No more typing reviews! Try our Samantha, our new voice AI agent.

F5 BIG-IP Advanced Firewall Manager (AFM) vs Neustar UltraDDoS [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
79
Ranking in other categories
CDN (1st), WAN Optimization (4th), Distributed Denial-of-Service (DDoS) Protection (2nd), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (17th)
F5 BIG-IP Advanced Firewall...
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
26
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (13th)
Neustar UltraDDoS [EOL]
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Featured Reviews

M.A. Faisal - PeerSpot reviewer
General Manager at bKash Limited
Advanced protection has secured critical web workloads and provides clear traffic visibility
From a security perspective, there remains a security loophole, as some browsers in the market can bypass the Turnstile solution, which requires approximately 40 seconds to do so. From a performance perspective, this is acceptable. We also tried Google reCAPTCHA, and that can also be bypassed. From a security perspective, I would say neither solution is completely secured. Regarding uptime, we have faced a couple of incidents due to Cloudflare in recent years, so I cannot say we receive 100% uptime for our region. We sometimes face challenges, including downtime and other issues. As a result, we are not receiving 100% uptime from Cloudflare's solution. Since most of our customers are in this region, we need alternatives. We need something more competitive than Cloudflare. Unfortunately, in Bangladesh, Cloudflare has three points of presence already, and we cannot find any other solution provider in Bangladesh as an alternative, which presents another challenge. Competitor solutions have more attack signatures, which ensure better security compared to Cloudflare's predefined configurations. Customers do not have options to modify any configuration parameters in Cloudflare, whereas other competitor solutions, such as F5 Distributed Cloud, allow customers to tune configurations according to their requirements. Cloudflare could improve in this area. Additionally, regarding visibility, Cloudflare has static visibility, but they could adopt dynamic graph features for their customers.
Nawapol Boonlerd - PeerSpot reviewer
Information Security Engineer at BigFish Enterprise Ltd.
Comprehensive network protection has mitigated DDoS risks and supports secure on-prem operations
Currently, there are no weaknesses or disadvantages in F5 BIG-IP Advanced Firewall Manager (AFM) that I have identified. It is a little bit expensive, and I think about additional features they could have in the future to make it even better. For example, I have thoughts about the price. Currently, it does not integrate, and I would assess the importance of F5 BIG-IP Advanced Firewall Manager (AFM)'s integration with cloud services as significant. Currently, I use only one site, and I cannot tell you about F5 BIG-IP Advanced Firewall Manager (AFM) centralized security policies. I have not used F5 BIG-IP Advanced Firewall Manager (AFM)'s Threat Intelligence capabilities. I have not used their dynamic traffic shaping feature. So far, the only thing that could be improved is the pricing of F5 BIG-IP Advanced Firewall Manager (AFM).
JT
Manager Strategic Planning at Endurance International Group
Identifies a request that comes up multiple times, block holds that particular IP, and lets the genuine traffic pass through
Genuine traffic coming in is still getting better. While I understand that it's some sort of algorithm that is written in this scale, that algorithm can be a little bit better because sometimes while we are doing DDoS mitigation, genuine traffic does get blocked. While it is one of the greatest features it can still be improved. I would like to see a dashboard that shows you the data that is transferred from which end. It's where people start looking at abuse management. People keep questioning when the mitigation is on what service it is and how many GBs are passing through. An end user dashboard that will help you identify all of these questions and that can be visible in your entire organization is something that would make sense.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"DDoS attacks target unprotected machines. Cloudflare detects and stops these attacks using internal systems. It identifies incoming DDoS attacks, issuing challenges or blocking them immediately."
"The solution automatically detects and responds to certain types of traffic based on geolocation."
"I have not had a DDOS attack since, or at least not become unavailable due to DDOS which means my ROI is pretty good."
"This solution has improved the security of our organization."
"Cloudflare is a security SaaS provider that provides security and protects us from any application layer attack."
"The most valuable features of the solution are performance and security."
"The most valuable feature is the web application firewall."
"The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
"The most valuable features of F5 BIG-IP Advanced Firewall Manager (AFM) are the web gateway, load balancing, services, and applications available."
"The protection is very useful."
"What I find most impressive about F5 is that, as long as you know what you want to do, as long as we know what you want to achieve, you find the solution there."
"The setup and functionality are fairly straightforward."
"I find the signature base is very helpful to see traffic, to see the increase in web traffic."
"Its performance and ease of use are valuable."
"It is stable."
"The most valuable features for me are stability, availability, and security, along with the ability to manage multiple features to secure my applications."
"Scalability is awesome, and they have grown two folds or three folds since we started using them, with no concerns even as we protect close to 60,000 hosted sites for business and e-commerce customers."
"In the DDoS it's difficult to validate what is a genuine request from an end user. We've started being able to do that with the logistics that they have set up. With the protection that they have provided, they are able to identify what is valid and what is not valid. We see that a person who is getting DDoS Neustar service is able to block that particular user. However, while they are doing that it doesn't affect other customers on the server."
 

Cons

"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"With CDN loads, sometimes we get an error that the host server is unavailable when the connection between CloudFlare and the server timed out."
"I think the APIs are a little bit hard for us to work with. The APIs could be more open so that we could integrate better with our SolarWinds or our monitoring solution."
"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"There should be a specific price list for enterprise-level customers."
"We have noticed multiple instances where Cloudflare falsely indicates that our servers are down, even when there is no actual load on them. This makes it challenging for us to identify the exact issue."
"The one feature that is paid is the custom nameservers instead of using the default ones, I want to use a custom one."
"If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag."
"It is a little bit expensive, and I think about additional features they could have in the future to make it even better."
"There is room for improvement in Advanced Firewall Manager's dashboard statistics, especially during attacks."
"F5 should increase its capability to prevent zero-day attacks. Having advanced technology similar to other vendors like Palo Alto for zero-day attack prevention would be valuable."
"The solution doesn't really meet our requirements for an edge firewall."
"Currently, we have eighty F5s and we need some kind of management software. It would be very helpful."
"If you compare it with the next-generation firewalls, then definitely this tool is not comparable."
"This would be absolutely the best network security solution if the price were not so high."
"Apart from the price, I feel no other areas need improvement."
"Genuine traffic coming in is still getting better because sometimes while we are doing DDoS mitigation, genuine traffic does get blocked."
"I would like to see a dashboard that shows you the data that is transferred from which end. It's where people start looking at abuse management. People keep questioning when the mitigation is on what service it is and how many GBs are passing through. An end user dashboard that will help you identify all of these questions and that can be visible in your entire organization is something that would make sense."
 

Pricing and Cost Advice

"We are using the free version."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"The cost primarily depends on the size of the organization."
"The product's pricing is minimal compared to other products."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The solution is slightly on the higher priced side."
"As per pricing, I would not say cheap, but little higher than cheap, but not very expensive. So you can say kind of value for money solutions."
"We have purchased a five-year licensing package for the product."
"It is somewhat on the expensive side although it is worth the additional cost."
"The product is expensive."
"F5 BIG-IP Advanced Firewall Manager (AFM) is an expensive solution. They are one of the best in the market, but the price could be cheaper."
"F5 BIG-IP AFM is an affordable solution. There were not any additional fees other than the standard licensing."
"F5 BIG-IP Advanced Firewall Manager is not an expensive solution."
Information not available
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
902,270 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Comms Service Provider
10%
Computer Software Company
8%
Manufacturing Company
8%
Financial Services Firm
15%
Construction Company
11%
Engineering Company
8%
Comms Service Provider
8%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise11
Large Enterprise26
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise5
Large Enterprise14
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What is your experience regarding pricing and costs for Cloudflare DNS?
The pricing, setup cost, and licensing for Cloudflare are a bit on the higher side overall.
What is your experience regarding pricing and costs for F5 Advanced Firewall Manager?
The standard license is reasonably priced, but additional features like the WAF can be more expensive. There are plen...
What needs improvement with F5 Advanced Firewall Manager?
Currently, there are no weaknesses or disadvantages in F5 BIG-IP Advanced Firewall Manager (AFM) that I have identifi...
What is your primary use case for F5 Advanced Firewall Manager?
I am starting to learn and working with F5 team to conduct a proof of concept, and I do have experience with F5 Rules...
Ask a question
Earn 20 points
 

Also Known As

Cloudflare DNS
F5 AFM, F5 Advanced Firewall Manager
Neustar UltraDDoS, UltraDDoS
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office
Choxi
Find out what your peers are saying about Radware, Cloudflare, NETSCOUT and others in Distributed Denial-of-Service (DDoS) Protection. Updated: May 2026.
902,270 professionals have used our research since 2012.