

NETSCOUT Arbor DDoS Protection & Mitigation and F5 BIG-IP Advanced Firewall Manager (AFM) are significant players in the DDoS protection market. NETSCOUT Arbor seems to have the upper hand for large-scale enterprises due to its robust analytics and ability to handle volumetric attacks, while F5 BIG-IP AFM is favored for easier deployment within an all-in-one security platform.
Features: NETSCOUT Arbor provides specialized DDoS mitigation features like auto-mitigation, advanced threat intelligence, and scalability suited for handling high throughput attacks. F5 BIG-IP AFM combines DDoS protection with load balancing and application security, ensuring unified security features within a single platform ideal for broader network management.
Room for Improvement: Arbor DDoS is seen as complex and pricey for small to medium businesses, with users wanting better third-party integrations and clearer pricing. F5 BIG-IP AFM users notice the potential for better out-of-the-box features, simplified configurations, and more competitive pricing strategies.
Ease of Deployment and Customer Service: NETSCOUT Arbor is flexible, available in hybrid cloud and on-premises models, with generally well-rated support despite regional response variations. F5 BIG-IP AFM offers hybrid cloud deployment focusing on ease of implementation, with commendable customer service known for responsiveness and expertise.
Pricing and ROI: NETSCOUT Arbor is considered a premium, costly solution, justified by its strong protection capabilities and ROI through uptime and saved resources. F5 BIG-IP AFM is also regarded as expensive, but its value is recognized in the comprehensive security it offers. Customizable licensing can lead to longer-term cost efficiencies.
The responses are generally fast and effective.
The customer service is excellent, and I rate it ten out of ten.
I rate the technical support by F5 a ten from one to ten.
The technical support team is very effective in resolving issues.
Although the team is good, they are not fast, and they lack the skills to manage dynamic attackers.
Support for Arbor DDoS deserves a rating of 10 because when there is a problem with implementation, the people I work with are the best.
The solution is highly scalable, allowing me to add or remove nodes and manage traffic without interruption, which is essential for meeting application demands.
This would enhance the knowledge about scalability options available for Arbor DDoS, making it more accessible and useful for users.
They need to purchase boxes monthly to expand their bandwidths, and these new boxes can be added to the installed base very easily.
I find Arbor DDoS to be very scalable.
It is a very stable product.
Arbor DDoS is very stable.
Having advanced technology similar to other vendors like Palo Alto for zero-day attack prevention would be valuable.
The appliance and features could be enhanced further, especially in terms of security.
I would assess the importance of F5 BIG-IP Advanced Firewall Manager (AFM)'s integration with cloud services as significant.
I would like to see an option to decrypt the traffic with Arbor DDoS, as some clients are interested in this, particularly for application layer attacks on port 443.
Enhancing the handshakes between Arbor DDoS and third-party solutions is essential for obtaining better and real-time data that supports any organization’s support team effectively.
I would like to see a roadmap for one or two years, and it is tough to predict what will happen in that timeframe without a clearer description.
The standard license is reasonably priced, but additional features like the WAF can be more expensive.
If considering a one-stop solution that provides load balancing, DNS security, AAA authentication, and firewalling on the same hardware, the cost is reasonable.
The prices for Arbor DDoS are expensive.
For some customers, the cost is expensive, but for enterprises looking to protect their services, it is affordable.
The solution provides behavioral analysis via AI to detect malicious traffic.
The most valuable features for me are stability, availability, and security, along with the ability to manage multiple features to secure my applications.
I think the DDoS features are valuable in F5 BIG-IP Advanced Firewall Manager (AFM), and I recommend it usually for certain types of companies.
That is an attack over 10 gigabit per second, and if an attack enters the telecommunication network, that will be a disaster for their customer, their services, and so on.
We have many updates for the library of different attacks, and they have artificial intelligence that automatically learns the process during different attacks.
You can generate flow spec filters. These filters are transferred through BGP to border routers, which automatically build filters, mitigating the attack even at the network's boundary and preventing it from reaching the TMS.
| Product | Mindshare (%) |
|---|---|
| Arbor DDoS | 5.5% |
| F5 BIG-IP Advanced Firewall Manager (AFM) | 2.0% |
| Other | 92.5% |

| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 5 |
| Large Enterprise | 14 |
| Company Size | Count |
|---|---|
| Small Business | 26 |
| Midsize Enterprise | 14 |
| Large Enterprise | 29 |
F5 BIG-IP Advanced Firewall Manager provides robust network protection with advanced DDoS features and efficient load balancing. Its design prioritizes scalability and ease of management, catering to securing data centers and applications.
F5 BIG-IP Advanced Firewall Manager is a strategic choice for combating cyber threats, including DDoS attacks. With powerful network defenses, integrated WAF, and adaptable capabilities, it efficiently handles web services on-premise and in the cloud. Users value its application-level threat defense with IP blocking and AI-enhanced reporting. Advanced integration with SIEM solutions allows comprehensive monitoring and enhanced threat detection through dynamic resource allocation. However, areas for improvement include better dashboard statistics and pricing adjustments. Enhancing integration with BIG-IQ and intuitive configuration would streamline its operation. Automatic geolocation updates and improved support could address current challenges alongside its high cost and complex initial setup.
What are the standout features?F5 BIG-IP Advanced Firewall Manager is widely used in sectors requiring stringent security measures, such as finance and healthcare. These industries deploy it as a data center and web application firewall to protect against cyber threats, manage client connections, and ensure the security of on-premise and cloud applications.
NETSCOUT Arbor DDoS Protection & Mitigation offers a comprehensive defense system against DDoS attacks, integrating a user-friendly GUI and advanced threat mitigation technologies for enhanced network protection.
NETSCOUT Arbor DDoS Protection & Mitigation is recognized for its ability to manage high-volume DDoS attacks efficiently, providing extensive protection through real-time traffic analysis and automated threat detection. It utilizes advanced techniques such as blackhole and BGP Flowspec for effective threat management. Arbor's cloud signaling allows users to handle and mitigate volumetric attacks while maintaining service availability. Though it provides robust security features, users note potential improvements in auto-mitigation, scalability, and AI integration. Challenges like an outdated graphical interface, hardware stability, and false positives need addressing to further enhance its usability and integration with third-party systems.
What are the key features of NETSCOUT Arbor DDoS Protection & Mitigation?
What benefits should users expect from NETSCOUT Arbor DDoS Protection & Mitigation?
Internet service providers and telecom companies commonly adopt NETSCOUT Arbor DDoS Protection & Mitigation to protect their networks and infrastructure from DDoS attacks. It is also implemented in financial and government sectors to ensure web application security and maintain high availability. NETSCOUT Arbor DDoS Protection & Mitigation supports a hybrid approach, utilizing both on-premise and cloud solutions to manage traffic efficiently and sustain service quality during attacks.
We monitor all Distributed Denial-of-Service (DDoS) Protection reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.