AFM use case

Hi All,

 

We are in process of evaluating AFM, during evaluation there are certain points which I think can be better performed by firewall:

 

1) To protect end server the F5 needs to have VS which is different from end server IP or to have same server IP on F5 needs to create forwarding VS. So wanted to confirm how others are using AFM in their environment? Because doing 2 level of NAT i.e. at firewall and F5 doesn't make sense and add latency to traffic. 2) To use this as edge device we need to have cgnat enabled so destination NAT or source NAT can be done on F5. 3) The IPI we can use with APM and ASM as well.

 

So just wanted to check how others are using AFM in current infra and does it have ROI as I think other NGFW can provide more functionality.

 

Thanks