No more typing reviews! Try our Samantha, our new voice AI agent.

F5 BIG-IP Advanced Firewall Manager (AFM) vs Neustar UltraDDoS [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
79
Ranking in other categories
CDN (1st), WAN Optimization (4th), Web Application Firewall (WAF) (9th), Distributed Denial-of-Service (DDoS) Protection (2nd), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (14th)
F5 BIG-IP Advanced Firewall...
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
26
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (12th)
Neustar UltraDDoS [EOL]
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Featured Reviews

M.A. Faisal - PeerSpot reviewer
General Manager at bKash Limited
Advanced protection has secured critical web workloads and provides clear traffic visibility
From a security perspective, there remains a security loophole, as some browsers in the market can bypass the Turnstile solution, which requires approximately 40 seconds to do so. From a performance perspective, this is acceptable. We also tried Google reCAPTCHA, and that can also be bypassed. From a security perspective, I would say neither solution is completely secured. Regarding uptime, we have faced a couple of incidents due to Cloudflare in recent years, so I cannot say we receive 100% uptime for our region. We sometimes face challenges, including downtime and other issues. As a result, we are not receiving 100% uptime from Cloudflare's solution. Since most of our customers are in this region, we need alternatives. We need something more competitive than Cloudflare. Unfortunately, in Bangladesh, Cloudflare has three points of presence already, and we cannot find any other solution provider in Bangladesh as an alternative, which presents another challenge. Competitor solutions have more attack signatures, which ensure better security compared to Cloudflare's predefined configurations. Customers do not have options to modify any configuration parameters in Cloudflare, whereas other competitor solutions, such as F5 Distributed Cloud, allow customers to tune configurations according to their requirements. Cloudflare could improve in this area. Additionally, regarding visibility, Cloudflare has static visibility, but they could adopt dynamic graph features for their customers.
Nawapol Boonlerd - PeerSpot reviewer
Information Security Engineer at BigFish Enterprise Ltd.
Comprehensive network protection has mitigated DDoS risks and supports secure on-prem operations
Currently, there are no weaknesses or disadvantages in F5 BIG-IP Advanced Firewall Manager (AFM) that I have identified. It is a little bit expensive, and I think about additional features they could have in the future to make it even better. For example, I have thoughts about the price. Currently, it does not integrate, and I would assess the importance of F5 BIG-IP Advanced Firewall Manager (AFM)'s integration with cloud services as significant. Currently, I use only one site, and I cannot tell you about F5 BIG-IP Advanced Firewall Manager (AFM) centralized security policies. I have not used F5 BIG-IP Advanced Firewall Manager (AFM)'s Threat Intelligence capabilities. I have not used their dynamic traffic shaping feature. So far, the only thing that could be improved is the pricing of F5 BIG-IP Advanced Firewall Manager (AFM).
JT
Manager Strategic Planning at Endurance International Group
Identifies a request that comes up multiple times, block holds that particular IP, and lets the genuine traffic pass through
Genuine traffic coming in is still getting better. While I understand that it's some sort of algorithm that is written in this scale, that algorithm can be a little bit better because sometimes while we are doing DDoS mitigation, genuine traffic does get blocked. While it is one of the greatest features it can still be improved. I would like to see a dashboard that shows you the data that is transferred from which end. It's where people start looking at abuse management. People keep questioning when the mitigation is on what service it is and how many GBs are passing through. An end user dashboard that will help you identify all of these questions and that can be visible in your entire organization is something that would make sense.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Centralized, full-featured DNS."
"It is easier to configure and develop documentation to see how we have configured firewalls."
"DDoS protection is this product’s most valuable feature."
"The UI is good."
"The API gives us the ability to remote control our DNS settings."
"Generally, I am satisfied with this product."
"The most valuable feature of Cloudflare DNS is security."
"Cloudflare improves performance on my websites and is a great partner for cloud infrastructure for anyone who wants to use the security service and other features."
"The solution provides behavioral analysis via AI to detect malicious traffic."
"I find the signature base is very helpful to see traffic, to see the increase in web traffic."
"The product is stable, scalable, and easy to use."
"The most valuable feature of this solution is the blocking of IPs and F5 has many advantages."
"The decryption is great."
"We use the solution for load balancing and WAF (web application firewall)."
"The web application firewall has been very helpful. We purchased F5 when we were migrating our applications to the cloud."
"F5 BIG-IP Advanced Firewall Manager's most valuable feature is load balance. It is readily available and uncomplicated."
"In the DDoS it's difficult to validate what is a genuine request from an end user. We've started being able to do that with the logistics that they have set up. With the protection that they have provided, they are able to identify what is valid and what is not valid. We see that a person who is getting DDoS Neustar service is able to block that particular user. However, while they are doing that it doesn't affect other customers on the server."
"Scalability is awesome, and they have grown two folds or three folds since we started using them, with no concerns even as we protect close to 60,000 hosted sites for business and e-commerce customers."
 

Cons

"There should be a specific price list for enterprise-level customers."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"With CDN loads, sometimes we get an error that the host server is unavailable when the connection between CloudFlare and the server timed out."
"Integration involving API with other products could be more user-friendly."
"Cloudflare does not have an on-premise solution. If they had different approaches they could be better suited to accommodate more customers, such as on-premise and hybrid deployments. For example, hybrid deployments would be useful where you could move the traffic from the enterprise to the cloud."
"However, what I still fail to understand is that why aren't they offering domains themselves."
"For the free and Pro plans, Cloudflare could use a simple bot to provide information to users. This would improve support, especially for less advanced users who utilize the free components."
"It should be easier to collect the logs with companies like Sumo. However, based on my discussions with the salespeople, I understand that's how they make their money. With the enterprise product, they want people doing those kinds of enterprise features to do the logging. They want them to pay a lot of money, and that's where I have an issue with them. That should be a default. You should be able to get the log no matter what. The logging should be universal."
"There is room for improvement in Advanced Firewall Manager's dashboard statistics, especially during attacks."
"NGINX, which F5 purchased, has room for improvement in its features, particularly its load balancing or application load balancing features."
"The appliance and features could be enhanced further, especially in terms of security. Some features like the WAF firewall may seem expensive compared to the standard license, so there could be room for adjusting the pricing."
"The interface for applying the features could use improvement. There are too many buttons."
"F5 BIG-IP AFM can improve the reporting interface in relation to advanced troubleshooting depending on CLI. They should have enhanced troubleshooting with the use of GUI."
"F5 BIG-IP Advanced Firewall Manager's pricing and technical support services need improvement."
"For configuring the firewall, every single vendor on the planet has pretty much the same logic when it comes to firewalls, and F5 has a completely different approach and completely different behavior."
"Apart from the price, I feel no other areas need improvement."
"I would like to see a dashboard that shows you the data that is transferred from which end. It's where people start looking at abuse management. People keep questioning when the mitigation is on what service it is and how many GBs are passing through. An end user dashboard that will help you identify all of these questions and that can be visible in your entire organization is something that would make sense."
"Genuine traffic coming in is still getting better because sometimes while we are doing DDoS mitigation, genuine traffic does get blocked."
 

Pricing and Cost Advice

"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"We don't have any issues with the price."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"We are using the free tier of the solution."
"A free version of the solution is available."
"We are using the free version."
"The price is reasonable."
"F5 BIG-IP AFM is an affordable solution. There were not any additional fees other than the standard licensing."
"As per pricing, I would not say cheap, but little higher than cheap, but not very expensive. So you can say kind of value for money solutions."
"It's very expensive, and you pay extra for the models."
"We need to pay a yearly licensing fee for the solution."
"The price of F5 BIG-IP AFM is a little more expensive than other firewalls on the market."
"The solution is slightly on the higher priced side."
"F5 BIG-IP Advanced Firewall Manager (AFM) is an expensive solution. They are one of the best in the market, but the price could be cheaper."
"F5 BIG-IP Advanced Firewall Manager is not an expensive solution."
Information not available
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
908,877 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Computer Software Company
8%
Financial Services Firm
13%
Construction Company
11%
Comms Service Provider
8%
Engineering Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise11
Large Enterprise26
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise5
Large Enterprise14
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What is your experience regarding pricing and costs for Cloudflare DNS?
The pricing, setup cost, and licensing for Cloudflare are a bit on the higher side overall.
What is your experience regarding pricing and costs for F5 Advanced Firewall Manager?
The standard license is reasonably priced, but additional features like the WAF can be more expensive. There are plen...
What needs improvement with F5 Advanced Firewall Manager?
Currently, there are no weaknesses or disadvantages in F5 BIG-IP Advanced Firewall Manager (AFM) that I have identifi...
What is your primary use case for F5 Advanced Firewall Manager?
I am starting to learn and working with F5 team to conduct a proof of concept, and I do have experience with F5 Rules...
Ask a question
Earn 20 points
 

Also Known As

Cloudflare DNS
F5 AFM, F5 Advanced Firewall Manager
Neustar UltraDDoS, UltraDDoS
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office
Choxi
Find out what your peers are saying about Radware, Cloudflare, NETSCOUT and others in Distributed Denial-of-Service (DDoS) Protection. Updated: August 2026.
908,877 professionals have used our research since 2012.