BIG-IP Advanced WAF

Protect your apps, APIs, and data against the most prevalent attacks such as zero-day vulnerabilities, app-layer DoS attacks, threat campaigns, application takeover, and bots.

Secure apps and APIs with BIG-IP Advanced WAF

Product Overview

Flexible deployment and management options to fit your needs

BIG-IP Advanced WAF identifies and blocks attacks other WAFs miss. BIG-IP Advanced WAF delivers a dedicated, dynamic dashboard ensuring compliance against threats listed in the OWASP Top 10, guided configurations for common WAF use cases, learning engine and customized policy building, and granular security policies for microservices and APIs. 

Deploy on any leading hypervisor in your data center or your private cloud.

Available from select public cloud providers, including Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform.

Runs on high-performance hardware to protect your applications.

Core Capabilities

Combines machine learning, threat intelligence, and deep application expertise

Deploys tools to secure GraphQL REST/JSON, XML, and GWT APIs

Declarative API-based deployment and configuration enables delivering security as “code”

Encrypts data at the app layer to protect against data-extracting malware and man-in-the-browser attacks

Behavioral analytics and machine learning provide highly accurate L7 DoS detection and mitigation

Defends critical apps from today’s biggest security concerns, including those listed in the OWASP Top 10

Protects against brute-force attacks that use stolen credentials

Protects apps from automated attacks by bots and other malicious tools

Platform Support and Integrations

Technology alliances

F5 collaborates with leading independent software vendors (ISVs) to help customers secure their digital experiences.

Public cloud providers

F5 application services integrate with major cloud providers and are available directly through marketplace offerings with variable PAYG or perpetual BYOL consumption options.

Import scanning results to help update signatures

Standard telemetry streaming within automation toolchain enables exportation of signals



Why Advanced Threats Require Advanced Application Defense

Not all WAF solutions are the same. Most are inadequate against the myriad of attacks across the evolving risk landscape. BIG-IP Advanced WAF is a new category of app protection that introduces unique capabilities to the WAF market.