Azure VPN Gateway vs F5 BIG-IP APM

Azure VPN Gateway provides VPN access and site-to-site networking with advanced administrative controls. Listed capabilities include SSO and SCIM, device posture checks, and audit logs. Supported platforms and access routes include Windows, macOS, Linux, iOS, Android, a web portal, Azure CLI, and REST API. The service has no free plan, and the listed plan groups specify different bandwidth and tunnel limits. Basic lists 100 Mbps, 10 site-to-site tunnels, and 128 point-to-site tunnels. VpnGw1–VpnGw5 lists bandwidth from 650 Mbps to 10 Gbps, up to 100 site-to-site tunnels, and up to 10,000 point-to-site tunnels. VpnGw1AZ–VpnGw5AZ lists the same bandwidth range and tunnel ceilings. No plan prices are listed here.

F5 BIG-IP APM is now called F5 BIG-IP Zero Trust Access. The product secures and centralizes access to apps, APIs, and data across locations and hosting environments. Its identity-aware proxy applies context-based checks to each application request, while SAML, OAuth, and OIDC support authentication, federation, and single sign-on. Remote access options include per-app VPN, IPSec VPN, and end-to-end encrypted controls. Organizations can connect VMware Horizon ONE (AirWatch), Microsoft Intune, and IBM MaaS360 for mobile device management; REST API connectors can incorporate third-party UEBA and risk engines into access policies. It also integrates with Azure AD Conditional Access policies and F5 BIG-IQ Centralized Management. Deployment options span virtual editions, hardware, and cloud environments. Pricing is on request, and there is no free plan. A 30-day BIG-IP VE trial includes Zero Trust Access with LTM, Advanced WAF, and Network Firewall (AFM). The trial supports several hypervisors and cloud platforms, including VMware ESXi, KVM, AWS, Azure, and Google Cloud Platform.