What is our primary use case?
If you are sending mail or browsing anything, you don't want to send your traffic without encryption. We use SSL for traffic encryption and ASM for SSL offloading. It is a proxy server for SSL. The goal is to encrypt outside traffic except our company. Traffic coming from the Internet should be first encrypted in our device in ASM. Once it will be encrypted, our device will identify whether it’s a threat or not.
What is most valuable?
ASM offers traffic encryption.
What needs improvement?
If you are responsible for monitoring the logs in F5, it isn't very easy. The format is complicated compared to different vendors. For example, Fortinet and Cisco have feasible formats for sending and fetching logs. Suppose I'm monitoring the logs and everything, and when I am retrieving logs from F5, I want to know whether it is regular traffic or any abnormality is happening. The logs itself is not user-friendly. It may not give you a clear way of what's happening. You have to go through different websites and work on it. You have to waste so much time on it.
For how long have I used the solution?
What do I think about the scalability of the solution?
400 users are using this solution.
Which solution did I use previously and why did I switch?
We had different products before. We shifted to F5 and are planning to switch to another product because the product is expensive.
What's my experience with pricing, setup cost, and licensing?
The product comes with expensive annual licenses.
The product is very good, very reliable but it costs a lot. Barracuda offers the same kind of services at a lower price.
What other advice do I have?
CA App Synthetic Monitor is a model of F5. F5 has one dedicated box where they provide different kinds of modules like ASM for SSL offloading and LTM for load balancing. We are using both. Our feedback is excellent, and it is a fantastic product. Since our traffic is increasing, we are switching to another solution because it is expensive, but everything is perfect.
I recommend the solution if anybody doesn't want to compromise on services. Suppose you want to set up dual balancing or ASM or a reliable solution that doesn't have an issue daily. You can install it and use it. The services are reliable, and there is no issue. You don't need to contact the call center to fix the problem. If you have a budget, go with F5. If you have budget concerns, then you can go for other products.
Overall, I rate the solution an eight out of ten.