AWS Config vs. F5 Distributed Cloud Network Connect

To keep track of changes and to answer many compliance issues this is a life-saver. AWS does a good job providing tools like this. Any AWS workload should be monitored with AWS Config. It even is great for troubleshooting and seeing who changed what at what time.

Incentivized

F5 Distributed Cloud Network Connect Would be incredibly useful when having to juggle multiple cloud providers. Also XC would be fantastic for standardization and consistency of the whole networking stack. It may be less useful for incredibly specialized cases where very specific traffic manipulation is needed. Any use-cases with heavy APM usage would have to be carefully considered as those features didn’t make it into XC yet.

Incentivized

• It can help you define rules for provisioning and configuring of your AWS. We use it for this purpose.
• It maintains configuration history. So you can use the AWS Management Console, API, or CLI to obtain details of past configurations
• It gives you a configuration snapshot of all of your AWS resources and you can store it in AWS S3.
• You can integrate it with AWS CloudTrail to correlate configuration changes to particular events in your account.

Incentivized

• Centralized Hybrid ingress for our cloud workloads
• Centralized ingress for our existing on-prem BIG-IP devices
• Application visibility to address end-to-end visibility into the end-user experience

Incentivized

• Vendor lock-in, no easy migration path for example if you want to move some workloads to Azure, you'd not be able to lift and shift.
• Only at an AWS resource perspective - cannot do desired state configuration at an OS level (which makes sense but be good if you could even as a separate feature within AWS Config).

Incentivized

• The support model needs a quite a bit of work. I personally have experienced an outage on the platform. due to mis-configureation Although the outage was due to engineer error it took over 2 hours before we were able to speak to an engineer
• Proxy v2 protocol to allow our organization to capture and view the source IP address

Incentivized

Architectural change with a focus on multi-cloud

Incentivized

The performance has never been an issue for us, the dashboard gives us real-time monitoring and the alert sends us the notification within less than a minute of it happening, this applies to all of the monitored resources on AWS. However we can't (or probably haven't figured out how to) integrate with any other third party services, so we can't really evaluate how it integrates with other services

Incentivized

F5 Distributed Cloud Network additionally interconnects our cloud improving our security and creating secure IPsec SSL tunnels between our clouds, improving the page load of the application published in the Load balancer in Distributed cloud, and additionally adding a security layer easy to implement with the WAF for all web applications in our company

Incentivized

Despite the comparison it is not really apples to apples, the main purpose of the service is quite similar which is to monitor your application or services. In terms of AWS services, AWS Config provides more options to monitor and log your service on the infrastructure level which is very useful on that level and overall will give you more information about what is currently happening. Meanwhile PaperTrail is more suited to monitor and log your service and could only give you information on the application level.

Incentivized

This software as a service (SaaS) links, divides, and protects network traffic over one or more edge sites, data centers, and public clouds. It offers the adaptability needed to operate across many transit choices, such as the F5 Global Network, private corporate networks, and cloud provider linkages. Additionally, faster time to resolution and more effective issue management are achieved by end-to-end monitoring and troubleshooting.

Incentivized

• Enforcing audit requirements
• Easy to set up alerting when there are rule breaches
• Auto remediation reduces the manual policing of such breaches

Incentivized

• Remove VPN
• Reduction of investment in operational support
• Uptime availability
• Access to specialized advice and support
• Eliminar VPN
• Reducción de inversión en soporte operativo
• Disponibilidad uptime
• Acceso a asesoría y soporte especializado

Incentivized