No more typing reviews! Try our Samantha, our new voice AI agent.

F5 Advanced WAF vs NGINX App Protect comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.6
F5 Advanced WAF offers ROI by saving time, reducing costs, enhancing security, and ensuring compliance for businesses.
Sentiment score
5.8
NGINX App Protect offers notable ROI, enhancing security, integrating with CICD pipelines, and providing compliance and time-saving benefits.
Time savings in daily operations come from the automatic learning and signature update reducing the need for constant manual rule management, allowing the security and network teams to spend significantly less time handling false positive application-related escalations.
Cyber Security Consultant at HR Software Solution
Subscription models offer clearer ROI due to a more competitive pricing scheme.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
The amount of attacks it protects against is immense, more than F5 Advanced WAF itself costs.
Security Solutions Architect at a consultancy with 1-10 employees
 

Customer Service

Sentiment score
6.9
F5 Advanced WAF's customer service is highly professional and knowledgeable, but response speed and availability need improvement for some users.
Sentiment score
5.8
NGINX App Protect's support is reliable and helpful, though costs and occasional delays affect accessibility for some users.
Both response time and availability need to be improved.
Security Analyst at IBM
While they resolve issues well, the time taken for responses to non-critical issues should be shorter.
Senior Security Systems Engineer at a tech services company with 11-50 employees
If there is a bug, the support is usually understanding and resolves issues.
CEO at CyberApp
They were quick and efficient when we had issues.
Project Manager at a comms service provider with 10,001+ employees
I would rate the customer support a 9 on a scale of 1 to 10.
Tech Lead at a tech vendor with 51-200 employees
 

Scalability Issues

Sentiment score
7.5
F5 Advanced WAF is scalable, efficiently handling large traffic, praised for flexibility, and easily upgraded to meet user needs.
Sentiment score
6.1
NGINX App Protect offers strong scalability praised by users, despite challenges with policy limits and deployment delays.
If you need to scale up, such as moving from a lower model to a higher one, the configuration from the lower model can be migrated easily without issues.
Senior Security Systems Engineer at a tech services company with 11-50 employees
I can run it in HA mode or even divide the traffic volume to the number of instances that I have based on their resource sizing.
Security Solutions Architect at a consultancy with 1-10 employees
The scalability of NGINX App Protect is good and open source at its best.
Tech Lead at a tech vendor with 51-200 employees
 

Stability Issues

Sentiment score
8.4
F5 Advanced WAF is highly reliable and stable, rarely facing downtime, with user ratings of 8-10 for performance.
Sentiment score
8.4
Users praise NGINX App Protect's stability and reliability, outperforming competitors, handling high traffic efficiently, and receiving high ratings.
F5 Advanced WAF has been very reliable and consistent for us; in our on-premise enterprise setup, it has been stable and predictable in day-to-day operations without any unexpected crashes or WAF-related downtime in production.
Cyber Security Consultant at HR Software Solution
F5 Advanced WAF is stable, and there is no doubt it is one of the best WAFs in the market.
Senior Security Systems Engineer at a tech services company with 11-50 employees
F5 Advanced WAF is pretty stable.
Security Solutions Architect at a consultancy with 1-10 employees
It is a quality solution, and I would rate its stability as eight out of ten.
IT Architect at a financial services firm with 10,001+ employees
 

Room For Improvement

F5 Advanced WAF needs improvements in pricing, usability, API protection, bot detection, deployment, and advanced integration features.
NGINX App Protect needs enhancements in automation, UI, security, performance, and support, with complex setup and integration issues.
Deployment training for F5 Advanced WAF is lacking and restricts growth by being inaccessible and costly for partners.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
Overall, these are not blockers, merely enhancement opportunities, and once tuned, F5 Advanced WAF is very stable and reliable; improving usability, reporting, and onboarding would make it even more effective for larger environments.
Cyber Security Consultant at HR Software Solution
Another improvement could be refining the bot detection to minimize false positives; it should be able to verify more granularly between legitimate and non-legitimate clients.
Senior Security Systems Engineer at a tech services company with 11-50 employees
There was more information from F5 regarding hardware requirements and specifications to deploy the service.
IT Architect at a financial services firm with 10,001+ employees
For now, I think NGINX App Protect is good, but maybe I would like to see the logging feature added.
Dev Ops Engineer at BARQ Systems
The GUI and web GUI configuration could be improved to be easier to manage and use.
Dev Ops Engineer at adesso AG
 

Setup Cost

Enterprise buyers find F5 Advanced WAF's pricing high but justified in banking, with complex licensing and higher setup costs.
NGINX App Protect offers reasonable annual pricing, ranging from $25,000 to $400,000, aligning with industry-leading solutions.
Licensing is capacity-driven, so you need careful planning based on traffic volume and use cases, and adding features such as Bot Protection impacts costs; once licensing is clear and sized correctly, there are no surprises.
Cyber Security Consultant at HR Software Solution
Subscription models have competitive pricing, while perpetual licenses involve an upfront higher cost.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
The price is affordable and satisfactory.
CEO at CyberApp
 

Valuable Features

F5 Advanced WAF offers robust application security with bot protection, DDoS mitigation, and customizable threat detection for improved efficiency.
NGINX App Protect provides comprehensive security features including automation, real-time threat detection, DDoS protection, and flexible deployment options.
The Advanced Attack Signature database is very strong and regularly updated, effectively blocking SQL injections, cross-site scripting, command injections, and file inclusion attacks while allowing selective enabling or disabling of signatures to avoid blocking genuine traffic.
Cyber Security Consultant at HR Software Solution
The perpetual license, despite an initial higher cost, lacks transparency regarding support expiration.
Global Channel Alliances Lead at a tech vendor with 10,001+ employees
It contains the logic of both negative and positive security combined.
CEO at CyberApp
The most valuable feature is the ability to operate in a DevOps environment and to be configured through API and pipeline by the developers themselves.
IT Architect at a financial services firm with 10,001+ employees
Some threats like injection and running scripts, SQL injections, these all get stopped and rejected by the server.
Dev Ops Engineer at BARQ Systems
Detecting bots and blocking IPs have proven effective for securing applications.
Project Manager at a comms service provider with 10,001+ employees
 

Categories and Ranking

F5 Advanced WAF
Ranking in Web Application Firewall (WAF)
3rd
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
72
Ranking in other categories
No ranking in other categories
NGINX App Protect
Ranking in Web Application Firewall (WAF)
19th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
27
Ranking in other categories
Container Security (28th), API Security (9th)
 

Mindshare comparison

As of August 2026, in the Web Application Firewall (WAF) category, the mindshare of F5 Advanced WAF is 3.9%, down from 8.2% compared to the previous year. The mindshare of NGINX App Protect is 2.1%, up from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
F5 Advanced WAF3.9%
NGINX App Protect2.1%
Other94.0%
Web Application Firewall (WAF)
 

Featured Reviews

reviewer2797602 - PeerSpot reviewer
Senior Security Systems Engineer at a tech services company with 11-50 employees
Granular security policies have protected critical applications and ensure safe user and admin access
Improvements could be made regarding the log information from the backend CLI. There are enhancements needed; if a request gets blocked on the TCP layer, there should be traces or data to verify which source generated these requests, including the source and port information for initiation. These data are missing from F5 Advanced WAF. Besides that, another improvement could be refining the bot detection to minimize false positives; it should be able to verify more granularly between legitimate and non-legitimate clients. Overall, I find everything else good. A wish list feature I have is for the Technical Assistance Center (TAC) to respond more promptly. Their response time needs improvement; while they do not take excessive time, it can be enhanced, especially given it is a security product.
Valerio Guaglianone - PeerSpot reviewer
Dev Ops Engineer at adesso AG
Long-term web protection has supported reliable traffic management but needs a simpler interface
NGINX App Protect is a good product. I have used both versions from F5 -also the free version- (I mean the NGINX/NGINX One/App Protect free trial period), and I think it is a good product. It's stable, affordable, and easy to manage. NGINX App Protect is a comprehensive security solution that combines advanced WAF, DoS protection, API security, and DevSecOps automation in a lightweight, scalable package ideal for modern cloud-native architectures. The adaptive machine learning capabilities are truly commendable, as the solution can establish traffic baselines and detect anomalies in real time. It automatically adjusts security policies, minimizing the need for manual intervention and reducing false positives. Additionally, it supports scalable deployment across diverse environments, including on-premises, cloud, Kubernetes, and containers, offering both flexibility and scalability I have experience with the web server, F5 load balancer, and similar products provided by Ergon, for eg. the web application firewall and the Microgateway for K8S. I'm also familiar with F5 BIG-IP products.
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
910,564 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Comms Service Provider
9%
Computer Software Company
9%
Government
8%
Comms Service Provider
12%
Financial Services Firm
11%
Construction Company
8%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise16
Large Enterprise31
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise7
Large Enterprise14
 

Questions from the Community

What is your experience regarding pricing and costs for F5 Advanced WAF?
F5 Advanced WAF is somewhat costly compared to other vendors, but it is worth the investment due to the stability it provides to the environment and infrastructure.
What needs improvement with F5 Advanced WAF?
Improvements could be made regarding the log information from the backend CLI. There are enhancements needed; if a request gets blocked on the TCP layer, there should be traces or data to verify wh...
What is your primary use case for F5 Advanced WAF?
My main use case for F5 Advanced WAF is to protect external and internal applications from cyber attacks and to prevent malicious payloads and malicious data from reaching servers. Even if maliciou...
What is your experience regarding pricing and costs for NGINX App Protect?
I will not be able to answer about my experience with pricing, setup cost, and licensing for NGINX App Protect, as something different handles that in my team.
What needs improvement with NGINX App Protect?
I did not face any issues with NGINX App Protect. The only issue that we had is that someone was trying to install the POC for the customer, and he by mistake installed the Instance Manager on the ...
What is your primary use case for NGINX App Protect?
I have been dealing with NGINX App Protect and the WAF policy. I usually recommend NGINX App Protect for banking and telecom, and for anyone that has their own database or servers that they host we...
 

Also Known As

No data available
NGINX WAF, NGINX Web Application Firewall
 

Overview

 

Sample Customers

MAXIMUS, Vivo, American Systems, Bangladesh Post Office, City Bank
Information Not Available
Find out what your peers are saying about F5 Advanced WAF vs. NGINX App Protect and other solutions. Updated: August 2026.
910,564 professionals have used our research since 2012.