No more typing reviews! Try our Samantha, our new voice AI agent.

F5 BIG-IP Advanced Firewall Manager (AFM) vs Neustar UltraDDoS [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
79
Ranking in other categories
CDN (1st), WAN Optimization (4th), Web Application Firewall (WAF) (9th), Distributed Denial-of-Service (DDoS) Protection (2nd), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (15th)
F5 BIG-IP Advanced Firewall...
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
26
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (12th)
Neustar UltraDDoS [EOL]
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Featured Reviews

M.A. Faisal - PeerSpot reviewer
General Manager at bKash Limited
Advanced protection has secured critical web workloads and provides clear traffic visibility
From a security perspective, there remains a security loophole, as some browsers in the market can bypass the Turnstile solution, which requires approximately 40 seconds to do so. From a performance perspective, this is acceptable. We also tried Google reCAPTCHA, and that can also be bypassed. From a security perspective, I would say neither solution is completely secured. Regarding uptime, we have faced a couple of incidents due to Cloudflare in recent years, so I cannot say we receive 100% uptime for our region. We sometimes face challenges, including downtime and other issues. As a result, we are not receiving 100% uptime from Cloudflare's solution. Since most of our customers are in this region, we need alternatives. We need something more competitive than Cloudflare. Unfortunately, in Bangladesh, Cloudflare has three points of presence already, and we cannot find any other solution provider in Bangladesh as an alternative, which presents another challenge. Competitor solutions have more attack signatures, which ensure better security compared to Cloudflare's predefined configurations. Customers do not have options to modify any configuration parameters in Cloudflare, whereas other competitor solutions, such as F5 Distributed Cloud, allow customers to tune configurations according to their requirements. Cloudflare could improve in this area. Additionally, regarding visibility, Cloudflare has static visibility, but they could adopt dynamic graph features for their customers.
Nawapol Boonlerd - PeerSpot reviewer
Information Security Engineer at BigFish Enterprise Ltd.
Comprehensive network protection has mitigated DDoS risks and supports secure on-prem operations
Currently, there are no weaknesses or disadvantages in F5 BIG-IP Advanced Firewall Manager (AFM) that I have identified. It is a little bit expensive, and I think about additional features they could have in the future to make it even better. For example, I have thoughts about the price. Currently, it does not integrate, and I would assess the importance of F5 BIG-IP Advanced Firewall Manager (AFM)'s integration with cloud services as significant. Currently, I use only one site, and I cannot tell you about F5 BIG-IP Advanced Firewall Manager (AFM) centralized security policies. I have not used F5 BIG-IP Advanced Firewall Manager (AFM)'s Threat Intelligence capabilities. I have not used their dynamic traffic shaping feature. So far, the only thing that could be improved is the pricing of F5 BIG-IP Advanced Firewall Manager (AFM).
JT
Manager Strategic Planning at Endurance International Group
Identifies a request that comes up multiple times, block holds that particular IP, and lets the genuine traffic pass through
Genuine traffic coming in is still getting better. While I understand that it's some sort of algorithm that is written in this scale, that algorithm can be a little bit better because sometimes while we are doing DDoS mitigation, genuine traffic does get blocked. While it is one of the greatest features it can still be improved. I would like to see a dashboard that shows you the data that is transferred from which end. It's where people start looking at abuse management. People keep questioning when the mitigation is on what service it is and how many GBs are passing through. An end user dashboard that will help you identify all of these questions and that can be visible in your entire organization is something that would make sense.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Cloudflare DNS is security."
"The initial setup is extremely easy but will require access to your Domain Name Servers."
"I get a lot of value from Cloudflare's API because it enables you to build a separate environment inside the solution. You can create a domain for performing test requests before you move to the production environment and connect various domains."
"Their free account offers an awful lot of functionality and savings alone, before you get on to the minimal $20 a month for a Pro account which comes with its own great list of features."
"The overall performance of this solution is what makes it one of the best solutions on the market."
"I didn’t have to pay anything for better website security and reduced server load."
"From a technical point of view, Cloudflare is the best CDN."
"Easier http to https redirect using page rules"
"The features of F5 BIG-IP Advanced Firewall Manager that have proven most effective in securing the network are significant."
"I would say it's a good, stable solution; we haven't had a major issue with the AFM."
"The most valuable features for me are stability, availability, and security, along with the ability to manage multiple features to secure my applications."
"The most valuable feature of F5 BIG-IP AFM is all of my workers enjoy using it."
"The most valuable features of F5 BIG-IP Advanced Firewall Manager (AFM) are the web gateway, load balancing, services, and applications available."
"The solution is very straightforward, and the usability is great."
"The protection is very useful."
"CGNAT is one of its strong areas."
"Scalability is awesome, and they have grown two folds or three folds since we started using them, with no concerns even as we protect close to 60,000 hosted sites for business and e-commerce customers."
"In the DDoS it's difficult to validate what is a genuine request from an end user. We've started being able to do that with the logistics that they have set up. With the protection that they have provided, they are able to identify what is valid and what is not valid. We see that a person who is getting DDoS Neustar service is able to block that particular user. However, while they are doing that it doesn't affect other customers on the server."
 

Cons

"The installation was complex until I learned what I had to learn."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"I think they have failed with their technical support."
"Although I think it's quite good, it doesn't provide me with all the features I would expect to have if I were using Imperva."
"The reporting can definitely be improved to offer a lot more explanation on something that may have happened or has actually happened."
"I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us."
"It should confirm audit findings of the assigned area with auditees to ensure that the audit conclusions are based on an accurate understanding of the issues."
"There are some issues with the CDN services."
"Deployment times vary according to the customer. It needs to be heavily configured. You need to look and you need to observe the behavior of the traffic before you can start configuring everything. It can take time."
"NGINX, which F5 purchased, has room for improvement in its features, particularly its load balancing or application load balancing features."
"It is a little bit expensive, and I think about additional features they could have in the future to make it even better."
"If you compare it with the next-generation firewalls, then definitely this tool is not comparable."
"The solution doesn't really meet our requirements for an edge firewall."
"We would have preferred to have support when we first started"
"For configuring the firewall, every single vendor on the planet has pretty much the same logic when it comes to firewalls, and F5 has a completely different approach and completely different behavior."
"The product is a little expensive but it is such a good solution and unified that the cost is worth the price."
"I would like to see a dashboard that shows you the data that is transferred from which end. It's where people start looking at abuse management. People keep questioning when the mitigation is on what service it is and how many GBs are passing through. An end user dashboard that will help you identify all of these questions and that can be visible in your entire organization is something that would make sense."
"Genuine traffic coming in is still getting better because sometimes while we are doing DDoS mitigation, genuine traffic does get blocked."
 

Pricing and Cost Advice

"A free version of the solution is available."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"The product's pricing is minimal compared to other products."
"The cost primarily depends on the size of the organization."
"The pricing for the service is reasonable, neither excessively cheap nor prohibitively expensive. It aligns well with the value of their solution."
"We are using the free version."
"There are no additional costs beyond the standard licensing fees."
"We don't have any issues with the price."
"F5 BIG-IP Advanced Firewall Manager is not an expensive solution."
"The solution is slightly on the higher priced side."
"It is somewhat on the expensive side although it is worth the additional cost."
"We need to pay a yearly licensing fee for the solution."
"The product is expensive."
"It's very expensive, and you pay extra for the models."
"We have purchased a five-year licensing package for the product."
"As per pricing, I would not say cheap, but little higher than cheap, but not very expensive. So you can say kind of value for money solutions."
Information not available
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
909,679 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Financial Services Firm
10%
Manufacturing Company
8%
Computer Software Company
8%
Financial Services Firm
13%
Construction Company
11%
Comms Service Provider
8%
Engineering Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise11
Large Enterprise26
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise5
Large Enterprise14
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What is your experience regarding pricing and costs for Cloudflare DNS?
The pricing, setup cost, and licensing for Cloudflare are a bit on the higher side overall.
What is your experience regarding pricing and costs for F5 Advanced Firewall Manager?
The standard license is reasonably priced, but additional features like the WAF can be more expensive. There are plen...
What needs improvement with F5 Advanced Firewall Manager?
Currently, there are no weaknesses or disadvantages in F5 BIG-IP Advanced Firewall Manager (AFM) that I have identifi...
What is your primary use case for F5 Advanced Firewall Manager?
I am starting to learn and working with F5 team to conduct a proof of concept, and I do have experience with F5 Rules...
Ask a question
Earn 20 points
 

Also Known As

Cloudflare DNS
F5 AFM, F5 Advanced Firewall Manager
Neustar UltraDDoS, UltraDDoS
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office
Choxi
Find out what your peers are saying about Radware, Cloudflare, NETSCOUT and others in Distributed Denial-of-Service (DDoS) Protection. Updated: August 2026.
909,679 professionals have used our research since 2012.