The major drawback is it has lot of options nested inside, and each option has a lot of options. I'm not sure who might be using all those options or even some (limited) good options. They should pare everything down. It requires a particular skill or training before being able to manage it. Creating virtual servers, managing pools, and nodes until it is working on WAF side of it becomes difficult while writing the irules. Another drawback is we are using a physical appliance. It becomes very slow and unresponsive. Even logs cannot load on the box to troubleshoot. It overwrites the logs. They need to do something in log storage locally on this box in the next release.
