Forum Discussion
This is a great question!
So, as someone who sold this stuff for 12 years - both BIG-IP and XC, I can tell you this: Shape is the Cadillac. You will see f5 strive to offer same services everywhere, though. Today, BIG-IP's best Bot option seems to be AWAF Bot defense profile. XC has its own Bot defense.. same signatures as AWAF. Shape is an upgrade option to both AND SHOULD BE USED IN LIEU OF, because of the AI / ML component. Shape is far from a signature based bot defense. Not every customer feels they need that much dynamic bot defense, so we are simply striving to offer options. If you are using Shape for bot, though.. sure turn off the AWAF bot piece. Of course.. the rest of AWAF is genius and should still be used for day to day usage understanding.
Thanks for the great information. Can I ask just one more thing? The F5 Big-IP and Shape integration can also handle API traffic where javascript can't be inserted by mirroring the traffic from the BIG-IP to the Shape servers right? Similar to the Bot Protection Profile "Challenge-Free Verification" that can be used for API traffic without the injection of a javascript if I am not wrong.
- AubreyKingF5Oct 05, 2022Admin
I believe so, yes. I'm double-checking to be sure.
And yes. Shape can be load balanced for on-prem / high performance type situations.
- AubreyKingF5Oct 06, 2022Admin
Double-checked. Also, to clarify, definitely not a mirror. Load balanced proxies is probably the best way.