F5 Big IP
BIG-IP is a collection of F5’s hardware platforms and software solutions providing services focused on security, reliability, and performance.
BIG-IP Primary Software Modules
• BIG-IP Local Traffic Manager (LTM) – Central to F5’s full traffic proxy functionality, LTM provides the platform for creating virtual servers, performance, service, protocol, authentication, and security profiles to define and shape your application traffic.
• BIG-IP DNS – Formerly Global Traffic Manager, BIG-IP DNS provides similar security and load balancing features that LTM offers but at a global/multi-site scale. BIG-IP DNS offers services to distribute and secure DNS traffic advertising your application namespaces.
• BIG-IP Access Policy Manager (APM) – Provides federation, SSO, application access policies, and secure web tunneling. Allow granular access to your various applications, virtualised desktop environments, or just go full VPN tunnel.
• Secure Web Gateway Services (SWG) – Paired with APM, SWG enables access policy control for internet usage. You can allow, block, verify and log traffic with APM’s access policies allowing flexibility around your acceptable internet and public web application use.
• BIG-IP Application Security Manager (ASM) – This is F5’s web application firewall (WAF) solution. Traditional firewalls and layer 3 protection don’t understand the complexities of many web applications. ASM allows you to tailor acceptable and expected application behavior on a per application basis. Zero day, DoS, and click fraud all rely on traditional security device’s inability to protect unique application needs; ASM fills the gap between traditional firewall and tailored granular application protection.
• BIG-IP Advanced Firewall Manager (AFM) – AFM is designed to reduce the hardware and extra hops required when ADC’s are paired with traditional firewalls. Operating at L3/L4, AFM helps protect traffic destined for your data center. Paired with ASM, you can implement protection services at L3 – L7 for a full ADC and Security solution in one box or virtual environment.