For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Iselator_38937's avatar
Iselator_38937
Icon for Nimbostratus rankNimbostratus
Nov 21, 2012

F5 ASM WAF vs. Akamai Kona Cloud based WAF

We plan to sell our customer an F5 ASM WAF solution (added to the traffic manager). The customer asked us why they should invest into an inhouse deployment when they could get WAF from Akamais cloud ...
app sec
BIG-IP Access Policy Manager (APM)
security
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Nov 21, 2012
I'm not even that familiar with ASM but my concerns about using Akamais solution (which I've only briefly looked at) would run along these lines;

 

1) This solution wouldn't protect against DDoS attacks directly targeted at you if the attackers discovered your 'origin' IP addresses

 

2) I'd imagine your ability to build, test and customise your security policy will be limited as would your abilities in relation to responses to attacks

 

3) Your costs are not fixed

 

4) Are you really happy to 'outsource' your security, who is responsible if it fails?

 

 

I'm sure someone better informed than me where security is concerned will also provide some input.