For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

spud_141786's avatar
spud_141786
Icon for Nimbostratus rankNimbostratus
Jun 06, 2017

LTM service policy vs AFM service policy

When AFM is provisioned, it is possible to apply a Network Service Policy to the Global context, on a per-rule basis, and on a per-virtual basis.   Does a Network Service Policy have the same effe...
AFM
application delivery
LTM
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Jun 06, 2017

This concept in the AFM maybe the confusing from firewall guys coming from other vendors, but that is simple if you have experience with LTM.

 

First, you need to understand in which mode you have AFM. Here is the section of the manual that explains that:

 

https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-13-0-0/1.html

 

The rule processing follows an order, there are more options, like self IP:

 

https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-13-0-0/2.html

 

So, if you have the AFM in ADC mode (default), you don't need to configure any rule when you create a virtual server. :P