Forum Discussion

MM_F_147944's avatar
MM_F_147944
Icon for Nimbostratus rankNimbostratus
Nov 02, 2016
Solved

Cisco Firewall and F5 AFM

Do i need AFM for my BigIP if i have Cisco Firewall with all those features which AFM is offering.

 

  • Need is always subjective. If this is a question about performance and manageability, the AFM will crush a Cisco ASA in my opinion.

     

6 Replies

  • Need is always subjective. If this is a question about performance and manageability, the AFM will crush a Cisco ASA in my opinion.

     

    • IainThomson85_1's avatar
      IainThomson85_1
      Icon for Cumulonimbus rankCumulonimbus

      Kindly elaborate your question.

       

      Some deployments or architectures state the use of "Dual Vendor" firewalls, or a firewall sandwich. One of the theories behind this, if Vendor A's software was to find itself subject to a major security flaw - Vendor B's wouldn't.

       

      If - You your usage case is "Block ports and IP's" (Or the reverse) AFM will be capable.

       

  • Need is always subjective. If this is a question about performance and manageability, the AFM will crush a Cisco ASA in my opinion.

     

    • IainThomson85_1's avatar
      IainThomson85_1
      Icon for Cumulonimbus rankCumulonimbus

      Kindly elaborate your question.

       

      Some deployments or architectures state the use of "Dual Vendor" firewalls, or a firewall sandwich. One of the theories behind this, if Vendor A's software was to find itself subject to a major security flaw - Vendor B's wouldn't.

       

      If - You your usage case is "Block ports and IP's" (Or the reverse) AFM will be capable.