TrustRadius: an HG Insights company

F5 BIG-IP Access Policy Manager (APM) Reviews & Insights

Score8.9 out of 10

23 Reviews and Ratings

Who buys & uses F5 BIG-IP Access Policy Manager (APM)

Based on 217 HG Insights installations.

Powered by

Insights from F5 BIG-IP Access Policy Manager (APM)

Synthesised from 8 verified reviews.


Synthesised from 8 reviews | Last Published May 27, 2026


F5 BIG-IP Access Policy Manager (APM) is deployed by organizations primarily to secure access to applications, particularly those exposed to the internet, and to enable secure remote work environments, including virtual desktop infrastructure. In TrustRadius reviews, it is frequently highlighted for its robust policy management, often facilitated by its Visual Policy Editor, and its strong support for diverse authentication methods, including MFA, SAML, and OIDC, allowing integration with various identity providers for seamless access.

Reviewers consistently report that APM serves as an effective central solution for Multi-Factor Authentication and Single Sign-On, contributing positively to security posture and user experience. However, some reviewers note challenges with the user interface and configuration management, particularly for replicating settings and reusing policy objects. Advanced configurations for OAuth and API protection are also cited as areas needing refinement. Despite these points, the overall sentiment indicates APM is a powerful and manageable solution for access control.


  • Robust policy management via Visual Policy Editor (VPE)
  • Strong support for diverse authentication methods (MFA, PKI, RSA, LDAP, SAML, OIDC, OAuth)
  • Seamless integration with various identity providers
  • High degree of customization and granular access control
  • Effective central solution for Multi-Factor Authentication (MFA) and Single Sign-On (SSO)
  • Challenges with user interface and configuration management
  • Difficulties in replicating configurations and reusing policy objects
  • Advanced configuration for OAuth and API protection could be more robust
  • Specific security feature concerns, such as JWT token processing
  • Lack of integrated zero-trust VPN for outbound connection scrutiny
Loading Reviews List....