F5 Distributed Cloud AI-Powered WAF: From Signature Tuning to Outcomes

AI-Powered WAF for F5 Distributed Cloud WAF is now GA. The goal is to help teams move from configuration-heavy, signature-by-signature tuning to outcome-based enforcement—so you can run WAF in blocking mode sooner, reduce operational friction, and improve detection while keeping false positives low.

What risk-based actions are (and are not)

Risk Scoring does not replace WAF signatures. It complements signatures by evaluating multiple signals per request - signatures, attack indicators, and ML-based classification, assigning each request a High / Medium / Low risk level.

The shift is operational: instead of asking teams to interpret individual signatures and their tuning tradeoffs, Risk Scoring provides an enforcement-ready outcome.

Demo

In this demo – you will see a simple banking application that is not properly protected by the F5 Distributed Cloud AI-Powered WAF. We will simulate a malicious payload in the login field generated by an LLM and see how the F5 Distributed Cloud AI-Powered WAF can protect the application when properly configured.

Who is eligible to use and trial the Risk WAF?  

  • Risk WAF reached General Availability (GA) as part of the 2025.10.0 release in March 2026.
  • Existing customers will be able to trial Risk WAF for six months (until 6/30/2026)

Related Resources

1 Like