F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

bw's avatar
bw
Icon for Nimbostratus rankNimbostratus
Jul 11, 2019

AFM packet inspection

I'm trying to make FTP dynamic ports to work on the AFM but they keep getting blocked. Is there a way to accomplish this using inspection?

 

I also found this which is a little bit concerning: https://clouddocs.f5.com/training/community/firewall/html/class1/module1/lab2.html

"Advanced Firewall Manager (AFM) provides “Shallow” packet inspection while Application Security Manager (ASM) provides “Deep” packet inspection. By this we mean that AFM is concerned with source IP address and port, destination IP address and port, and protocol (this is also known as 5-tuple/quintuple filtering)."

 

Other Links

https://support.f5.com/csp/article/K44080215

https://support.f5.com/csp/article/K02466443