DDoS attacks saturate bandwidth, consume network resources, and disrupt application services. Can your infrastructure successfully fend them off? With deep threat intelligence services and flexible mitigation options, F5 Networks BIG—IP Advanced Firewall Manager™ (AFM) defends against threats to network layers 3—4, stopping them before they reach your data center. Specifically, F5 Networks BIG—IP AFM™ scales to shut down high—capacity DDoS attacks that can overwhelm load balancers, firewalls, and even networks. It automatically invokes mitigation, alerts security admins, and configures or adjusts DDoS thresholds as traffic patterns change and without affecting legitimate traffic. If you can see and understand it, you can stop it. With deep threat intelligence services and flexible mitigation options, F5 Networks BIG—IP Advanced Firewall Manager™ (AFM) defends against threats to network layers 3—4, stopping them before they reach your data center. F5 Networks BIG—IP Application Security Manager™ (ASM) enables you to defeat sophisticated, complex threats with 99.89% overall security effectiveness.

It enforces blacklisting, stopping bad actors at the earliest point of access, at the network edge, or upstream—before feed lists are updated. By automatically signaling upstream edge routers or ISPs to drop or reroute blacklisted traffic, F5 Networks BIG—IP AFM™ keeps bad traffic away from specific network addresses and protects the data center against not only DDoS, but also other network or application attacks—before they materialize. It also brings visibility and control to SSH and SSL connections, protecting against backdoor threats that use the SSH channel for data breaches and app attacks. You can extend the capabilities of F5 Networks BIG—IP AFM™ to expand its functionality and deploy custom rules that protect against complex, multi—level attacks.  F5 Networks BIG—IP ASM™ stops these threats via a combination of leading layer 7 DDoS defenses, advanced detection and mitigation techniques, deep threat analysis, dynamic learning, virtual patching, and granular attack visibility. And, F5 Networks BIG—IP ASM™ provides visibility into HTTP and WebSocket traffic to protect against attacks that blend in with normal web traffic, data feeds, and chat sessions.

F5 Networks BIG–IQ Centralized Management

Because adding more boxes increases complexity, you need ways to simplify system management. That’s where F5 Networks BIG—IQ Centralized Management™ comes in. From licensing to policies, traffic to security, you’ll see it all from a single pane of glass. When you go from managing a few boxes to managing a few dozen, your processes, logistics, and needs all change. F5 Networks BIG—IQ Centralized Management™ brings all of your devices together, so you can discover, track, upgrade, and deploy more efficiently. You can also monitor key metrics from one location, saving yourself both time and effort. Integrates with F5 Networks BIG—IP AFM™ and F5 Networks BIG—IP DNS™ to provide a consolidated approach to data center protection. The threats against apps and data are evolving every day. They have to be identified and stopped without compromising your company’s data. F5 Networks BIG—IP AFM™ scales to shut down high—capacity DDoS attacks that can overwhelm load balancers, firewalls, and networks. It automatically invokes mitigation, alerts security admins, and configures or adjusts DDoS thresholds as traffic patterns change and without affecting legitimate traffic.

F5 Networks Silverline DDoS Protection

Works with F5 Networks BIG—IP AFM™ to provide hybrid protection, offloading volumetric attacks to the cloud. DDoS attacks are an IT nightmare. By combining high volume traffic clogging with application targeted techniques, these attacks disrupt service for users, or take down entire networks. F5 Networks Silverline DDoS Protection™ detects and mitigates large—scale, SSL, or application targeted attacks in real time—defending your business from even the largest attacks, over hundreds of gigabits per second. The always on subscription stops bad traffic from reaching your network by continuously processing all traffic through the F5 Networks Silverline™ cloud scrubbing services and returning only legitimate traffic to your site. The always available subscription is pre configured for your systems, runs on standby, and can be initiated when under attack. Use F5 Networks iRules™ scripting language for extensibility and customization of rules that mitigate sophisticated, uncommon zero—day threats. Gain reporting visibility and understand your security status with customizable reports and charts that provide insight into user types and enable effective forensic analysis.

Features And Benefits

Supports SNMP, SIP, DNS, and IPFIX collectors, and provides controls that prevent log servers from becoming overwhelmed. Automatically guards against known bad actors at the earliest point in the traffic flow, while accelerating blacklisting based on intelligent reputation feeds from third—party services and F5 Networks™ security solutions. Delivers granular control over SSH channel in the data center, with policy based protections, regular key management, and session time—out enforcement. It enforces blacklisting, stopping bad actors at the earliest point of access, at the network edge, or upstream—before feed lists are updated. By automatically signaling upstream edge routers or ISPs to drop or reroute blacklisted traffic, F5 Networks BIG—IP AFM™ keeps bad traffic away from specific network addresses and protects the data center against not only DDoS, but also other network or application attacks before they materialize. It also brings visibility and control to SSH and SSL connections, protecting against backdoor threats that use the SSH channel for data breaches and app attacks. And it inspects SSL sessions and terminates connections to identify attacks that are masked by encryption.