Try our new research platform with insights from 80,000+ expert users

F5 BIG-IP Advanced Firewall Manager (AFM) vs Nexusguard DDoS Protection comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Ranking in Distributed Denial-of-Service (DDoS) Protection
1st
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
75
Ranking in other categories
CDN (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
F5 BIG-IP Advanced Firewall...
Ranking in Distributed Denial-of-Service (DDoS) Protection
10th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
25
Ranking in other categories
No ranking in other categories
Nexusguard DDoS Protection
Ranking in Distributed Denial-of-Service (DDoS) Protection
12th
Average Rating
9.4
Reviews Sentiment
7.7
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of Cloudflare is 19.6%, up from 19.2% compared to the previous year. The mindshare of F5 BIG-IP Advanced Firewall Manager (AFM) is 1.4%, up from 1.0% compared to the previous year. The mindshare of Nexusguard DDoS Protection is 1.8%, down from 2.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Distributed Denial-of-Service (DDoS) Protection
 

Featured Reviews

Spencer Malmad - PeerSpot reviewer
It's easy to set up because you point the DNS to it, and it's working in under 15 minutes
Cloudflare is highly scalable. Cloudflare is a system with a web portal that the end users like me see. It's a console where we can adjust the DNS, caching, and security features all in that console. Cloudflare owns thousands of servers across the world that cache the data. It's a powerful solution. When clients sign up for Cloudflare, they're getting this monster content delivery network, security, and a web application firewall in one. It's all rolled into one, and it's massive. Unless you have your website hosted on a massive hosting provider, there's no way that you can deliver the amount of data that Cloudflare can provide to the end users. If you have static content, there's no way that you can ever match what Cloudflare can do. Obviously, there are competitors to Cloudflare that do the same, but I'm saying other types of solutions. Let's say you go with F5. Great, that's on-prem. That's in your colo. You can't deliver as much data to the internet as you can with a CDN. You don't have to spend $20,000 on a net scaler, F5, or whatever Cisco's selling now. You don't have to buy that. You pay them $50 a month or $150 a month. It's totally worth it because even in five years, you'll never get the performance value, not just the actual ROI. You have to consider how much throughput you can get with Cloudflare.
Richard Polyak - PeerSpot reviewer
Straightforward setup with very good granularity and performance
Our company uses the solution as a data center firewall.  It is hard to determine all users within our infrastructure. It depends on systems we put behind the solution. Its internal but also a data center firewall. Sometimes, there are hooks from the solution to our external infrastructure or…
ShashikaKodikara - PeerSpot reviewer
A solution requiring straightforward maintenance while remaining cost-effective compared to its competitors in the market
I am not in a position to speak about the areas where the solution needed improvement because I resigned during the implementation phase. At that time, the implementation was ongoing, and everything seemed to be going well. Using the solution, our team managed to transfer a couple of routers through a few areas. However, I believe the migration is still ongoing. Nonetheless, the first phase of the implementation was successful before my departure. There was a certain level of performance degradation in the solution, which I don't know if it can be tuned. This is because I was working for a short period on the solution. In my experience, it is an area that can be improved while also considering the stability and scalability aspects of the solution. If one wants to scale up, then one needs to change their plan. However, the thing is, one can always go for the larger scale based on one's anticipation of future traffic.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a fast and secure DNS."
"Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications."
"Centralized, full-featured DNS."
"The solution is stable, and the DNS servers are simple to use."
"Its ease of integration with Office 365 and the fact that it's a good product compared to what I had before"
"The most valuable feature of Cloudflare DNS is security."
"The solution automatically detects and responds to certain types of traffic based on geolocation."
"New and innovative way to protect the client's data."
"It blocks various attacks and mitigates disasters from occurring."
"The decryption is great."
"The product’s most valuable features are LTM and WAF."
"I find the signature base is very helpful to see traffic"
"The most valuable feature of F5 BIG-IP AFM is all of my workers enjoy using it."
"Its performance and ease of use are valuable."
"F5 BIG-IP Advanced Firewall Manager's most valuable feature is load balance. It is readily available and uncomplicated."
"This product excells in every aspect from installation and the interface to providing superior network security."
"Cloud Diversion is another good feature packaged with the whole solution. When attack traffic is detected, Cloud Diversion triggers to automatically route our prefix to Nexusguard’s scrubbing center, ensuring that all attack traffic is dropped in the shortest time possible."
"Filters can be customized depending on the characteristics of the attack traffic. This feature has made it easier for Nexusguard's SOC team to further isolate any specific attack that can't be blocked by pre-configured mitigation."
"The managed service allows us to confidently rely on Nexusguard’s professional team to take relevant actions as and when required to make sure DDoS attacks are successfully mitigated, ensuring 100% uptime of our service."
"Based on the support received for implementation, I rate the solution's technical support a nine out of ten."
"The support team was helpful."
 

Cons

"The solution could work at being less expensive. It costs a lot to use it."
"There should be a specific price list for enterprise-level customers."
"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
"There are some issues with the CDN services."
"The product support needs to be accessible from more places, a wider area of coverage."
"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us."
"There might be helpful if there was some web application firewall feature."
"The solution’s initial setup is not easy."
"There should be simplified and better integration with BIG-IQ."
"Some spam can go by the firewall."
"The solution's UI could be improved."
"The appliance and features could be enhanced further, especially in terms of security. Some features like the WAF firewall may seem expensive compared to the standard license, so there could be room for adjusting the pricing."
"This would be absolutely the best network security solution if the price were not so high."
"We needed to protect the database but the solution didn't offer a certain feature to do so."
"F5 BIG-IP AFM can improve the reporting interface in relation to advanced troubleshooting depending on CLI. They should have enhanced troubleshooting with the use of GUI."
"One thing that we would like to improve from them is to provide more training to SOC team for them to have a deep understanding of the solution so that they would always be ready to answer anything without the need to escalate queries to senior personnel."
"One of the features that should be added to the next release is report generation. Currently, reports can be downloaded every month and are only available at the beginning of each month. It would be nice to generate the reports based on specific dates that we prefer and not have to wait until the next month for the current month’s report."
"There was a certain level of performance degradation in the solution, which I don't know if it can be tuned...In my experience, it is an area that can be improved while also considering the stability and scalability aspects of the solution."
"The mitigation scope of Origin Protection is not fully efficient as there could be delays in activating the countermeasures."
"The solution must provide features for the post-processing of the traffic type and the traffic quality."
 

Pricing and Cost Advice

"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"A free version of the solution is available."
"The price is reasonable."
"There are no additional costs beyond the standard licensing fees."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"F5 BIG-IP AFM is an affordable solution. There were not any additional fees other than the standard licensing."
"We need to pay a yearly licensing fee for the solution."
"We have purchased a five-year licensing package for the product."
"The solution is slightly on the higher priced side."
"As per pricing, I would not say cheap, but little higher than cheap, but not very expensive. So you can say kind of value for money solutions."
"It is somewhat on the expensive side although it is worth the additional cost."
"F5 BIG-IP Advanced Firewall Manager (AFM) is an expensive solution. They are one of the best in the market, but the price could be cheaper."
"It's very expensive, and you pay extra for the models."
"On a scale of one to ten, where one represents a cheap option, and ten represents an expensive option, I would rate the solution a seven in terms of cost."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
851,471 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
16%
Computer Software Company
14%
Comms Service Provider
9%
Financial Services Firm
8%
Financial Services Firm
20%
Computer Software Company
18%
Government
9%
Comms Service Provider
8%
Comms Service Provider
31%
Media Company
11%
Computer Software Company
9%
Educational Organization
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What is your experience regarding pricing and costs for F5 Advanced Firewall Manager?
The standard license is reasonably priced, but additional features like the WAF can be more expensive. There are plen...
What needs improvement with F5 Advanced Firewall Manager?
The appliance and features could be enhanced further, especially in terms of security. Some features like the WAF ( /...
What needs improvement with Nexusguard?
The solution must provide features for the post-processing of the traffic type and the traffic quality.
What advice do you have for others considering Nexusguard DDoS Protection?
Our traffic is not that high. There haven’t been any huge attacks that the solution has solved or protected us from. ...
 

Also Known As

Cloudflare DNS
F5 AFM, F5 Advanced Firewall Manager
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office
21st Century Technologies, Netpluz, REDtone, SNOC, StarHub, aamra
Find out what your peers are saying about F5 BIG-IP Advanced Firewall Manager (AFM) vs. Nexusguard DDoS Protection and other solutions. Updated: April 2025.
851,471 professionals have used our research since 2012.