RolandoValenzue
Nimbostratus
Jul 11, 2019AFM packet inspection
I'm trying to make FTP dynamic ports to work on the AFM but they keep getting blocked. Is there a way to accomplish this using inspection?
I also found this which is a little bit concerning: https://clouddocs.f5.com/training/community/firewall/html/class1/module1/lab2.html
"Advanced Firewall Manager (AFM) provides “Shallow” packet inspection while Application Security Manager (ASM) provides “Deep” packet inspection. By this we mean that AFM is concerned with source IP address and port, destination IP address and port, and protocol (this is also known as 5-tuple/quintuple filtering)."
Other Links
https://support.f5.com/csp/article/K44080215
https://support.f5.com/csp/article/K02466443