the source and port information for initiation. These data are missing from F5 Advanced WAF. Besides that, another improvement could be refining the bot detection to minimize false positives; it should be able to verify more granularly between legitimate and non-legitimate clients. Overall, I find everything else good. A wish list feature I have is for the Technical Assistance Center (TAC) to respond more promptly. Their response time needs improvement; while they do not take excessive time, it can be enhanced, especially given it is a security product.
Vibin Thomas - PeerSpot reviewer
Technical Team Lead - Content Security at Valuepoint Systems
Advanced protection has reduced web attacks and improves application performance and operations
One area where F5 Rules for AWS WAF can be improved is in simplifying the tuning process. While F5 Rules for AWS WAF is powerful, fine-tuning it to match specific application behavior can sometimes be complex and time-consuming, especially for teams without deep WAF expertise. Another improvement could be enhanced visibility and reporting. Although AWS WAF provides logs, having more intuitive and built-in dashboards or clearer categorization of rule triggers would make it easier to quickly identify and analyze attack patterns. Additionally, expanding the capabilities around bot management and behavior analysis would be beneficial compared to some dedicated bot management solutions. More advanced detection techniques could further strengthen the protection against sophisticated automated traffic. Finally, providing more predefined templates or best practice recommendations for different application types would help speed up the deployment and reduce the initial configuration effort.
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
9%
Comms Service Provider
9%
Government
8%
Construction Company
33%
Comms Service Provider
16%
Computer Software Company
6%
Energy/Utilities Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise16
Large Enterprise31
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for F5 Advanced WAF?
F5 Advanced WAF is somewhat costly compared to other vendors, but it is worth the investment due to the stability it provides to the environment and infrastructure.
What needs improvement with F5 Advanced WAF?
Improvements could be made regarding the log information from the backend CLI. There are enhancements needed; if a request gets blocked on the TCP layer, there should be traces or data to verify wh...
What is your primary use case for F5 Advanced WAF?
My main use case for F5 Advanced WAF is to protect external and internal applications from cyber attacks and to prevent malicious payloads and malicious data from reaching servers. Even if maliciou...
What is your experience regarding pricing and costs for F5 Rules for AWS WAF?
My experience with the pricing, setup cost, and licensing for F5 Rules for AWS WAF was good with purchasing and the setup cost.
What needs improvement with F5 Rules for AWS WAF?
The additional costs for F5 Rules for AWS WAF are quite high, as F5 managed rules require a separate subscription on top of the standard AWS WAF charges; it would be great if it would be pre-integr...
What is your primary use case for F5 Rules for AWS WAF?
F5 Rules for AWS WAF manages the security rule set by applying the rules and setting the block directly in AWS WAF to provide advanced protection against web application attacks, bots, threats, and...
 

Overview

 

Sample Customers

MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
Information Not Available
Find out what your peers are saying about F5 Advanced WAF vs. F5 Rules for AWS WAF and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.