Forum Discussion

RolandoValenzue's avatar
RolandoValenzue
Icon for Nimbostratus rankNimbostratus
Jul 11, 2019

AFM packet inspection

I'm trying to make FTP dynamic ports to work on the AFM but they keep getting blocked. Is there a way to accomplish this using inspection?

 

I also found this which is a little bit concerning: https://clouddocs.f5.com/training/community/firewall/html/class1/module1/lab2.html

"Advanced Firewall Manager (AFM) provides “Shallow” packet inspection while Application Security Manager (ASM) provides “Deep” packet inspection. By this we mean that AFM is concerned with source IP address and port, destination IP address and port, and protocol (this is also known as 5-tuple/quintuple filtering)."

 

Other Links

https://support.f5.com/csp/article/K44080215

https://support.f5.com/csp/article/K02466443