Try our new research platform with insights from 80,000+ expert users

AWS Shield vs F5 BIG-IP Advanced Firewall Manager (AFM) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AWS Shield
Ranking in Distributed Denial-of-Service (DDoS) Protection
6th
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
7
Ranking in other categories
No ranking in other categories
F5 BIG-IP Advanced Firewall...
Ranking in Distributed Denial-of-Service (DDoS) Protection
9th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
25
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2025, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of AWS Shield is 6.6%, down from 7.6% compared to the previous year. The mindshare of F5 BIG-IP Advanced Firewall Manager (AFM) is 1.4%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Distributed Denial-of-Service (DDoS) Protection
 

Featured Reviews

Manikandan-R - PeerSpot reviewer
Solution provides essential protection with good support and a simple setup
I have noticed a pattern developing in approximately five minutes. If it were possible to provide these patterns with historical data spanning six months, three months, or two months directly from the console, it would be extremely beneficial. It would allow for easy inquiries and facilitate the retrieval of relevant parts without having to manually check logs or examine movements. Instead, if all historical data were available, I could consult six months' worth of identified patterns efficiently through AWS without relying on external sources. This solution is particularly suitable for startups or medium-sized startups. I would rate the overall solution eight out of ten.
Pawel Augustyn - PeerSpot reviewer
Provides outstanding resource management and application security across multiple geographies
The most valuable features for me are stability, availability, and security, along with the ability to manage multiple features to secure my applications. The solution also monitors and blocks unconventional requests and maintains security efficiently. The scalability feature also allows me to manage and allocate resources dynamically without disrupting production traffic.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is integrated with AWS. So, it gives you a good first step."
"The solution's ease of use is the most valuable feature."
"The product is easy to use."
"The product has a good mechanism to analyze trends and trigger events."
"We have integrated the tool with Active Directory. The most important feature is that it's transparent and doesn't degrade the performance of our solution. Additionally, it's easy to configure, which is crucial for us. It's easy to use and set up and stops attacks on our servers. We haven't encountered any attack problems because the solution stops them in real-time. AWS Shield specifically focuses on defending against denial-of-service attacks, making it a great solution for that type of threat."
"It is quite scalable, and we have not faced any issues with its scalability."
"The solution operates smoothly at its baseline level, and we do not encounter any issues at that level."
"I am impressed with the product's multiple features like security."
"The product’s most valuable features are LTM and WAF."
"The solution is easily deployable and has great functionality."
"The setup and functionality are fairly straightforward."
"The protection is very useful."
"It is stable."
"The most valuable feature of this solution is that the blocking of IP's."
"We use three main features. The first one is access control. The second feature we use is called IP intelligence. Finally, we have a DDoS safety feature."
"The most valuable features of F5 BIG-IP Advanced Firewall Manager (AFM) are the web gateway, load balancing, services, and applications available."
 

Cons

"We end up having to pay extra for features that AWS adds that we don't need."
"Perhaps the time required to detect anomalies can be reduced."
"The product is expensive."
"The management of it is a bit hard. If you don't engineer it on the front side, it is hard to go back in and change it. It could be improved in terms of architecture requirements and then ongoing support requirements as a secondary component to it. People tend to set up things like this, and they just expect it to work without the care and feeding that needs to go back into it either from an application team or a network environment team."
"Perhaps the time required to detect anomalies can be reduced. Presently, it takes some time to determine whether a situation is normal or abnormal."
"The product needs to improve its logs and reports to make it read better."
"The product should give users more flexibility to customize their security policies according to their requirements."
"The time taken to detect anomalies must be reduced."
"F5 BIG-IP Advanced Firewall Manager's pricing and technical support services need improvement."
"The solution’s initial setup is not easy."
"F5 could provide a distributed cloud version."
"The web gateway feature could improve in F5 BIG-IP Advanced Firewall Manager (AFM)."
"It doesn't compare to next generation firewalls"
"Some spam can go by the firewall."
"F5 should increase its capability to prevent zero-day attacks."
"Firstly, geolocation currently relies on manual updates. It has to move to automatic updates. There are no automatic updates for this feature. If some IPs, countries, or service providers move to another country, now you will be allow IPs that you previously denied. This is because you depend on the database, which doesn't update automatically. This is really a very important area that they need to improve."
 

Pricing and Cost Advice

"It depends on your subscription level and the volume that you're spending with AWS. So, it is very relative to the consumption alignment in your subscription level. It is a well-constructed, scalable pricing option, but it is relative to how much you're spending on AWS. Because the more you spend, typically, the more you get off on services like this. I find it to be comparable to other solutions."
"We pay $3000 per month for the solution."
"The cost depends on traffic each month, so on average, it costs us between US$200 and US$300 per month."
"The tool is cheap."
"The tool's pricing is good."
"We have purchased a five-year licensing package for the product."
"It is somewhat on the expensive side although it is worth the additional cost."
"The solution is slightly on the higher priced side."
"We need to pay a yearly licensing fee for the solution."
"The product is expensive."
"F5 BIG-IP Advanced Firewall Manager (AFM) is an expensive solution. They are one of the best in the market, but the price could be cheaper."
"As per pricing, I would not say cheap, but little higher than cheap, but not very expensive. So you can say kind of value for money solutions."
"It's very expensive, and you pay extra for the models."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
860,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
14%
Comms Service Provider
10%
Insurance Company
7%
Financial Services Firm
18%
Computer Software Company
17%
Government
9%
Insurance Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about AWS Shield?
We have integrated the tool with Active Directory. The most important feature is that it's transparent and doesn't degrade the performance of our solution. Additionally, it's easy to configure, whi...
What needs improvement with AWS Shield?
Perhaps the time required to detect anomalies can be reduced. Presently, it takes some time to determine whether a situation is normal or abnormal. I am unsure how much this duration can be reduced...
What is your experience regarding pricing and costs for F5 Advanced Firewall Manager?
The standard license is reasonably priced, but additional features like the WAF can be more expensive. There are plenty of technical documents and a supportive community available, which helps mana...
What needs improvement with F5 Advanced Firewall Manager?
The appliance and features could be enhanced further, especially in terms of security. Some features like the WAF ( /categories/web-application-firewall-waf ) firewall may seem expensive compared t...
 

Also Known As

No data available
F5 AFM, F5 Advanced Firewall Manager
 

Overview

 

Sample Customers

netflix, dow jones, mapbox, pearson, rovio, youview, moviestar planet, asurion, payplug, hour of code
City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office
Find out what your peers are saying about AWS Shield vs. F5 BIG-IP Advanced Firewall Manager (AFM) and other solutions. Updated: June 2025.
860,592 professionals have used our research since 2012.