For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bw's avatar
bw
Icon for Nimbostratus rankNimbostratus
Jul 11, 2019

AFM packet inspection

I'm trying to make FTP dynamic ports to work on the AFM but they keep getting blocked. Is there a way to accomplish this using inspection?

 

I also found this which is a little bit concerning: https://clouddocs.f5.com/training/community/firewall/html/class1/module1/lab2.html

"Advanced Firewall Manager (AFM) provides “Shallow” packet inspection while Application Security Manager (ASM) provides “Deep” packet inspection. By this we mean that AFM is concerned with source IP address and port, destination IP address and port, and protocol (this is also known as 5-tuple/quintuple filtering)."

 

Other Links

https://support.f5.com/csp/article/K44080215

https://support.f5.com/csp/article/K02466443