F5 BIG-IP DNS vs Palo Alto Networks DNS Security comparison

You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between F5 BIG-IP DNS and Palo Alto Networks DNS Security based on real PeerSpot user reviews.

Find out what your peers are saying about Cisco, TitanHQ, Infoblox and others in Domain Name System (DNS) Security.
To learn more, read our detailed Domain Name System (DNS) Security Report (Updated: June 2023).
709,643 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
"The most valuable features are the dashboard, visibility, and reporting capabilities. Our customers can see how much Umbrella is protecting their organization. If you don't know what you've got, you can't protect it. With Umbrella, you get the visibility and see the protection that it's providing. We can get PDF reports on a weekly basis of any malware activities and any denial of service or command-and-control-type activities.""The most valuable features for us include tenant lock, content filtering, and DLP solutions, looking for PII and information being exfiltrated.""Any time someone went off the network, the AnyConnect client had the Umbrella agent built in, and it would realize when their computer connected that they were not on the corporate network. It would monitor and they would have pretty close to the same rules that they had to follow when they were in the office, regarding what kind of website browsing they could do.""I like the original functionality, which allows for providing secure DNS services.""The most valuable feature is the ability to block users from reaching places that they should not even try to reach has been a boon.""The primary advantage of Cisco Umbrella is its ability to safeguard our users no matter where they are working from - whether it's in the office or remotely, as per the new work model that has emerged globally. This integrated security solution has simplified our lives by combining all the necessary security measures in one product. Additionally, deploying the product is all it takes to protect all our users.""If it didn't have a single pane of glass, we would not be using it. The single pane of glass gives you a one-stop shop. It's like going to Home Depot. You find all your stuff there. You can see all your threats and your endpoints. It's a very important feature and makes things very simple.""Cisco's technical support is pretty good. When a solution is available, they will find it. On a scale from one to ten with ten being the best, I'd rate Cisco's technical support at nine."

More Cisco Umbrella Pros →

"Stability-wise, I rate the solution a ten out of ten...Stability-wise, I rate the solution a ten out of ten.""The management is very easy.""The most valuable feature of the solution is security.""BIG-IP DNS's best features are DNS monitoring and global service load balancing.""F5 provides us with a mechanism to accomplish complex product balancing.""The security features, DDoS mitigation facilities, and SQL configuration are the most valuable aspects of this solution.""F5 BIG-IP DNS is useful, depending on how you use it.""F5 BIG-IP DNS has been rock solid in terms of stability for years."

More F5 BIG-IP DNS Pros →

"So, in general, it's very stable because the process to deliver new features and new releases in not so long...I rate the scalability a nine out of ten.""We now have insight into our DNS requests and we can actively see how many thousands of malicious requests have gotten knocked down in the last day or week that we didn't have before. There's more insight for both security and more insight."

More Palo Alto Networks DNS Security Pros →

"It would be good if the more complex versions of Umbrella are simplified so that we can offer them in a more standardized way. We, as a telco, do not operate the same as a traditional integration partner would, who can sell all its services. We try to have a standardized approach as much as we can so that we can sell the solution with as many services added to it as possible. If you look at the structure of businesses in Switzerland, 95% of them have 10 persons or less, and they do not have a security specialist. Therefore, the higher the automated and standardized features, the better it is for them.""It would be good to have more extensions to third-party products and a client for other device types.""Its reliability and the response time of the support team can be better.""The integration with Cisco could be better.""I'd like to see this solution more closely integrate with other products Cisco has in its portfolio.""I'd like to see improvement in its overall integration with all the other platforms. There's some integration between Umbrella and Meraki, but an overall Cisco problem is that there are so many different tools, and finding easy, seamless ways of connecting everything together is always a challenge.""There are a couple of interface issues. I know that they say that there are feature enhancements that are noted. For example, we've got the Cisco Meraki security appliances, and there, we geofence our company to where we're allowed to send and receive traffic. So, in our case, by default, we only allow traffic to six different countries, which allows us to effectively prevent traffic for the majority of bad players in the world, but they don't give you an easy way to do that in Cisco Umbrella. With Cisco Meraki, I can specify or pick the countries. I can say that I want to only allow traffic from these six countries, and I'm done. With Cisco Umbrella, I have to rely on the fact that they're going to prevent traffic to other countries. They're going to decide if it's good or bad.""Overall, I'm quite happy with Cisco products, but there could be one place where you can check what's going on. There could be one place where you get all the information about these products so that you don't need to look around. You get the status, information about what lately happened, and if there was anything on the machine in one single place."

More Cisco Umbrella Cons →

"I would like to see the login facilities improved, as well as more troubleshooting.""The initial setup could be easier.""I would like to see more marketing documentation, rather than technical documentation.""The costs could always be a bit lower.""In the product, one of the shortcomings is related to its configuration part...Though you can find some manuals or F5 documents, in real life, it's very hard to understand this product.""It would be great to see a F5 BIG-IP DNS cloud version. What we within the Australian government are looking at doing is utilizing a secured DNS service much the same as the English GCHQ version of their protected DNS service.""CNC (control and command) communication would be beneficial. We would like to have control and command blocking to prevent visiting malicious websites.""The solution can improve by adding cloud integration through plugins or additional configurations so we can use F5 BIG-IP DNS to communicate with the cloud."

More F5 BIG-IP DNS Cons →

"I'm not really sure what needs improvement. The only hiccup I've really seen is a couple of the DNS requests get flagged as the Sophos traffic instead of DNS traffic, but that's more of their app detection in the DNS Security. I haven't really seen any issues with the DNS security.""The installation is more complex because the solution has another approach to security."

More Palo Alto Networks DNS Security Cons →

Pricing and Cost Advice
  • "When talking about Cisco solutions in general there pricing model is horrible. For example, you can sell a Meraki-based solution, but if the customer starts shopping around, someone is going to have access to the pricing at a level that you cannot compete because they do not have uniform pricing. Not everybody gets fair pricing. Unless you are one of the real major corporations selling the solution your ability to compete is impossible. Cisco will acknowledge the situation and assure you next time it will be in your favor but it never becomes favorable for you. Cisco is not very good in this regard. However, Umbrella is good."
  • "The licensing fee is paid on a yearly basis."
  • "In the region I'm from, that of EMAR, Europe, the Middle East, Eastern Asia and Africa, our organizations do not have many liquid cash assets, so the price could be better."
  • "The price depends on the use case, and it's a bit linear. But it depends on the customer's strategy and how Cisco plans to optimize the costs."
  • "We were using the free version, and we implemented the paid version about two months ago. I'm paying a fair price, but everything is negotiable with Cisco. One of the benefits that I got by having Cisco Umbrella is the licensing of the Cisco AnyConnect VPN client."
  • "There are no hidden costs with Umbrella. Everything is included in the package."
  • "There is room for improvement when it comes to the cost."
  • "The pricing is pretty fair. It's good."
  • More Cisco Umbrella Pricing and Cost Advice →

  • "In some cases, it is expensive."
  • "BIG-IP DNS is more expensive than its competitors like Citrix, but it gives good value for money."
  • "The on-prem version is only available on a yearly license, but the cloud version can be paid for on a day-by-day basis."
  • "They are competitively priced."
  • More F5 BIG-IP DNS Pricing and Cost Advice →

    Use our free recommendation engine to learn which Domain Name System (DNS) Security solutions are best for your needs.
    709,643 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried.… more »
    Top Answer:Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native… more »
    Top Answer:The reports and notifications are the most useful part of the platform. As soon as you deploy the security layers, the… more »
    Top Answer:The most valuable feature of the solution is security.
    Top Answer:You do need a license to use the solution and do need to renew it periodically if you decide to continue to use it… more »
    Top Answer:F5 BIG-IP DNS is quite old and may go extinct in a few days, months, or years, depending on whether it offers additional… more »
    Top Answer:We now have insight into our DNS requests and we can actively see how many thousands of malicious requests have gotten… more »
    Top Answer:I'm not really sure what needs improvement. The only hiccup I've really seen is a couple of the DNS requests get flagged… more »
    Top Answer:Our primary use case is for preventing malware and malicious requests.
    Also Known As
    F5 BIG-IP DNS, F5 DNS Delivery
    Learn More
    Palo Alto Networks
    Video Not Available

    Cisco Umbrella offers flexible, cloud-delivered security according to users’ requirements Cisco Umbrella includes secure web gateway, firewall, and cloud access security broker (CASB) functionality all delivered from a single cloud security service. Cisco Umbrella’s protection is extended to devices, remote users, and distributed locations anywhere. As company employees work from many locations and devices, Cisco Umbrella is the easiest way to effectively protect users everywhere in minutes.

    Cisco Umbrella uses machine learning to search for, identify, and even predict malicious domains. By learning from internet activity patterns, this DNS-layer security solution can automatically identify attacker infrastructure being staged for the next threat. These domains are then proactively blocked, protecting networks from potential compromise. Cisco Umbrella analyzes terabytes of data in real time across all markets, geographies, and protocols.

    Cisco Umbrella works with leading IT companies to integrate its security enforcement and intelligence. Built with a bidirectional API, Cisco Umbrella makes it easy to extend protection from on-premises security appliances to cloud controlled devices and sites.

    Cisco Umbrella is suitable for small businesses without dedicated security professionals, as well as for multinational enterprises with complex environments.

    Why use Cisco Umbrella?

    • Simplify security management: Cisco Umbrella is the fastest and easiest way to protect all users within minutes and reduces the number of infections and alerts sent from other security products by stopping threats at the earliest point. With no hardware to install and no software to manually update, ongoing management is simple

    • Reliable reporting: Cisco Umbrella reports show activity for each device or network in the system. Users gain a more complete picture of the security risks facing their organization and can take action to remedy them.

    • Manage and control cloud apps: Umbrella provides visibility into sanctioned and unsanctioned cloud services in use across the enterprise. Users can uncover new services being used, see who is using them, identify potential risk, and block specific applications easily.

    Reviews from Real Users

    Cisco Umbrella stands out among its competitors for a number of reasons. Some of the major ones are its DNS-based protection, ability to protect users no matter where they are located, stability, and high performance.

    Daniel B., a network specialist at Syswind Kft, writes, “We primarily use the solution as cloud security for our branches. It protects us from direct internet outbreaks. It makes for good flexibility. The solution is very easy to manage. We found the initial setup, for example, to be quite simple. Efficient protection on the DNS level and even higher. The sandboxing feature analyses and handles the complicated security risks.”

    Victor M., SOC & Security Services Director at BEST, notes, “It provides security for the remote workers and it helps to improve enterprise security in a very easy way. We mainly enjoy web software protection capabilities. It prevents the end-users from getting into bad sites or sites that potentially could have malware or could be phishing. It helps end-users avoid the wrong sites. The solution works very smoothly. The user interface is good.”

    F5® BIG-IP® DNS distributes DNS and user application requests based on business policies, data center and cloud service conditions, user location, and application performance. BIG-IP DNS is commonly configured as a full proxy to provide global server load balancing (GSLB) for applications and DNS across architectures, and across the globe.

    The BIG-IP platform delivers DNS services with visibility, reporting, and analysis; scales and secures DNS responses geographically to survive increased traffic or threats; delivers a real-time DNSSEC solution; designed to provide availability of global applications in all cloud environments.

    Palo Alto Networks DNS Security is a solution that can stop attackers from abusing DNS for malicious activities like data theft, command and control, phishing, and ransomware. The solution offers organizations automated protections, prevents attackers from bypassing security measures, and eliminates the need for independent tools.

    Palo Alto Networks DNS Security Features

    Palo Alto Networks DNS Security has many valuable key features. Some of the most useful ones include:

    • Full protection: Palo Alto Networks DNS Security uses deep learning algorithms that predict and identify new and advanced threats to offer protection against sophisticated DNS-based attacks.
    • Comprehensive visibility: With the solution, you gain complete visibility into your organization’s blind spots to prevent attacks from exploiting your network and stealing your data.
    • Real-time prevention: The solution includes real-time analysis and can identify millions of malicious domains before an attack even happens.
    • Native integration with your NGFW (Next Generation Firewall): You don’t have to reroute your DNS traffic or work through lengthy change management processes to deploy the solution.
    • Category-based action: The solution allows you to create policies specific to DNS traffic types. All DNS queries are checked against Palo Alto’s scalable cloud database to determine appropriate enforcement actions.
    • SaaS Security: Palo Alto Networks DNS Security delivers integrated SaaS security that lets you see and secure new SaaS applications, protect data, and prevent zero-day threats at the lowest TCO.

    Palo Alto Networks DNS Security Benefits

    There are many benefits to implementing Palo Alto Networks DNS Security. Some of the biggest advantages the solution offers include:

    • Saves time and money: The solution helps you reduce costs and extend your NGFW investment by saving time in operations with a single coordinated network security stack for all alerts, policies, rule violations, IDPS, web security, malware analysis, and DNS.
    • Uninterrupted security innovations: Palo Alto Networks DNS Security seamlessly adds new detection, prevention, and analytics capabilities without requiring reconfiguration.
    • Optimized security posture: The solution’s Security Analytics dashboard ensures protection for NGFWs with significant DNS traffic.

    Reviews from Real Users

    Palo Alto Networks DNS Security is a solution that stands out when compared to many of its competitors. Some of its major advantages are that it has remarkable anti-hacking features, excellent stability, provides valuable insights, and has good DNS filtering.

    A Senior Technical Project Manager at a university explains why he likes the solution: “They have anti-hacking features which are quite useful. They have virus protection within the firewall. The stability is excellent and the product is very mature.”

    Others express how the solution has been valuable in providing insights. A Network Engineer at an educational organization says, “We can actively see how many thousands of malicious requests have gotten knocked down in the last day or week that we didn't know about before.”

    “The solution has good DNS filtering, is scalable, and highly-integrated,” mentions a Group Network Specialist at a financial services firm.

    Learn more about Cisco Umbrella
    Learn more about F5 BIG-IP DNS
    Learn more about Palo Alto Networks DNS Security
    Sample Customers
    Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
    Ricacorp Properties, Bangladesh Post Office, Shawbrook Bank, Shinsegae Internet Duty Free
    Information Not Available
    Top Industries
    Financial Services Firm12%
    Comms Service Provider11%
    Educational Organization9%
    Computer Software Company9%
    Computer Software Company19%
    Educational Organization10%
    Financial Services Firm9%
    Computer Software Company25%
    Comms Service Provider25%
    Computer Software Company15%
    Financial Services Firm13%
    Manufacturing Company11%
    Computer Software Company15%
    Educational Organization7%
    Financial Services Firm7%
    Company Size
    Small Business37%
    Midsize Enterprise23%
    Large Enterprise40%
    Small Business20%
    Midsize Enterprise20%
    Large Enterprise60%
    Small Business36%
    Midsize Enterprise9%
    Large Enterprise55%
    Small Business22%
    Midsize Enterprise12%
    Large Enterprise66%
    Small Business22%
    Midsize Enterprise17%
    Large Enterprise61%
    Buyer's Guide
    Domain Name System (DNS) Security
    June 2023
    Find out what your peers are saying about Cisco, TitanHQ, Infoblox and others in Domain Name System (DNS) Security. Updated: June 2023.
    709,643 professionals have used our research since 2012.

    F5 BIG-IP DNS is ranked 5th in Domain Name System (DNS) Security with 9 reviews while Palo Alto Networks DNS Security is ranked 6th in Domain Name System (DNS) Security with 2 reviews. F5 BIG-IP DNS is rated 8.6, while Palo Alto Networks DNS Security is rated 10.0. The top reviewer of F5 BIG-IP DNS writes "The solution's initial setup phase is easy, and it offers a good technical support ". On the other hand, the top reviewer of Palo Alto Networks DNS Security writes "We can actively see how many thousands of malicious requests have gotten knocked down in the last day or week that we didn't know before". F5 BIG-IP DNS is most compared with Infoblox Advanced DNS Protection, EfficientIP DNS Guardian, CIRA Anycast DNS, BlueCat Edge and Infoblox BloxOne Threat Defense, whereas Palo Alto Networks DNS Security is most compared with Infoblox Advanced DNS Protection, EfficientIP DNS Firewall, Infoblox BloxOne Threat Defense, DNSFilter and TitanHQ WebTitan.

    See our list of best Domain Name System (DNS) Security vendors.

    We monitor all Domain Name System (DNS) Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.