

Portnox and F5 BIG-IP Access Policy Manager (APM) compete in network access control. Portnox appears to have the upper hand in cloud-native environments due to its agentless capabilities and ease of integration, while F5 BIG-IP APM is preferred for complex authentication needs.
Features: Portnox offers agentless network visibility, automated compliance checks, and seamless cloud integration, enhancing cloud-native environments. F5 BIG-IP APM supports SSL VPNs, multi-factor authentication, and integrates with diverse authentication protocols, making it ideal for enterprises with advanced security needs.
Room for Improvement: Portnox could benefit from better third-party device integration and scalability improvements. Enhancing partner enablement and firewall integration would also increase its market appeal. F5 BIG-IP APM needs improved cloud service integration, a more intuitive interface, and better automation features.
Ease of Deployment and Customer Service: Portnox's cloud-native design simplifies deployment, making it suitable for public and hybrid cloud settings, with highly responsive support. F5 BIG-IP APM offers robust support and reliability but could streamline its complex deployment process for easier configuration.
Pricing and ROI: Portnox provides a flexible cloud-native licensing model, reducing infrastructure costs and offering favorable ROI. F5 BIG-IP APM is generally more expensive, but its comprehensive feature set supports robust on-premises solutions, justifying the higher cost for businesses with complex environments.
If I compare this to an on-premises environment using Cisco ISE or Aruba ClearPass, it would require phenomenally large teams for infrastructure management.
If you were moving from a traditional on-premise NAC that was 100% managed by the IT department, there would be great savings in going to a cloud-based NAC with Portnox.
By automating the device containment and remediation processes, we save countless hours weekly.
Even if they respond, they don't update me with the process or what's going on.
Most of the technical support is managed in-house due to our extensive experience with F5 products.
F5 technical support is responsive and helpful.
The main area needing improvement is the technical knowledge of support staff.
For very high severity issues where the entire office is non-functional, response time is within 30 minutes.
In terms of support, it is usually quite impressive. I usually get support in a matter of minutes or seconds, depending on the priority of the ticket.
The product's flexibility and company culture contribute to resolving these challenges.
I would rate the scalability of F5 BIG-IP Access Policy Manager (APM) between seven and eight.
We have never had any challenge based on a customer who has 1,000 devices versus a customer who has 30,000 devices; the feel is the same.
Its infrastructure scales automatically in the background, eliminating concerns about capacity or backend upgrades.
It has a centralized cloud-based architecture, so we do not have to worry about other considerations such as local infrastructure or purchasing additional equipment.
On a scale from one to ten for stability, I would rate F5 BIG-IP Access Policy Manager (APM) a ten.
Sometimes, the logs are not quite informational or easy to understand.
The product itself is available and its uptime is 100%.
In the four years that I used Portnox, if it crashed or the server crashed, that would not have been more than once.
If there is a version one and another version, the communication between the organization using it and Portnox should be firm so they can coordinate effectively.
If I could copy and paste objects instead of picking and configuring them from scratch each time, it would be great.
The main improvement needed for F5 BIG-IP Access Policy Manager (APM) is to integrate into the cloud-delivered services from F5.
The ability to run the Anycast feature would be valuable, as the current solution only operates on-premises.
Ideally, we should be able to search for any MAC address in the database, regardless of its authentication status, to see all its associated groups and potential conflicts.
When I reach the technical support, they give solutions that do not help me much, so I try to search the internet for other users' experiences to find solutions.
I would definitely request a UI refresh that makes the dashboard more modern and surfaces critical logs so they are easier to access in a pinch.
F5 products are more expensive than other solutions but are valued for their quality and reliability.
If you compare Portnox with all other well-known standard products, it is the cheapest.
The pricing is a bit high, possibly due to the cloud features and running instances across regions like the US, Asia, and Europe.
You are charged according to the number of users.
APM is quite flexible for customers to use, providing secure remote access through various host-checking conditions for both machines and users.
It provides robust security and offers integration with multi-factor authentication systems, which is crucial for an organization's security policy.
A lot of features are useful to me, including mostly the authentication, SAML, or SSO, with no sign-on.
It's notable how Portnox has improved operational efficiency.
It is a very robust application because three teams use that part: the network team, the security team, and the support people.
It is possible to find the MAC address in the switch, but in Portnox, it is very useful to see the status of those ports, and that increases our security.
| Product | Mindshare (%) |
|---|---|
| Portnox | 8.1% |
| F5 BIG-IP Access Policy Manager (APM) | 2.1% |
| Other | 89.8% |

| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 2 |
| Large Enterprise | 9 |
| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 10 |
| Large Enterprise | 15 |
F5 BIG-IP Access Policy Manager (APM) enhances access management by offering remote application access through SSL VPN, secure access verification, and login capabilities. Its user-friendly interface and robust security ensure efficient scalability and performance.
F5 BIG-IP APM serves enterprises by integrating multiple authentication protocols and supporting remote access via SSL VPN for secure application and network connections. Known for its strong performance and reliable scalability, APM allows custom policy management, facilitating load balancing and enhanced server management through virtual IP creation. It offers a secure bridge for users to connect to private networks while managing access through portals and enforcing compliance checks. Despite its efficient and user-friendly interface, APM has areas needing improvements such as updates for MacOS access, comprehensive reporting features, and simplifying the initial setup process. Better documentation and improved cloud integration are also areas for potential enhancement, alongside more efficient management and automation capabilities. Pricing and integration with other systems could be more competitive, and improvements in support response times would benefit users significantly.
What are the key features of F5 BIG-IP APM?In sectors like finance and healthcare, F5 BIG-IP APM ensures secure access management for sensitive data networks. Retailers utilize it to manage seasonal traffic efficiently with its load balancing and scalability, while educational institutions leverage its robust security and remote access features for faculty and students accessing campus networks remotely. These industries benefit from tailored policy management and comprehensive authentication integration to meet specific security and access needs.
Portnox NAC is a cloud-native network access control solution built for today's hybrid, distributed enterprises. Get real-time visibility into every device on your network, enforce risk-based access policies automatically, and maintain continuous compliance — all without deploying a single on-premises appliance.
----------
About Portnox Security
Portnox is a cloud-native enterprise access control provider that helps organizations secure every identity - human and non-human - across networks, applications, and infrastructure. As identities, devices, and workloads multiply across modern environments, Portnox enables continuous access verification based on identity context, device posture, and risk signals. Its unified platform brings together passwordless authentication, access control, continuous policy enforcement, and automated response through a single policy engine.
Portnox gives security and IT teams real-time visibility into everything connecting and the ability to quickly restrict, quarantine, or revoke non-compliant access. Today, Portnox actively manages more than one million devices worldwide, secures 40 million authentication sessions, and blocks over one million unauthorized access attempts every day. Learn more at portnox.com.
CAPABILITIES:
• Discover and assess users, devices, and identities connecting to corporate resources
• Unify continuous zero trust access control on networks, applications, and infrastructure
• Enforce identity- and context-aware access policies
• Enable secure remote work without complexity
• Deliver passwordless authentication, device posture checks, and continuous access enforcement
• Control administrative access to routers, switches, firewalls, and other network devices
• Improve audit readiness with visibility, access logs, and policy-based compliance controls
BUILT FOR:
Portnox is designed for distributed organizations that need to manage access across employees, contractors, service accounts, managed devices, unmanaged devices, IoT, network infrastructure, SaaS applications, private applications, and AI agents. The platform helps reduce reliance on on-premises appliances, legacy VPNs, and fragmented access tools by centralizing access policy enforcement from a single cloud-native policy engine.
INTEGRATIONS:
Portnox integrates with the tools you already use (including Azure AD / Entra ID, Okta) and works with your existing network appliances, (such as Meraki, Fortinet, and more), and many other identity and network infrastructure tools.
We monitor all Network Access Control (NAC) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.