BIG-IP Advanced Firewall Manager

BIG-IP AFM, an ICSA lab certified firewall, drives accurate detection with machine learning, stress monitoring, dynamic signatures, and attack mitigation.

• Machine Learning - BIG-IP AFM learns normal traffic baselines. Its behavioral monitoring functionality starts gathering data to help you understand “normal” system and network activity.
• Stress Monitoring - It detects abnormal server stress and monitors the health of the protected server. When the server shows signs of stress, based on deviations from normal network activity, mitigations begin.
• Dynamic Signatures - BIG-IP AFM identifies bad traffic and bad actors. Signatures are rapidly created specific to the source of the detected threat and are ready to be deployed before service is impacted.
• Attack Mitigation - Dynamic signatures are applied. Server health is continuously monitored for mitigation effectiveness as part of a feedback loop. Additional signatures are created if needed until the attack has been adequately addressed.

Protecting network resources without compromising flexibility and controlling costs is a constant battle. BIG-IP AFM, with its unmatched subscriber aggregation capacity, enables service providers to protect networks and subscribers while consolidating network infrastructure and without compromising flexibility.

• Protect with Full Proxy Capabilities - Inspect all incoming subscriber connections and server-to-client responses, and mitigate threats based on security and protocol parameters before forwarding them.
• Inspect SSL Sessions - Decrypt SSL traffic to identify potentially hidden attacks—at high rates and with high throughput.
• Automate Security Deployment - Simplify configuration with security policies oriented around services and protocols and an efficient rules and policy GUI.