Description
Behavioral analytics drives accurate detection
BIG-IP AFM, an ICSA lab certified firewall, drives accurate detection with machine learning, stress monitoring, dynamic signatures, and attack mitigation.
- Machine Learning - BIG-IP AFM learns normal traffic baselines. Its behavioral monitoring functionality starts gathering data to help you understand “normal” system and network activity.
- Stress Monitoring - It detects abnormal server stress and monitors the health of the protected server. When the server shows signs of stress, based on deviations from normal network activity, mitigations begin.
- Dynamic Signatures - BIG-IP AFM identifies bad traffic and bad actors. Signatures are rapidly created specific to the source of the detected threat and are ready to be deployed before service is impacted.
- Attack Mitigation - Dynamic signatures are applied. Server health is continuously monitored for mitigation effectiveness as part of a feedback loop. Additional signatures are created if needed until the attack has been adequately addressed.
Obtain consistent security and actionable visibility
BIG-IP AFM is a core component of F5’s application protection solutions, which combine four key security elements: firewall, DDoS mitigation, DNS security, and application Intrusion Protection Systems (IPS). These solutions can be consolidated onto a single BIG-IP platform, reducing management complexity and overhead, while offering superior performance and scalability.
- Consistent Protection for Containerized Applications - Protect container-based applications regardless of platform or location with attack detection and mitigation services to mitigate attacks and risks. .
- Actionable Reporting and Visibility - Easily understand your security status with rich telemetry that can be customizable into reports and charts to provide insight to all event types and enable effective forensic analysis.
Ensure network availability, security, and scaling
Protecting network resources without compromising flexibility and controlling costs is a constant battle. BIG-IP AFM, with its unmatched subscriber aggregation capacity, enables service providers to protect networks and subscribers while consolidating network infrastructure and without compromising flexibility.
- Protect with Full Proxy Capabilities - Inspect all incoming subscriber connections and server-to-client responses, and mitigate threats based on security and protocol parameters before forwarding them.
- Inspect SSL Sessions - Decrypt SSL traffic to identify potentially hidden attacks—at high rates and with high throughput.
- Automate Security Deployment - Simplify configuration with security policies oriented around services and protocols and an efficient rules and policy GUI.