Access Policy Manager

Overview
Specifications
Datasheet
Ordering Information

F5 BIG-IP Access Policy Manager (APM) is a secure, flexible, high-performance access management proxy solution managing global access to your network, the cloud, applications, and application programming interfaces (APIs). Through a single management interface, BIG-IP APM consolidates remote, mobile, network, virtual, and web access. With BIG-IP APM, you can create, enforce, and centralize simple, dynamic, intelligent application access policies for all of your apps, regardless of where or how they are hosted.

Applications are gateways to your critical and sensitive data. Simple, secure access to your applications is paramount, but application access today is extremely complex. Apps can be hosted anywhere—in the public cloud, in a private cloud, on-premises, or in a data center. Ensuring users have secure, authenticated access anytime, anywhere, to only the applications they are authorized to access is now a significant challenge. There are different application access methods to deal with these complexities. There are various sources for authorized user identity, as well as dealing with applications that require modern or traditional authentication and authorization methods, single sign-on (SSO), federation, and more, in addition to the user access experience to support and consider.

BIG-IP APM Features Include

Granular access policy enforcement
Creating and managing identity- and context-aware policies
Policy routing
Support for Identity Aware Proxy (IAP) enabling zero trust application access
Context-based authorization with dynamic L4/L7 ACLs
SAML 2.0 identity federation support
Support for OAuth 2.0 authorization protocol
Simplified identity federation for applications with multi-valued attributes
SSO support for classic authentication (Kerberos, header- based, etc.), credential caching, OAuth 2.0, SAML 2.0, and FIDO2 (U2F)
Integrates with third-party SSO solutions
Credential caching and proxy for SSO
Bridging modern authentication and authorization (SAML, OAuth/OIDC) and classic authentication and authorization methods
OIDC Proof Key for Code Exchange (PKCE) support
Support for SAML-based authentication using BIG-IP Edge Client and F5 Access for Android and for iOS
Support for SAML-artifact binding
Support for SAML ECP profile support
AAA server authentication and highavailability
Step-up authentication support
JSON Web Encryption support for public-facing clients
Multi- factor authentication (MFA) via one-time password (OTP)
Seamless integration with third-party MFA solutions
DTLS 2.0 mode for delivering and securing applications
SSL VPN remote access

BIG-IP Platforms

Virtual Editionsof BIG-IP software run on commodity servers and support the range of hypervisors and performance requirements. VEs provide agility, mobility, and fast deployment of app services in software-defined data centers and cloud environments. See the BIG-IP System Hardware, VIPRION, VELOS, and Virtual Edition data sheets for more details. For information about specific module support for each platform, see the latest release notes on AskF5. For the full list of supported hypervisors, refer to the VE Supported Hypervisors Matrix.
BIG-IP iSeriesappliances deliver quick and easy programmability, ecosystem-friendly orchestration, and record-breaking, software-defined hardware performance. As a result, customers can accelerate private clouds and secure critical data at scale while lowering TCO and future-proofing their application F5 solutions can be rapidly deployed via integrations with open source configuration management tools and orchestration systems.
BIG-IP rSeriesappliances bridges the gap between traditional and modern infrastructures with a rearchitected, API-first platform designed to meet the needs of your traditional and emerging applications. The new F5 rSeries delivers unprecedented levels of performance, a fully automatable architecture, and the highest reliability, security and access control for your critical applications.
VELOSplatform is the next generation of F5’s industry-leading chassis-based systems, which delivers unprecedented performance and scalability in a single Application Delivery Controller (ADC). You can seamlessly scale capacity by adding modular blades in a chassis, without disruption, and VELOS allows a mix of traditional BIG-IP tenants as well as next-generation BIG-IP tenants in the future.
VIPRIONmodular chassis and blade systems designed specifically for performance and for true, on-demand, linear scalability without business disruption. VIPRION systems leverage F5’s ScaleN clustering technology so you can add blades without reconfiguring or rebooting.

Table 1. F5 BIG-IP Software License Modules Specifications

iSeries Models	LTM	DNS	APM	AFM	AWF	CGN	SSLO	PEM	BR	BT
F5-i2600	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌
F5-i2800	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅
F5-i4600	✅	✅	✅	✅	✅	✅	❌	❌	✅	✅
F5-i4800	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅
F5-i5600	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i5800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-i5820-DF	✅	✅	✅	❌	✅	❌	❌	❌	✅	✅
F5-i7600	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i7600-D	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i7800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-i7800-D	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅
F5-i7820-DF	✅	✅	✅	❌	✅	❌	❌	❌	✅	✅
F5-i10600	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i10600-D	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i10800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-i10800-D	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅
F5-i11400-DS	✅	❌	❌	✅	✅	❌	❌	❌	✅	✅
F5-i11600	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i11600-DS	✅	❌	❌	✅	✅	❌	❌	❌	✅	✅
F5-i11800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-i11800-DS	✅	❌	✅	✅	✅	❌	❌	✅	✅	✅
F5-i15600	✅	✅	❌	✅	✅	✅	❌	❌	✅	✅
F5-i15800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-i15820-DF	✅	✅	✅	❌	❌	❌	❌	❌	✅	✅
rSeries Models	LTM	DNS	APM	AFM	AWF	CGN	SSLO	PEM	BR	BT
F5-r2600	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌
F5-r2800	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅
F5-r4600	✅	✅	✅	✅	✅	✅	❌	❌	✅	✅
F5-r4800	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅
F5-r5600	✅	✅	✅	✅	✅	✅	❌	❌	✅	✅
F5-r5800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-r5900	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-r5920-DF	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅
F5-r10600	✅	✅	✅	✅	✅	❌	❌	❌	✅	✅
F5-r10800	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-r10900	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
F5-r10920-DF	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅
F5-r12600-DS	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅
F5-r12800-DS	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅
F5-r12900-DS	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅
VELOS Models	LTM	DNS	APM	AFM	AWF	CGN	SSLO	PEM	BR	BT
VELOS-CX410	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
VELOS-CX410-N	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅
VIPRION Models	LTM	DNS	APM	AFM	AWF	CGN	SSLO	PEM	BR	BT
VIPRION-2200	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅
VIPRION-2400	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅
VIPRION-4480	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅
VIPRION-4480	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅