Advanced Firewall Manager

Overview
Specifications
Datasheet
Ordering Information

F5 BIG-IP Advanced Firewall Manager (AFM) is a high-performance, full-proxy network security solution designed to protect networks and data centers against incoming threats that enter the network on the most widely deployed protocols. Built on F5’s industry-leading Application Delivery Controller (ADC), BIG-IP AFM gives service providers a scalable, subscriber-aware platform that delivers the flexibility, performance, and control needed to mitigate aggressive distributed denial-of-service (DDoS) and protocol attacks before they overwhelm and degrade services.

BIG-IP AFM’s unique application-centric design enables greater effectiveness in guarding against targeted network infrastructure-level attacks. It tracks the state of network sessions, maintains deep subscriber and application awareness, and uniquely mitigates attacks based on more granular details than traditional firewalls. With BIG-IP AFM, organizations receive protection from more than 100 attack signatures—more hardware-based signatures than any other leading firewall vendor—along with unsurpassed programmability, interoperability, and visibility into threat conditions.

Key Benefits

Ensure services availability

Secure the network edge and core from DDoS and protocol threats with in-depth rules customization, and increased performance and scalability.

Protect with full proxy capabilities

Inspect all incoming subscriber connections and server-to-client responses, and mitigate threats based on security and protocol parameters before forwarding them.

Inspect SSL sessions

Decrypt SSL traffic to identify potentially hidden attacks—at high rates and with high throughput.

Automate security deployment

Simplify configuration with security policies oriented around services and protocols and an efficient rules and policy GUI.

Scale to meet network demand

Meet demands for higher bandwidth usage and concurrency rates with F5’s proven virtual software editions and hardware systems to flexibly ensure performance while under attack.

Consistent protection for containerized applications

Protect container-based applications regardless of platform or location with attack detection and mitigation services to mitigate attacks and risks.

Flexible automation options for ease of integration into operations

Extensive integration with third-party and public cloud automation tools to speed BIG-IP AFM into production.

Actionable reporting and visibility

Easily understand your security status with rich telemetry that can be customizable into reports and charts to provide insight to all event types and enable effective forensic analysis.

Reduced Operational Complexity

Single platform to consolidate and deliver Firewall, CGNAT, DNS, protocol protection and deep packet inspection to reduce operational complexity and costs.

BIG-IP Platforms

Virtual Editionsof BIG-IP software run on commodity servers and support the range of hypervisors and performance requirements. VEs provide agility, mobility, and fast deployment of app services in software-defined data centers and cloud environments. See the BIG-IP System Hardware, VIPRION, VELOS, and Virtual Edition data sheets for more details. For information about specific module support for each platform, see the latest release notes on AskF5. For the full list of supported hypervisors, refer to the VE Supported Hypervisors Matrix.
BIG-IP iSeriesappliances deliver quick and easy programmability, ecosystem-friendly orchestration, and record-breaking, software-defined hardware performance. As a result, customers can accelerate private clouds and secure critical data at scale while lowering TCO and future-proofing their application F5 solutions can be rapidly deployed via integrations with open source configuration management tools and orchestration systems.
BIG-IP rSeriesappliances bridges the gap between traditional and modern infrastructures with a rearchitected, API-first platform designed to meet the needs of your traditional and emerging applications. The new F5 rSeries delivers unprecedented levels of performance, a fully automatable architecture, and the highest reliability, security and access control for your critical applications.
VELOSplatform is the next generation of F5’s industry-leading chassis-based systems, which delivers unprecedented performance and scalability in a single Application Delivery Controller (ADC). You can seamlessly scale capacity by adding modular blades in a chassis, without disruption, and VELOS allows a mix of traditional BIG-IP tenants as well as next-generation BIG-IP tenants in the future.
VIPRIONmodular chassis and blade systems designed specifically for performance and for true, on-demand, linear scalability without business disruption. VIPRION systems leverage F5’s ScaleN clustering technology so you can add blades without reconfiguring or rebooting.

Table 1. F5 BIG-IP Software License Modules Specifications

iSeries Models	LTM	DNS	APM	AFM	AWF	CGN	SSLO	PEM	BR	BT
F5-i2600	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌
F5-i2800	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅
F5-i4600	✅	✅	✅	✅	✅	✅	❌	❌	✅	✅
F5-i4800	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅
F5-i5600	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i5800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-i5820-DF	✅	✅	✅	❌	✅	❌	❌	❌	✅	✅
F5-i7600	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i7600-D	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i7800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-i7800-D	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅
F5-i7820-DF	✅	✅	✅	❌	✅	❌	❌	❌	✅	✅
F5-i10600	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i10600-D	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i10800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-i10800-D	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅
F5-i11400-DS	✅	❌	❌	✅	✅	❌	❌	❌	✅	✅
F5-i11600	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i11600-DS	✅	❌	❌	✅	✅	❌	❌	❌	✅	✅
F5-i11800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-i11800-DS	✅	❌	✅	✅	✅	❌	❌	✅	✅	✅
F5-i15600	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i15800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-i15820-DF	✅	✅	✅	❌	❌	❌	❌	❌	✅	✅
rSeries Models	LTM	DNS	APM	AFM	AWF	CGN	SSLO	PEM	BR	BT
F5-r2600	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌
F5-r2800	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅
F5-r4600	✅	✅	✅	✅	✅	✅	❌	❌	✅	✅
F5-r4800	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅
F5-r5600	✅	✅	✅	✅	✅	✅	❌	❌	✅	✅
F5-r5800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-r5900	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-r5920-DF	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅
F5-r10600	✅	✅	✅	✅	✅	❌	❌	❌	✅	✅
F5-r10800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-r10900	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-r10920-DF	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅
F5-r12600-DS	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅
F5-r12800-DS	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅
F5-r12900-DS	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅
VELOS Models	LTM	DNS	APM	AFM	AWF	CGN	SSLO	PEM	BR	BT
VELOS-CX410	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
VELOS-CX410-N	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
VIPRION Models	LTM	DNS	APM	AFM	AWF	CGN	SSLO	PEM	BR	BT
VIPRION-2200	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅
VIPRION-2400	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅
VIPRION-4480	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅
VIPRION-4480	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅