F5 BIG-IP Local Traffic Manager (LTM) Reviews

We are in the security business, basically working in two segments; the first is in the financial sector, with the largest banks in the country, and second, we work with some government organizations and corporate businesses. Only B2B for now, not much retail. We have a few projects in insurance companies. The solution is deployed on-premise in our office and we basically use it for demo and testing purposes. We deploy for our customers both on-premise and on cloud. We are a distribution channel, like a reseller. I'm a channel development manager.

For BIG-IP, I think the most requested functionality is its NetFlow balancing and traffic balancing, as well as its secure access and its optimization of access to applications. The solution is the most requested by our customers, so it's an important direction for our business.

I'd like to see a more intuitive interface. The market now is moving into salvage services, different kinds of services, not only hardware solutions. 

I've been using the solution for four months. 

The product is scalable, we have around 200 users in our company. In terms of our customers, there would probably be over 1,000 users.  We have a huge company, but our department for network security products consists of about 25 people. In half of them, users are the technical specialists.

We're just starting to work on setting up our own support service for clients. We hope that maybe next year we could add support products to our product line also.

We have other vendors in our portfolio, all of them working for performance network, performance optimization, and application implementation. We generally propose a few solutions to our customers. 

We have a technical department with a lot of certified specialists who work on the implementation side of things and we also support some of our departments and external clients. It's not my area of expertise. 

We are planning to expand to other segments in the market, healthcare or logistics or even some FMCG retail companies. We hope the F5 solutions will help us to expand. We intend to continue providing this solution and to involve more partners in the F5 business. I would recommend this solution. 

I would rate this solution a nine out of 10. 

Our company is based in different geographical locations and we need to create SD-WANs with tight security while allowing remote access to our resources. To manage that and to manage the whole network, we use BIG-IP.

When we purchased the product, we found it to be a bit expensive.

If we decide to migrate to the cloud, I don't think that BIG-IP is a good solution and we probably won't use it.

If the price for a cloud-based deployment can be matched with their competitors the I think it would be a far better solution. 

I have been using F5 BIG-IP for almost two years.

BIG-IP is stable and we plan to continue using it. We don't want to change because we're happy with what it's doing unless we switch over to the cloud. I think that cloud sizing is too heavy.

This is a scalable product. There are three people who manage it, but it's applicable to the entire organization, so there are approximately 1,500 users.

I think that technical support is pretty good. On a scale of one to ten, I can reasonably score them a nine.

The implementation and deployment happened before I joined the company, although I have reviewed the procedure and did not find anything challenging when it came to installation. Once you understand how to work with the product, it is easy to manage the services.

Our in-house team takes care of the maintenance. There are three people who manage it, and once every three months, we spend 30 or 40 minutes reading and clearing up the logs.

I don't think that this product really provides value for the money. However, what you get for the cost is satisfactory. It's not like I won the lottery. This is a solution that does what it's supposed to do at the price point.

When we purchased additional licenses for our other locations, we received a discount of between 20% and 25%. My understanding is that they matched the competitor's price.

If we move all of our on-premises systems onto the cloud, we will probably look for another solution. We may rely on the cloud provider for this. 

We have not felt the need to upgrade to the most recent version or do any updates on this product because we're pretty happy with what we have.

Overall, this is a good product and if one can afford it, then I would recommend it.

I would rate this solution eight out of ten. 

The anti-bot protection is very good. They are able to see bots from their system quite well. It has helped our customers to filter real traffic from fake and allows the real traffic to access the application. With the profile provided, you can block many new scans and scripts that are constantly generating traffic to their web service.

When you create an autofile, its profile takes a long time to generate the view in the VIP. That is probably due to the performance of the device, however, when you load a specific profile, the browser takes more than one minute to show the information. 

The web interface could be better.

The solution should allow for the creation of custom signatures. Right now, I see that can be a little bit complicated to create new or personal signatures in the VIP.

The way that policies are created should make it easier to maintain the solution. 

The product needs to implement some kind of artificial intelligence or machine learning that can start to generate fewer false positive requests. We tend to have a lot of false positives. The policy should be created in such a way as to help lower false positives.

There should be better reporting. Our customers ask us for reports quite often. It would be ideal if the solution itself was able to generate various types of reports for them instead. 

I've been working with the solution since 2014.

This year, we had a couple of issues. We found some bugs in version 15. They are very good, however, at finding the issue and generating a hotfix quickly so that we can apply the hotfix to the device. In the general, I would say that version 15 has been very stable overall.

Whether you can scale easily or not depends on the device and the sizing. For example, if you have an E 2000 or I 4000, you might have a lot of traffic and the device cannot handle it very well. Scalability with the performance was the one issue that affected us this year.

Most of the customers that we have are enterprises. They are banking and insurance customers. They're quite large, which is why we need the scalability that we do.

We always use technical support and the team helps us very well. They're able to effectively find and fix issues and they respond very quickly. We're quite satisfied with their level of service overall.

We also work with Palo Alto firewalls. I've worked with Check Point as well.

The initial setup is not too complex. It's pretty straightforward.

It's straightforward to create a new policy or a new postulate or a new deployment. It takes a couple of minutes to create a new deployment and it's rather easy to do so.

We're a reseller for Enterprise companies such as Banking and Retail.

I'd advise that if a customer wants to implement this product, that they find a partner they can have a strong relationship with. The partner needs to be able to effectively implement the product and train your staff on the proper usage. That is, of course, if the client wants to manage it themselves in the long run.

Overall, I would rate the solution eight out of ten. If they could improve their web interface, generate reports, and have all the configuration on a single page on the platform, I'd rank it a bit higher.

Our primary use case for this solution is as an alternative for ADT. We work with standard enterprise customers because this product is not affordable for the SME, it's not a cheap solution. We are partners with F5 and I'm a pre-sales and technical executive. 

The most valuable feature is the iRule.

The reporting could be improved and I'd also like to see the UI adjusted to make configuration easier. There are some things in the F5 configuration that are complicated. 

I've been using this solution for 16 years in total, continuously for the last seven years. 

I think this solution is very stable. 

This is a scalable solution. 

Compared to other solutions, the technical support is not very user friendly. 

I previously worked with Fortinet which is a much more reasonably priced solution. 

The initial setup is somewhat more complex than you would find in other solutions. Implementation can be completed in a couple of days but in terms of the configuration firewall of the product, for any application it will take a minimum of 15 days and up to a month.

If a company wants a good solution and has the money for it, I would recommend F5. 

I would rate this solution an eight out of 10. 

We are a solution provider and this is one of the products that we implement for our clients.

Some of our clients use it as a load balancer. It can also be used as a web application firewall to protect your web-based applications from attacks.

The most valuable feature is the proxy. It is set up as a reverse proxy in front of the server. This feature allows me to do anything with the traffic, such as inspecting it. Most other solutions don't provide you with this capability.

This solution allows you to write scripts that can run on F5 devices. These scripts can be used to monitor traffic and look for keywords, and then perform a corresponding action such as blocking or allowing the request, or giving the user an error.

Big IP supports load balancing from network layer four up to layer seven.

More training should be available to customers. There is a guide that is available on the internet, but the training is not as good as others, such as Cisco. While F5 does have a big market share, it is not easy to find a well-training F5 engineer. If they made it easier for engineers to get F5 training then it would be better.

I have been working with F5 BIG-IP for five years.

This product is very stable. I have seen some instability with newly released versions, so I normally wait for a stable release before I upgrade an older one.

I have often been in touch with technical support and most of the time they are good. The response time is usually about one hour, although if it is a priority one issue then they will respond within 40 minutes at the maximum.

The initial setup is straightforward. If the analysis is already complete then it should only take five or ten minutes to deploy.

When you purchase the virtual edition or the hardware, it comes with the base license. There are additional costs depending on what modules or what functionality is required.

I consider F5 to be my network within my network because the traffic has to go through it. This includes things like the load balancer.

My advice for anybody who is implementing this solution is to learn and understand the architecture of the device. It will do very well for you if you understand it.

I would rate this solution a nine out of ten. 

We mainly use this solution for application delivery and application security - the product is used on a daily basis. We are partners of F5 and I'm the head of IT infrastructure. 

The application firewall is a very good feature. 

The policies management could be improved, that's why I'm doing a comparison of other solutions. This is also a very expensive solution. 

I'd like to see external loading included as part of the solution. 

I've been using this solution for seven years. 

The solution is stable overall. 

This solution is scalable. 

The technical support is very good. 

Deployment time depends on the size of the organization. In some places it takes a week or two; in others it can take three months. There is very little maintenance required but if necessary we do it ourselves. We do upgrades ourselves and maybe rely on technical support once a year. 

Everything is included in the license fee but it's a very expensive solution. 

I would rate this solution an eight out of 10. If it were less expensive I'd rate it higher. 

We use the whole pallet of the Big-IP products starting with the Application Security Management, the web application firewall for the F5. We use it for the protection of files at sites and we also use the load balancer. I also have experience with the airlock and we're now researching the possibility of exchanging our Big-IP system with something else. We're hoping to find a solution that's better for the cloud but which can be a hybrid. We have a partnership with several vendors and I work as an IT security engineer.

I've found Traffic Learning to be the most valuable feature in this solution. 

This solution could be improved by reducing the cost. It's the main reason that we're considering another option for our website even though we're very satisfied with the way the Big-IP works and the way Big-IP protects our environment, but it's very expensive. We are keen to find out if there is a similar system for technology that would suit us and cost less. 

I've been using this solution for three years. 

This is a very stable solution. I've been using their products for years and have never had any issues. 

This solution scales with ease. You can add equipment, reduce equipment, add configs, it is very flexible.

Technical support respond quickly and they are helpful. Their communities are very involved. I would say I'm super satisfied.

Sometimes implementation is simple and sometimes it's complex, it really depends on the situation. If you've done it before, deployment can be accomplished in half an hour, but if it's from scratch it can take anywhere up to two days. For anyone with experience in deploying this kind of equipment, it's usual that something always happens and problems arise. It usually takes one or two engineers to carry out the deployment. 

I don't have much advice other than to suggest that people look for high quality solutions to implement. It's really about what the client wants and if they're prepared to take the risk of a less expensive solution they need to realize that it might also mean a product that is less good quality. 

I would rate this product a nine out of 10. 

Our primary use case is for ADC (Application Delivery Controller) and SSL VPN prospectively worked for the PoC.

This solution is very good and the product stability is excellent.

It has very good production for SMB protocol.

I found the most valuable feature to be the SSL VPN.

The license terms for "non-commercial" are challenging for us.