Forum Discussion

EIT_Network's avatar
EIT_Network
Icon for Altostratus rankAltostratus
Sep 16, 2019

Difference Between APM & Firepass

Dear All,

 

Pls help to get difference between APM and Firepass ...as Both are known for SSL VPN Solution in F5.

 

Regards

 

  • Hi,

     

    Firepass is a dedicated VPN solution with dedicated hardware.

    this solution was replaced by the APM in spite of F5 continuing to support Firepass (just keep in mind that Firepass is a solution at the end of life):

    https://support.f5.com/csp/article/K13458

     

    APM has a lot more functionality:

    • VPN SSL
    • thanks to its brick "Access management and LTM" it can interlock with several authentication methods: SAML, Radius, Web service Auth, cert auth ..."
    • Access management: you can secure app by a perimeter security with multiple auth method: SAML Oauth OIDC, Cert, TACACs OAM, ...
    • You can also secure and proxyfy non web service (citrix vmware ActivSync).
    • You can easly secure app or vpn access with webservice using Irule
    • ...

     

    To resume yes both are vpnssl but apm is more:

    • VPNSSL
    • Access Management (security perimeter)
    • You can use LTM/ Irule to communicate with webservice or other task in order to enhance your security or need.
    • You have multiple auth method and now apm support OIDC, SAML ...
    • With APM you can secure API now
    • ...

     

    You have more benefit to use APM.

    if you need more details keep me in touch.

     

    regards,

  • Hi,

     

    Firepass is a dedicated VPN solution with dedicated hardware.

    this solution was replaced by the APM in spite of F5 continuing to support Firepass (just keep in mind that Firepass is a solution at the end of life):

    https://support.f5.com/csp/article/K13458

     

    APM has a lot more functionality:

    • VPN SSL
    • thanks to its brick "Access management and LTM" it can interlock with several authentication methods: SAML, Radius, Web service Auth, cert auth ..."
    • Access management: you can secure app by a perimeter security with multiple auth method: SAML Oauth OIDC, Cert, TACACs OAM, ...
    • You can also secure and proxyfy non web service (citrix vmware ActivSync).
    • You can easly secure app or vpn access with webservice using Irule
    • ...

     

    To resume yes both are vpnssl but apm is more:

    • VPNSSL
    • Access Management (security perimeter)
    • You can use LTM/ Irule to communicate with webservice or other task in order to enhance your security or need.
    • You have multiple auth method and now apm support OIDC, SAML ...
    • With APM you can secure API now
    • ...

     

    You have more benefit to use APM.

    if you need more details keep me in touch.

     

    regards,