F5-Module , Products & Services

BIG-IP F5 Modules

Below are some F5 module mentioned, which BIG-IP Provides, Here we only mentioning the List and some of the module description has been discussed later in below sub section.

• APM (Access Policy Manager)
• ASM (Access Security Manager)
• AAM (Application Acceleration Manager)
• AFM (Advance Firewall Manager)
• AVR (Application Visibility & Reporting)
• BIG-IQ
• Edge Gateway
• EM (Enterprise Manager)
• DNS (Global Server load balancing)
• LC (Link Controller)
• SWG (Secure Web Gateway)
• SSL Orchestrator

Below are F5 Services provided by BIG-IP F5

• IP Intelligent Services for updating databases of IP address to be used for Malicious Activities
• MobileSafe for Corporate Mobile Device Protection
• Silverline for DoS/DDoS protection & Web application firewalling
• Websense for URL categorization & Internet Risk Protection.

Advance Firewall manager (AFM)

AFM is supported on TMOS v11.3 onwards, it helps in configuration and Management of Application Delivery Firewall.

It has following benefits:

• It is used for SSL & VPN Termination
• AVR and Analytics Integration
• It is used for Application awareness and context
• Used for iRules protocol Manipulation
• Supports TCP Optimization and reduces Response Time
• It supports Full HA feature
• It is also used for Full Proxy Architecture to any Enterprise
• Used for DDoS Mitigation as per TMM

Access Policy Manager (APM)

It Provides centralized access security Solution not only for Application but also for Networks. Below are some benefits of APM.

• Used for High Speed Logging (HSL)
• It is also used for Secure Web gateway (SWG) Integration
• Can be used as Enterprise Manager & BIG-IQ Management
• It support multi-Vendor VDI
• Provided SSO (Single Sign On feature)
• Provides Authentication offloads with support for RADIUS, LDAP, MS AD Kerberos, HTTP, RSA, TACACS+
• It Supports SSL VPN
• It provides Dynamic , Policy Based  context aware access control
• Provides Centralized control for remote , Mobile , LAN , WLAN users
• Provides Centralized policy application control model.

Application Acceleration Manager (AAM)

This Feature is available to all Physical, Virtual and VIPRION Models along with base LTM License. This Includes following features:

• Symmetric & Dynamic Compression
• SPDY gateway Feature
• Bandwidth Controllers
• HTTP Caching & Compression
• TCP Express
• One Connect & iSessions

 ASM (Application Security Manager)

ASM provides Advanced Web application aware Firewall (WAF) functionality. It protect against wide range of attacks which includes:

• Web Scraping & SQL Injection
• L7, DoS , DDoS attacks to application function
• Malicious browser code injection
• Trusted site Permission Hijacking
• JSON payload attacks
• FTP , SNMP, XML application attacks

BIG-IQ Central & management Controller

BIG-IQ is the management & Orchestration platform, which has benefit around these four functional areas like Access, Devices, Traffic, and Security.

The BIG-IQ is supported on following BIG-F5 Modules

• ASM
• AFM
• APM
• LTM
• Mobile Safe
• Web safe

Benefits on Access Functional Areas

• Provides management up to 100 APM devices
• Helps in Policy Verification , Staging , Auditing , Monitoring
• Helps in multi-Device Policy Push
• Extensive Reporting Features.

Benefits on Device Functional Areas

• It helps in Centralized Management up to 200 Physical , Virtual, or VCMP BIG-IP appliances
• Helps in TMOS Software Deployment
• It helps in remote deployment of appliances hosted in different Environment like NSX, ACI, AWS etc.
• Provides Centralized Licenses Management up to 5000 Unmanaged Devices
• SSL Certification Management
• Device Discovery & Monitoring
• Configuration Backup & Restore

Benefits on Traffic Functional Areas

• Helps in Centralized logging and audit trails
• Helps in Configuration template, Staging & Scheduling
• Also helps in Virtual Server Cloning
• Health & Statistics Monitoring
• RBAC for Pool member & Virtual Server Control.

Benefits on Security Functional Areas

Below are the benefits on Security Areas.

• RBAC feature for Security Instances.
• It helps in Policy Verification, Staging, Auditing, and Monitoring
• It helps in Policy push on multiple devices
• It helps in Rule monitoring, reporting.
• Provides Security Alerts for Web safe & Mobile safe too.