BIG-IP Advanced Firewall Manager

BIG-IP Advanced Firewall Manager (AFM) is the high-performance firewall, it is focused on use in data centers and network infrastructures of the companies.

The device is capable to reflect more than 38 types of DDoS attacks (e.g., ICMP flood, SYN flood, TCP connect, etc.) that will help to ensure safety of applications on border of perimeter of network.

BIG-IP AFM is a part of the complete solution of security of data centers and the Application Delivery Firewall applications, the offered F5 Networks for protection of applications.

Hardware solution of BIG-IP Advanced Firewall Manager, (2015)

Main Features

• high performance and scalability
• reflection of low-level DDoS attacks
• analysis of SSL traffic
• architecture of full proxy at which requests for servers are transferred only after the detailed analysis
• complete reporting on events, logging
• decrease in a capital expenditure.

Architecture of full-proxy

BIG-IP AFM proxies data streams. It means that client connections are named on the device for the analysis of threats and only then are redirected to the application that helps not to allow hits of harmful requests for application servers. From servers traffic is proxied too that helps to make changes to answers from applications to clients for concealment of confidential information.

Protection of network against DDoS of the attacks

Gives to softwares an opportunity to prevent network DoS and DDoS attacks and not to allow them to application servers. This module goes with the preset signatures of the majority of network DDoS attacks among which there are different flood, sweep, teardrop and others. Specially developed hardware platform will increase performance and productivity of reflection of threats without damage of operability of applications.

Flexibility of traffic management (iRules)

One of the modules BIG-IP making all (BIG-IP AFM not an exception) – the scripting iRules language. It is possible to define by iRules flexibly processing of data streams which pass through BIG-IP. On the basis of contents of requests or transmitted data it is possible to make the decision on permission, prohibition, logging and modification of transmitted data.

Comprehensive protection of the Application Delivery Firewall applications

BIG-IP AFM is a part of the complete solution on safe delivery of applications. On the basis of one high-performance and scalable hardware-software platform it is possible to solve problems of protection against multilevel DoS and DDoS attacks of network infrastructure, corporate applications and also service of domain names. The single platform simplifies infrastructure and problems of its scalability.

The solution is available in the form of the device router, a HSS on the platform a blade server of service of virtualization.

BIG-IP Virtual Edition can work at the platform of hypervisors VMware ESXi Microsoft Hyper-V Citrix XenServer, Linux KVM and at resources of a cloud service Amazon Web Services.

2016: BIG-IP Advanced Firewall Manager is expanded functionality

On July 15, 2016 the F5 Networks company announced upgrade of the platform of management of BIG-IP, along with it the expanded functionality in the automatic mode limiting a flow of the attacks of L3 — 7 were a part of BIG-IP Advanced Firewall Manager and the controlling actions of the users initiated in SSH channel, by means of simple deployment adapted^[1].

In order that it is better to satisfy needs of our customers we invested considerable means in development of solutions for protection and management and developed the multifunction software which supports our flagman product line by BIG-IP. Providing an opportunity to customers to integrate products F5 with developments of other companies, including AWS, Azure, VMware, is for us a priority, but we also pay much attention to that our products supported products based on an open source code as OpenStack. Karl Triebes, executive vice president for new product development and technical director of the company of F5