Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Advanced Firewall Manager (AFM)

AFM is a high-performance, full-proxy network firewall designed to guard data centers against threats that enter the network on the most widely deployed protocols. By aligning firewall policies with the applications they protect, BIG-IP AFM streamlines application deployment, security, and monitoring.

Learn more

Articles

John Wagnon
Updated 2 months ago by John Wagnon

A Domain Name System (DNS) Water Torture attack involves attackers sending non-existent subdomain requests to an Authoritative Name Server for a specific domain. These malicious requests consume the resources on the name server...

Sergey Starzhinskiy
Updated 3 months ago by Sergey Starzhinskiy
5 out of 5 stars

F5 has a portfolio of products and solutions made specifically for Service Providers - S/Gi Firewall, Context-aware Policy Enforcement (PEM), DNS Solutions, Diameter signaling solutions, CGNAT and TCP Optimization...

Sergey Starzhinskiy
Updated 3 months ago by Sergey Starzhinskiy

In today’s world everything seems to revolve around privacy, security and challenges of protecting personal information, Apps, services and network infrastructure from a variety of threats. L7 DoS attacks, credential...

Sergey Starzhinskiy
Updated 3/22/2018 by Sergey Starzhinskiy
5 out of 5 stars

Watch F5's combined BIG-IP/Flowmon solution performing a mitigation of a simulated volumetric DDoS SYN Flood attack in a short 5-minute YouTube video!

Sergey Starzhinskiy
Updated 3/1/2018 by Sergey Starzhinskiy
5 out of 5 stars

In Part I of the series we covered typical deployment scenario and minimum basic configuration of Flowmon DDos Defender module and BIG-IP AFM. If protected objects or “Segments” defined correctly, Flowmon will begin a Baseline “learning”...

Sergey Starzhinskiy
Updated 2/27/2018 by Sergey Starzhinskiy
5 out of 5 stars

F5’s dedicated security portfolio is impressive - with WAF, DDoS Hybrid Defender and cloud-based Silverline, it provides solid Network and App protection for many customers around the world. In today’s market every Service Provider and Enterprise...

John Wagnon
Updated 9/13/2017 by John Wagnon
5 out of 5 stars

For some web applications, you need a separate network firewall policy for users from different geographic locations.  Using the power of iRules and VIP-targeting-VIP solutions, you can dynamically select an AFM policy based on source IP geolocation.

Chase Abbott
Updated 4/1/2017 by Chase Abbott
5 out of 5 stars

Following up on our previous article AFM Enhancements In BIG-IP v13, we'll narrow our discussion for this article to Denial-Of-Service (DoS) updates in v13. Architectural changes in BIG-IP's user interfaces allows for increased flexibility...

Jason Rahm
Updated 3/30/2017 by Jason Rahm
4 out of 5 stars

New in the v13 release of the BIG-IP Advanced Firewall Manager is the capability to insert a packet trace into the internal flow so you can analyze what component within the system is allowing or blocking packets based on your configuration of...

Chase Abbott
Updated 3/20/2017 by Chase Abbott
5 out of 5 stars

F5 BIG-IP version 13 offers numerous improvements to Advanced Firewall Manager (AFM). Check out the discussion on DevCentral and find out more on version 13.

Sergey Starzhinskiy
Updated 3 months ago by Sergey Starzhinskiy
5 out of 5 stars

F5 has a portfolio of products and solutions made specifically for Service Providers - S/Gi Firewall, Context-aware Policy Enforcement (PEM), DNS Solutions, Diameter signaling solutions, CGNAT and TCP Optimization...

Sergey Starzhinskiy
Updated 3/22/2018 by Sergey Starzhinskiy
5 out of 5 stars

Watch F5's combined BIG-IP/Flowmon solution performing a mitigation of a simulated volumetric DDoS SYN Flood attack in a short 5-minute YouTube video!

Sergey Starzhinskiy
Updated 3/1/2018 by Sergey Starzhinskiy
5 out of 5 stars

In Part I of the series we covered typical deployment scenario and minimum basic configuration of Flowmon DDos Defender module and BIG-IP AFM. If protected objects or “Segments” defined correctly, Flowmon will begin a Baseline “learning”...

Sergey Starzhinskiy
Updated 2/27/2018 by Sergey Starzhinskiy
5 out of 5 stars

F5’s dedicated security portfolio is impressive - with WAF, DDoS Hybrid Defender and cloud-based Silverline, it provides solid Network and App protection for many customers around the world. In today’s market every Service Provider and Enterprise...

John Wagnon
Updated 9/13/2017 by John Wagnon
5 out of 5 stars

For some web applications, you need a separate network firewall policy for users from different geographic locations.  Using the power of iRules and VIP-targeting-VIP solutions, you can dynamically select an AFM policy based on source IP geolocation.

Chase Abbott
Updated 4/1/2017 by Chase Abbott
5 out of 5 stars

Following up on our previous article AFM Enhancements In BIG-IP v13, we'll narrow our discussion for this article to Denial-Of-Service (DoS) updates in v13. Architectural changes in BIG-IP's user interfaces allows for increased flexibility...

Chase Abbott
Updated 3/20/2017 by Chase Abbott
5 out of 5 stars

F5 BIG-IP version 13 offers numerous improvements to Advanced Firewall Manager (AFM). Check out the discussion on DevCentral and find out more on version 13.

John Wagnon
Updated 2/9/2017 by John Wagnon
5 out of 5 stars

Distributed Denial of Service (DDoS) attacks were huge in 2016, and they will likely be a tough nemesis again in 2017…and beyond!  With all the excitement and trepidation surrounding these attacks, it’s important to know how to defend against...

Jason Rahm
Updated 2/3/2017 by Jason Rahm
5 out of 5 stars

The BIG-IP Advanced Firewall Manager (AFM) is a high-performance, stateful, full-proxy network firewall designed to guard against incoming threats that enter the network on the most widely deployed protocols, HTTP.

Jason Rahm
Updated 2/1/2017 by Jason Rahm
5 out of 5 stars

In this episode of Lightboard Lessons, Jason updates an earlier Whiteboard Wednesday with a slight change in flow introduced in TMOS version 12.1. Some of the features in this flow are only applicable if you have hardware or if you have security...

Have a AFM Question or Discussion Topic?

Answers

Exporting AFM Active Rules..
Updated 1 hour ago
By Sirusss
0 votes
Does AFM have Signatures for Oracle
Updated 1 day ago
0 votes
VPN/Network Access ACLs
Updated 3 weeks ago
0 votes
Failover status error on internal interface
Updated 3 weeks ago
By ecce
0 votes
Lookinig for lab scenarios
Updated 4 weeks ago
0 votes