For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

npaulo_213434's avatar
npaulo_213434
Icon for Nimbostratus rankNimbostratus
Nov 05, 2015

AFM perimeter firewall?

Hi everyone,   For what I can see, AFM at least starting on version 12 can act and be configured as a network firewall with rules permitting or denying traffic with a source and destination, in sp...
advanced firewall manager
design
security
TMOS
boneyard's avatar
boneyard
Icon for MVP rankMVP
Nov 30, 2015

you don't even need 12.0 for this, AFM has been able to do this through 11 fine. and even before AFM you were able to built something with virtual servers and packetfilters, but AFM is nice step forward.

 

F5 positions it as a data centre firewall. so meant for clearly defined incoming connections, usually your VIPs and perhaps a little more. for outgoing connection, so clients go to the internet a next generation firewall still make more sense as there is no application control / ips (except for HTTP with ASM) and such.

 

Related Content