Forum Discussion

F5_guy_380365's avatar
F5_guy_380365
Icon for Nimbostratus rankNimbostratus
Jan 13, 2019

Does AFM and APM use same virtual server in the F5 ? Or it is different all the times ? are there any chances virtual server getting overlapped ?

I am trying to configure APM and AFM both , and curious if we can use same virtual server for the both, or by configuration limitation it needs to be different on all occasions. Also, I found out that lease pool and virtual server relation is 1-1 while configuring APM for the SSL VPN. Please let me know if I am not right or missing anything.

 

Thank you,

 

J

 

AFM
APM
devops
security

3 Replies

Sort By
  • Dave_McCauley_3's avatar
    Dave_McCauley_3
    Icon for Cirrostratus rankCirrostratus
    Jan 13, 2019

    For the most part there shouldn’t be any overlap or issues having both on the same vip.

     

    The lease pool for APM is to give IP addresses to vpn clients so it’s 1 per network access profile more or less.

     

    • F5_guy_380365's avatar
      F5_guy_380365
      Icon for Nimbostratus rankNimbostratus
      Jan 13, 2019

      Hi Dave,

       

      Thank you for the reply.

       

      About below comment, does that mean same virtual server can be used for AFM and APM ? Also, there won't be any issues and under virtual server configuration, it will show what APM and AFM policy being used ?

       

      "For the most part there shouldn’t be any overlap or issues having both on the same vip"

       

  • CharlesCS's avatar
    CharlesCS
    Icon for Cirrus rankCirrus
    Jan 14, 2019

    AFM and APM operate at completely different levels. AFM works at layer 2 or 3 when a client attempts to make a connection to a protected resource. APM doesn't get involved until much later, after an HTTP request arrives at the virtual server.