11.4.1 supports TLS1.2 and ECDHE and hence, supports PFS.
- this has information on cipher suites supported by different F5 code versions.
PFS is provided by DHE/ECDHE.
In order to check if your code version supports DHE/ECDHE, check output from tmm --clientciphers DEFAULT