F5 Distributed Cloud Bot Defense

F5 Distributed Cloud Services  is being used for web application firewall along with API security, bot protection, and DDoS protection.

There are two scenarios involving web applications and mobile applications with applications hosted across private clouds and public clouds. When switching from one cloud to another, there is no need to change anything on the backend servers on the cloud service provider. Only the DNS level on F5 itself requires changes.

F5 provided a cloud security platform called a SaaS platform, which is a distributed cloud platform where CNAME and DNS changes can be added, and then the application load balancer can be deployed straight away.

F5 Distributed Cloud Services  has been used for two years for DDoS protection, and there is a particular feature called API protection. Within API protection, there is malicious user mitigation, which is one particular technology that has been implemented. This is a kind of advanced bot attack prevention.

Malicious user mitigation is an AI/ML-based technology that was introduced by the F5 team, and this particular MUG protects rate limiting. If some users are having anomaly detection or someone is trying to do a bot attack, it will create a CAPTCHA challenge for that particular user alone and not for all users.

For example, if someone is trying to act as a rogue, it will create a CAPTCHA challenge in the backend system on that particular system, so they cannot try again and again at the same time. It is for a concurrent session, and it will give the CAPTCHA challenge. This MUG, malicious user mitigation, prevents bot attacks.

F5 Distributed Cloud Services includes the real-time intelligence feature, which helps with threat response strategies from a threat intelligence perspective. For example, if there are geo-restrictions or geo-based restrictions, sometimes people may come in through proxy-based servers, and it will prevent that.

The load balancing feature optimizes application performance. Observability  is the basic piece where F5 got introduced. This observability piece provides end-to-end visibility on the application performance. It gives complete end-to-end visibility across network latency and application performance issues.

Sometimes when it is getting more than 200 pages, it throws errors such as 300, 400, or whatever has been configured, including 500 errors.

F5 Distributed Cloud Services has helped improve traffic management efficiency. Most applications are hosted in the Check Point and F5 firewall, F5 web application firewall, where applications and traffic management can be accessed in a single dashboard.

Automated threat detection is a basic feature of F5 Distributed Cloud Services meant for that purpose. There are two scenarios with automated threat detection, which is provided by F5. It is a completely machine learning solution that came from the bot defense, and it automatically protects against sophisticated attacks.

Last year there was a downtime of 30 minutes across the cloud distributed console, and that was the only impact observed. Since 30 minutes of downtime is huge for applications, maintenance, it impacted RPO, RTO, and all. The F5 CTO and their senior management team addressed that issue.

For availability, they have added additional clusters across all the regional edges in the Kubernetes  clusters to enhance availability. However, this improvement needs to be monitored since it was a past incident.

F5 Distributed Cloud Services has been used for more than two years.

F5 Distributed Cloud Services is stable, and they are improving also.

There is no issue on the scalability part of F5 Distributed Cloud Services. The only thing is the initial phase is a challenge; scalability is not a concern. On the initial stage regarding pricing, the moment of committing is the only concern. On the scalability part, there have not been much issues.

Technical support from F5 is good compared to Cisco and HP. This support is very good. F5 provides remote support also. I would provide 9.5 for support.

F5 Distributed Cloud Services has an easy implementation across all the service providers including AWS , GCP, and Azure . F5 DXE has been implemented everywhere, and it is very easy to integrate.

F5 Distributed Cloud Services was deployed with a partner. Initially, the partner did not support it, but the team manages other solutions, so the people know the technology and have easily adopted it.

There is definitely a return on investment in F5 Distributed Cloud Services.

Compared to other providers, F5 Distributed Cloud Services is a little expensive. However, on the performance side, it is a robust solution. If comparing Check Point and F5 Distributed Cloud Services, F5 is a little expensive. The only difference is in price; technically, they are pretty much the same.

Whenever feedback is given, whether positive or negative, F5 takes it as a serious note and then fixes it. A lack of functionalities is not an issue. At the earlier stage when F5 Distributed Cloud Services was purchased two years ago, there was a lot of technology that was not able to be deployed.

For example, there were three to four different applications from different companies, and they could not be seen in a single dashboard. It was necessary to go to each and every dashboard and collect the centralized access management part. Now F5 has fixed it, and it is working fine. Overall, I would give F5 Distributed Cloud Services a rating of 8 out of 10.

There are two main use cases for Distributed Call Services: DDoS or Distributed attacks protection and WAF  web application security or firewall.

All features are valuable. In a multi-cloud or distributed cloud, there are many protection possibilities from data to web application or API protection, including bot mitigation. This is a comprehensive package for web application security. The main benefit is Web App Security, offering a complete security package from DDoS to web application firewall, API protection, and bot mitigation.

It's a long way to be perfect, of course, as with all solutions. The main issue is integration with other parts or products of F5, like on-premise WAF . There are some problems, mainly from the perspective of implementation and customer expectations, which sometimes differ from reality.

I worked for an F5 partner, not as a customer. We used the Services line for DDoS protection. It was the main use case for Silver Line for about one and a half years.

There are compliance issues, mainly if a customer wants something that isn't possible, yet not with the functionality.

I have had no problem with scalability yet, so it's good.

From my point of view, support is responsible and okay.

Distributed code is easy to set up. If rated on a scale from one to ten, where ten means very easy, I would probably rate it a nine.

For those who want to use Azure  Cloud Services, consider implementing it. It's pretty good. From my point of view, it's easy to set up and offers strong functionalities.

The overall product rating is nine out of ten.

A common use case is multi-cloud networking. If a global customer has applications on different clouds that come together as one application, F5 can be a good entry point for that application with additional security.

Using F5 Distributed Cloud Services  eliminates the need for hardware in your data center, resulting in cost savings.

F5 Distributed Cloud Services  is valued for multi-cloud networking and easy integration with DevOps tools and Kubernetes . It offers comprehensive security, including DDoS protection, API protection, and application protection through a unified console. Multi-cloud networking and API Protection  and Discovery are unique features.

F5 is known for being the best load balancer in the market. Customers with an existing module can easily adopt additional modules without investing in new hardware.

The pricing could be adjusted to better meet the needs of typical customers in regions like Poland, where the product is considered too expensive.

I estimate F5 Distributed Cloud Services has been available for no more than two years.

I rate the overall solution as highly stable, scoring it a ten out of ten.

I rate the scalability of the solution at a ten out of ten, indicating that it should work flawlessly.

I have worked with their support for over ten years and rate it a ten out of ten since the quality is among the best.

I work with other vendors, such as Broadcom, BeyondTrust, and Qualys.

The cloud version is quick to implement, typically taking a few hours.

From my company, one person is usually enough for implementation. For maintenance, there are four engineers who handle duties between teams.

The solution provides a return on investment by eliminating the need for hardware in the data center.

I am not involved in sales, so I do not deal with the pricing aspect directly. I give the cost of the solution a four out of ten since it is not a cheap product.

I recommend the solution for its features like multi-cloud networking and easy integration with DevOps tools. However, cost comparisons with other services show a significant difference.

I'd rate the solution ten out of ten.