F5 BIG-IP Access Policy Manager (APM) vs. NetScaler

In the current digital world we are moving into, I would recommend F5 for all SMB to enterprise organizations. There are various models to pick from. This helps secure the environment and make the network robust to any sort of attacks. I am not able to think of any reason why one should not deploy or this device is less appropriate because nowadays every small company has application / ERPs. It is also worthwhile to note in case if all your apps are being deployed in the cloud by another service provider who provides you SAAS access, in that case, you can be at ease as securing these app falls on to the provider. However, should the budget be available I would recommend deploy this and enhancing your security.

Incentivized

Citrix NetScaler is suited to any environment where hardware load-balancing, application delivery or SSL offloading is a requirement. It's a product that can be used to manipulate traffic flows in a multitude of different ways and its only limit is the protocol, application and imagination of the administrator. It's not a product that includes helpful wizards to guide the admin through each process gracefully. While it is a fairly intuitive product to use, it's not for someone who is not initiated into the ways of networking and network protocols and communication. Nor is this a product that would lend itself solely for the usage of single usage scenarios where small traffic flows would be expected (although if desired the VPX product would probably suffice in that specific scenario depending on the environment)

Incentivized

• Source and destination IP Base policy
• Source and application base policy
• Ssl VPN with load balancing and fail over policy working fine.

Incentivized

• The GUI interface is fairly easy to learn making ramp-up time faster than some similar products.
• It is used by thousands of companies around the globe so finding free support on Google is usually quite easy.
• The virtual implementation version of the product runs on a Linux-based hypervisor install so no additional licensing is needed for the OS.
• When used in conjunction with a Citrix Web front/Storefront, the integration is very tight making the passing of packets very quick.
• Even in the lesser VPX versions, there is the ability to have a cluster of Netscalers to allow for uptime capability.

Incentivized

• CCU Licenses are limited by device and are not shared between APM devices
• User sessions are not stored globally, so persistence can be an issue with users all over the world
• Configuration can get complicated when split up between multiple sites

Incentivized

• At times it seems like there is a flurry of firmware updates needed to remediate security vulnerabilities which creates some overhead.
• Out of the box automation using ADM is a bit lacking
• Nit picking but occasionally there are minor config changes that need to be done via CLI or GUI but nothing significant.

Incentivized

Integration with F5 BIG-IP systems that we plan to keep using for a while.

Incentivized

If F5 BIG-IP Access Policy Manager usability is fine it's not hard to use if you read the documentation but it does feel dated and could use a responsive design update to modernize user interface to current standards.

Incentivized

I gave the NetScaler a 7 here because the system once configured and deployed is very easy to use. However, if you did not deploy the system and do not have the fundamental background knowledge then you will have trouble using the product in general. Overall it is a great product and service but does typically require professional services to be deployed.

Incentivized

Overall, our organization's experience with Citrix support is that support can be hit or miss. Oftentimes it takes multiple attempts and much longer than desirable to obtain a viable solution for issues experienced with their products. It would be great to see Citrix invest time, effort, and almighty dollars into improving their support and bug fix process across the board.

Incentivized

F5 BIG-IP Access Policy Manager integrates extremely well with the rest of our F5 infrastructure which is a big plus and provides us with a familiar user interface, but it isn't as scalable in its current iteration as something like Zscaler Private Access.

Incentivized

Netscaler has more features than F5 BIG-IP APM product and easier to manage with friendlier user interface for network admins. It was more cost efficient as well and if you have a Citrix XenApp and XenDesktop environment, it is more compatible with those products as well. Our annual maintenance cost is lower as well.

Incentivized

• Positive is that due to how much F5 BIG-IP Access Policy Manager can do, the F5 is the landing spot in our environment for MFA authentication.
• It has allowed a technology the company originally bought for load balancing to be used for multiple purposes.
• F5 BIG-IP Access Policy Manager has made the environment more trusting of F5 as a MFA.

Incentivized

• Features - There are many features to be used that we haven't quite gotten to.
• Licensing - The need for licensing is one of those necessary evils.
• Reporting - It gave our management team the requested graphs and statistics on usage.

Incentivized