GTM and LTM design

To continue with dickeypjeep answer, LTM is ICSA-certified firewall by itself (without AFM), however AFM makes management easier and also moves some of the firewall function into TMM core rather than being executed in software using iRules.