We use the solution to secure web applications running in the organization.
Snr. Technical ADN Consulting Architect at ADN Consultants & Architects (PTY) Ltd
The central point of all the applications being scrubbed and checked
What is our primary use case?
What is most valuable?
F5 is one of the best products. We use it for multiple segments within our organization and applications. It is a central point of all the applications being scrubbed and checked.
What needs improvement?
The customer service could be improved.
For how long have I used the solution?
I have been using F5 Advanced WAF for more than ten years.
Buyer's Guide
F5 Advanced WAF
September 2025

Learn what your peers think about F5 Advanced WAF. Get advice and tips from experienced pros sharing their opinions. Updated: September 2025.
867,341 professionals have used our research since 2012.
What do I think about the stability of the solution?
The product is stable.
I rate the solution’s stability a seven out of ten.
What do I think about the scalability of the solution?
The solution is scalable.
Our entire organization and clients use the solution.
How was the initial setup?
The initial setup is easy since I have used the technology for almost 20 years. Some applications require more attention depending on what you are doing and trying to achieve with the particular module. You need some assistance from the team in configuring the different components within the application through the web.
What was our ROI?
The solution is worth the money that you spend.
What's my experience with pricing, setup cost, and licensing?
The solution is expensive.
What other advice do I have?
Whatever you are looking for can be done on the platform. Some features may not be available with IO components. A few features give you the flexibility that no other product can.
Overall, I rate the solution an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. customer/partner

Application Security Engineer at a financial services firm with 10,001+ employees
Powerful device for protecting web applications
Pros and Cons
- "Provides good protection from attacks."
- "We get false positives sometimes."
What is our primary use case?
I work for a bank and our use case of WAF is to protect our applications, including mobile ones. We are users of this solution and I am an IT specialist engineer.
What is most valuable?
Protection from attacks is the best feature of this product.
What needs improvement?
We sometimes get pages with false positives. The F5 team does its best to deal with this problem. I'd like to see this product compatible with more mobile applications, like protecting something devices from a malicious server or from the mobile application itself.
For how long have I used the solution?
We've been using this solution for one year.
What do I think about the stability of the solution?
The stability is good.
What do I think about the scalability of the solution?
The version we are using is not very scalable.
How are customer service and support?
The technical support is generally good although in some cases they take a long time to respond and we then need to escalate the case to get an answer from a higher level. The team is mature and they are able to solve our problems.
How would you rate customer service and support?
Positive
How was the initial setup?
F5 has good documentation available on their website so deployment is relatively straightforward.
What other advice do I have?
This is a mature solution and a very powerful device for protecting web applications. I rate this solution eight out of 10.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
F5 Advanced WAF
September 2025

Learn what your peers think about F5 Advanced WAF. Get advice and tips from experienced pros sharing their opinions. Updated: September 2025.
867,341 professionals have used our research since 2012.
Chief Technology Officer at a tech company with 11-50 employees
Provides good security features, especially against SQL injection
Pros and Cons
- "I like the security features, especially against SQL injection."
- "I would like to see additional controls."
What is our primary use case?
We use this solution because we provide a platform that requires a lot of security.
The solution is deployed on cloud.
We have thousands of external users.
What is most valuable?
I like the security features, especially against SQL injection.
What needs improvement?
I would like to see additional controls.
For how long have I used the solution?
I have been using this solution for a year.
What do I think about the stability of the solution?
The stability is reasonably good. There haven't been any major issues so far.
What do I think about the scalability of the solution?
It's scalable. We haven't had any major issues so far.
How was the initial setup?
We went through the managed service partner, so they did the deployment. Deployment took about 15 days.
We have a few IT experts for maintenance.
What about the implementation team?
Implementation was done in-house.
What other advice do I have?
I would rate this solution eight out of ten.
My advice is to do a thorough testing of the application.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Sales Manager For State-Ownership Enterprise at PT EDI INDONESIA
Scalable, good local support, and reliable
Pros and Cons
- "F5 Advanced WAF is a stable solution, we are satisfied. It is more stable than ForiWeb."
- "F5 Advanced WAF could improve the precision of the scanning. There are many false positives. They should improve their threat database."
What needs improvement?
F5 Advanced WAF could improve the precision of the scanning. There are many false positives. They should improve their threat database.
For how long have I used the solution?
I have been using F5 Advanced WAF for three years.
What do I think about the stability of the solution?
F5 Advanced WAF is a stable solution, we are satisfied. It is more stable than ForiWeb.
What do I think about the scalability of the solution?
I have found F5 Advanced WAF to be scalable.
How are customer service and support?
The local support is good and they have been helpful. However, if we raise an issue to the global support they take a lot of time to return our inquiry.
What's my experience with pricing, setup cost, and licensing?
The price of the enterprise solution is reasonable. However, if you are a small to medium-sized business the price could be difficult to afford.
F5 Advanced WAF pricing structure should be adjusted to meet the need of small to medium-sized companies.
What other advice do I have?
I rate F5 Advanced WAF an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer.
Solutions Specialist at FPT
Feature-rich, provides good protection, and has excellent technical support
Pros and Cons
- "The most valuable features of this solution are the WAF protection, Data Safe, and the seven-layer DDoS."
- "I would like to see the API Protection improved."
What is our primary use case?
I use F5 for on-premises infrastructure to provide protection.
What is most valuable?
The most valuable features of this solution are the WAF protection, Data Safe, and the seven-layer DDoS.
What needs improvement?
I would like to see the API Protection improved.
For how long have I used the solution?
I have been using F5 Advanced WAF for two years.
We are using the latest version.
What do I think about the stability of the solution?
It's a stable product. We have no issues with the stability of the F5 Advanced WAF.
What do I think about the scalability of the solution?
We have not yet tried to scale with this solution. We have increased by 15% to 20%.
There are approximately 100 people in our company who use this solution.
How are customer service and technical support?
I have contacted technical support several times. They have support consultants to provide help with your cases. I have received advice from them when I have tried to build new systems.
Overall, the technical support is excellent.
Which solution did I use previously and why did I switch?
I am using it on my personal account on Google Cloud. It is used with cloud solutions. I use Google, Gmail, and Google Drive.
How was the initial setup?
I was not a part of the initial setup.
The solution does not require any maintenance.
What about the implementation team?
This solution was installed by a third party. It may have been the reseller.
What's my experience with pricing, setup cost, and licensing?
I don't have any issue with the pricing of this solution. I am only involved with the technical portion of it.
What other advice do I have?
I am not sure about recommending solutions.
I would rate F5 Advance WAF a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Information Security Coordinator at a non-tech company with 5,001-10,000 employees
Enables us to monitor IP locations
Pros and Cons
- "We can monitor IP locations, but we have constraints from each country. It has a replication feature. Licenses can be shared, taking turns with each license."
- "The reporting could be clearer and embedded to include our movement data."
What is our primary use case?
We have many types of service, provided by the company.
What is most valuable?
We can monitor IP locations, but we have constraints from each country. It has a replication feature. Licenses can be shared, taking turns with each license.
What needs improvement?
The reporting could be clearer and embedded to include our movement data. The product could improve the interface by reducing the bookmarking more frequently and some other features. Ideally, it could do with a brand new interface. There is sometimes information overload in the logs. It is sometimes difficult to detect attacks on the firewall because it is hidden amongst many other data. The logs are not always helpful in this regard. I was disappointed in the reporting.
For how long have I used the solution?
We have been using F5 Advanced Web Application Firewall for about one year and the same for Fortinet FortiWeb.
What do I think about the scalability of the solution?
Scalability is fine, and we don't have any complaints so far. It's flexible once you want to expand it, but that includes the license upgrade for additional features.
How are customer service and technical support?
We use a reseller for technical support. Technical support is very good.
Which solution did I use previously and why did I switch?
We have looked at other options, but they have different solutions to the F5 Advanced Web Application Firewall.
How was the initial setup?
Setup and installation are easy.
What about the implementation team?
We use the reseller to implement it from scratch until it is fully deployed. Implementation does not take long.
What's my experience with pricing, setup cost, and licensing?
There are various plans available for Fortinet FortiWeb Cloud WAF as a Service, including a trial version. You are only charged by the total data transferred, and there are hourly charges for the protected web application.
Which other solutions did I evaluate?
We are constantly looking out for features which are not available in the current product. We have set alerts to flag when these features become available.
What other advice do I have?
I would rate this solution as 9 out of 10. They can combine firewall software with other software solutions with this product. It has a good community to see what other ideas for the product are out there.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Key account manager
Easy to use and configure, stable, and secure
Pros and Cons
- "The most valuable feature is that it is secure."
- "The interface is old-looking, it's not modern, which is why it's not always comfortable to use."
What is our primary use case?
I was working in sales. We would provide more corporate products. I am not implementing or deploying this solution. I would sell it for projects in the enterprise direction, but it was mostly for financial institutions and some government companies.
It usually used for e-commerce and financial services. Products that banks provide to their customers. It also offers protection of the services.
What is most valuable?
It is easy to use, and it's also easy to configure.
The most valuable feature is that it is secure.
What needs improvement?
The interface is old-looking, it's not modern, which is why it's not always comfortable to use.
I would hope that they provide some updates sooner rather than later.
For how long have I used the solution?
I have used F5 Advanced WAF for three months in the last year.
We were using the latest version and we update on a regular basis.
What do I think about the stability of the solution?
It's a very stable solution.
What do I think about the scalability of the solution?
This is a scalable product.
Our customers are in the banking system and we have approximately 200 to a few thousand customers.
How are customer service and technical support?
We have official support from the distribution channel. One of our distributors is in Ukraine.
They have their own support definition provided with some certifications who are responsible for providing support at the vendor level.
We usually ask for their support and they provide it to us.
Which solution did I use previously and why did I switch?
Previously, we used BIG-IP and we used Web Application Firewall.
How was the initial setup?
I was not involved in the installation.
What other advice do I have?
I am currently working on a B2C channel, which is more for retail companies.
I have also been working with Apple company for a little bit more than a month.
I am working with all-in-one products with all services included.
I would recommend this solution to others who are interested in using it. It's not popular in our country but it's unique in itself. There are some segments that became more important on a regular basis, especially for large companies and enterprise segments.
It's a secure product. I would rate F5 Advanced WAF an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Head of IT Security at a financial services firm with 201-500 employees
The dashboard and reporting are great features of this solution, load balancing and iRules are great as well.
Pros and Cons
- "Good dashboard and reporting."
- "Scalability could be improved."
What is our primary use case?
I worked with the solution before starting at this new company and I'm now implementing it in my new job. I'm head of security at our company and we are a customer of NGINX Web Application Firewall.
What is most valuable?
The product is very easy to use and they provide great support. I like the dashboard and reporting.
What needs improvement?
The scalability could be improved. There is a version with 25 and 200 Mbps, no options in between
For how long have I used the solution?
I've been using this solution for one year.
What do I think about the stability of the solution?
It's a stable solution. I haven't had any problems with it.
What do I think about the scalability of the solution?
How are customer service and technical support?
The technical support is good, I'm happy with it.
How was the initial setup?
The initial setup is straightforward.
What other advice do I have?
I would rate this product an eight out of 10.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Buyer's Guide
Download our free F5 Advanced WAF Report and get advice and tips from experienced pros
sharing their opinions.
Updated: September 2025
Product Categories
Web Application Firewall (WAF)Popular Comparisons
Prisma Cloud by Palo Alto Networks
Microsoft Azure Application Gateway
Azure Front Door
AWS WAF
Fortinet FortiWeb
NetScaler
Cloudflare Web Application Firewall
Imperva Web Application Firewall
Imperva DDoS
Akamai App and API Protector
Gigamon Deep Observability Pipeline
Azure Web Application Firewall
Radware Alteon
NGINX App Protect
Buyer's Guide
Download our free F5 Advanced WAF Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Does F5 Advanced WAF work with Azure App Service?
- Which is better, Barracuda Web Application Firewall or F5 Advanced WAF?
- Which lesser known firewall product has the best chance at unseating the market leaders?
- Which WAF solution would you recommend to cater to 100 to 125 concurrent sessions?
- What do you recommend for a securing Web Application?
- Fortinet vs Sophos? Help choose a NGFW solution that can replace Microsoft TMG.
- Imperva WAF vs. Barracuda: Which One is Better?
- F5 vs. Imperva WAF?
- When should companies use SSL Inspection?
- How does a WAF help to protect against DDoS attacks?