F5 Networks offers the Advanced Web Application Firewall (WAF) to provide bot defense, advanced application protection, anti-bot SDK, and other features.
N/A
NetScaler
Score 8.7 out of 10
N/A
NetScaler ADC is an application delivery controller.
Advanced WAF is well suited for protection against account enumeration attacks, protection against known and new increasing attack vectors through out of the box attack signatures and threat campaigns. Also, up to date and accurate IP intelligence database to block based on known IP reputation.
Citrix NetScaler is suited to any environment where hardware load-balancing, application delivery or SSL offloading is a requirement. It's a product that can be used to manipulate traffic flows in a multitude of different ways and its only limit is the protocol, application and imagination of the administrator. It's not a product that includes helpful wizards to guide the admin through each process gracefully. While it is a fairly intuitive product to use, it's not for someone who is not initiated into the ways of networking and network protocols and communication. Nor is this a product that would lend itself solely for the usage of single usage scenarios where small traffic flows would be expected (although if desired the VPX product would probably suffice in that specific scenario depending on the environment)
So the product definitely is helping us for sudden attacks through DDOS, some injection ingestion into UI URLs, and definitely it's capturing those and I definitely see that as an advantage for us. They can stop the hackers from using our endpoints.
The UI for events. E.g., clicking the "Accept" button does nothing.
Traffic learning suggestions are often very incorrect. We were originally suggested to use "Automatic" learning, and had to completely scrap the policy due to the suggestions.
"All in one" dashboard for viewing application URL/parameter overrides per policy.
Most* of it is very intuitive and easy to use. The "Help" section is fairly fantastic. See some of my other comments about things like the "Traffic Learning" section being wildly wrong sometimes, and also the event logs with UI buttons that don't do anything. Overall though, it's an excellent product.
I gave the NetScaler a 7 here because the system once configured and deployed is very easy to use. However, if you did not deploy the system and do not have the fundamental background knowledge then you will have trouble using the product in general. Overall it is a great product and service but does typically require professional services to be deployed.
Overall, our organization's experience with Citrix support is that support can be hit or miss. Oftentimes it takes multiple attempts and much longer than desirable to obtain a viable solution for issues experienced with their products. It would be great to see Citrix invest time, effort, and almighty dollars into improving their support and bug fix process across the board.
I believe that in the case of Big-IP F5, it has a lot of power, a lot of features including the VPN features and also the evaluation of security posture of the devices that connect through VPN. That's very solid and that's something that is not found in all the WAF solutions and so I haven't seen that in Azure.
Netscaler has more features than F5 BIG-IP APM product and easier to manage with friendlier user interface for network admins. It was more cost efficient as well and if you have a Citrix XenApp and XenDesktop environment, it is more compatible with those products as well. Our annual maintenance cost is lower as well.
In our case it has been great because the pricing is just right for all the features that we have on the platform and the flexibility. In fact, we acquired another license last year, so that's something that we're interested in. We are currently moving towards the cloud with our ERP systems and eliminating the IBM platform, so we would like to see that F5 virtual option available on Azure.
