F5 Networks iWorkflow
HomePartnersF5 Networks — F5 Networks iWorkflow

Enables orchestration across multiple devices. Accelerate deployment while reducing risk. Manually deploying your applications and services is time-consuming and error-prone. F5 Networks iWorkflow is a virtual appliance that serves as a platform for deploying application delivery policies. Through highly configurable, administrator-defined Layer-4 through Layer-7 service templates (iApps), your deployments take place in minutes rather than days. Responding to infrastructure changes or delays in releasing software costs money. F5 Networks iWorkflow enables the orchestration of services and the automation of tasks to save you time (and money) in your application deployment. Every time you configure a device, you increase the chance of error. By streamlining the deployment process, your team not only saves valuable time, but also reduces your organization’s exposure to operational risk.

F5 Networks iWorkflow makes your organization more agile by integrating with third-party management and orchestration systems. The iControl REST API and Software Development Kit (SDK) make integration with third-party management and orchestration systems a core capability of iWorkflow. By working with multiple platforms, including Cisco APIC, VMware NSX, and the F5 Networks BIG-IP system, iWorkflow makes your organization more agile — defined by policy, not devices. Delays cost money. They might be delays in releasing software to employees and customers, or delays in responding to infrastructure changes–planned or unplanned. Whichever the circumstance, any inhibitor to business execution is an operational expense to be eliminated. Manual configuration exposes risk. Whether configuring devices via administrative GUI’s, or via command-line interfaces, the more steps involved the greater the chance of error.

F5 Networks iWorkflow — Automated Deployment And Provisioning

F5 iWorkflow increases IT agility and speed by automating deployment and provisioning of F5 solutions. iWorkflow facilitates automation in three ways: programmatically through direct API interaction; through connectors for management and orchestration systems; and manually, through a graphic user interface. F5 Networks iWorkflow also includes a connector software development kit (SDK) for developing custom connectors. All features and functions of F5 Networks iWorkflow are programmatically accessible through a well-documented set of RESTful APIs. F5 Networks iWorkflow injects application-specific Layer-4 through Layer-7 intelligence into Cisco ACI and VMware NSX-based networks. It does this by generating a catalog of programmable, application-specific F5 iApps Templates. This catalog is used by F5 Networks BIG-IP Application Delivery Controllers (ADCs) and available in orchestration solutions..

Role-Based Access Control

F5 Networks iWorkflow was designed with the concept of role-based access control (RBAC) deeply ingrained, providing application owners and tenants control over their assigned application(s) and associated services — and only those applications and services. F5 Networks iWorkflow enables you to create tenants and allocate resources to them via F5 Networks iApps Templates. Tenants can then self-deploy the customized application templates to easily define network and application services for several devices without requiring them to perform complicated networking procedures. F5 Networks iWorkflow features enable both providers and tenants to streamline application deployment and enhance orchestration, delivering greater agility, control, and security for today’s application environments.

Simplified Configuration Using iApps Templates

F5 Networks iWorkflow injects application-specific layer 4–7 intelligence into Cisco ACI and VMware NSX-based networks. It does this by generating a catalog of programmable, application-specific F5 iApps Templates. This catalog is used by F5 Networks BIG-IP Application Delivery Controllers (ADCs) and available in orchestration solutions. F5 Networks iApps Templates create configuration-specific forms used by application services to guide authorized users through complex system configurations. These application-specific templates contain all the logic necessary to deploy and provision the network services your applications require. iApps provide a programmatic, visual layout and help information. Each new application service uses one of the templates to create a screen with fields and help that guide the authorized user through the configuration process and creates the final configuration.
F5 Networks iWorkflow


More applications, evolving security threats, demands for faster deployment, and an explosion of new devices are all pushing traditional IT models to their limits. SDN is about making the network more flexible and responsive so that organizations are better positioned to respond to these challenges. F5 Networks understands applications. F5 Networks has been helping businesses gracefully navigate application delivery challenges since day one and remain perfectly positioned to deliver the software-defined application services required to ensure seamless user experiences.

Much of the promise of SDN revolves around simplified orchestration and management. To get there, SDN vendors need to be tightly integrated and aligned around common standards. As the bridge between applications and the underlying network routers and switches, F5 Networks works with leading network and SDN providers to ensure the seamless integration our customers require. F5 Networks is also a key participant in OpenStack as well as virtual desktop and other initiatives that are converging around SDN. F5 Networks is working closely with all of the key players to mitigate the risks and increase the value of SDN for F5 Networks customers.


Users expect apps to be fast, secure, and always available. Anything less is unacceptable. If you’re lucky, you’ll be one of few to hear about it. Enter BIG-IP DNS. Think of it as app insurance. BIG-IP DNS improves the performance and availability of your global applications by sending users to the closest or best-performing physical, virtual, or cloud environment. It also hyperscales and secures your DNS infrastructure from DDoS attacks and delivers a real-time DNSSEC solution that protects against hijacking attacks. BIG-IP DNS hyperscales up to 100 million responses per second (RPS) to manage rapid increases in DNS queries.

With a set of features that includes multicore scalability, DNS Express, and IP Anycast integration, BIG-IP DNS handles millions of DNS queries, protects your business from DDoS attacks, and ensures top application performance for users. BIG-IP DNS delivers a real-time, signed DNSSEC query response and DNS firewall services for attack protection and mitigates complex threats by blocking access to malicious domains. BIG-IP DNS services integrate with DNS zone management solutions, increase DNS performance at the network edge, and mask the DNS back-end infrastructure. That translates into higher productivity, server consolidation, faster responses, and protected DNS management.

Cisco ACI And F5

Cisco and F5 Networks are working together to help organizations simplify and automate their networks. Benefits of this collaboration include improved time to market for both applications and services, reduced reaction time to planned and unplanned circumstances, and avoiding the risks inherent in managing numerous point solutions. Early software-defined networking (SDN) architectures promised to eliminate the business impact associated with human latency. It didn’t deliver on that promise. It focused on connectivity services, and provided only basic networking functions across low-level devices — leaving critical application services out of the picture.

The problem of manually configuring devices and services for every application, and the significant amount of time that takes both network and operations teams, remained unsolved. Using an application-centric, policy-driven approach, F5 Networks and Cisco enable organizations to improve time to market for new applications and services, reduce reaction time to both planned and unplanned circumstances, and avoid the risks associated with managing numerous point solutions individually.


Underlying all BIG-IP hardware and software is F5 Networks’ proprietary operating system, TMOS, which provides unified intelligence, flexibility, and programmability. With its application control plane architecture, TMOS gives you control over the acceleration, security, and availability services your applications require. TMOS establishes a virtual, unified pool of highly scalable, resilient, and reusable services that can dynamically adapt to the changing conditions in data centers and virtual and cloud infrastructures. Identity and access — manage identity and access policies from a single point of control, and federate them across environments.

SaaS subscribers have an alternative to adopting and managing the siloed IAM solutions of their SaaS providers. Instead, organizations can implement IAM federation, establishing a trust relationship between the SaaS provider’s service and subscriber-owned and subscriber-managed IAM technology. For such a solution to be a reality, however, it must be achieved without adding architectural or management complexity and without the need to disruptively integrate technologies by building and maintaining a new network between those of the provider and the subscriber.


Over 70 percent of today’s Internet traffic is encrypted and analysts predict it will continue to rise. This growth is creating a dangerous blind spot because many traditional, network-focused security appliances can’t effectively decrypt traffic. And hackers readily exploit this blind spot to hide malware and other threats. By fortifying security strategies with solutions and services focused specifically on the application, you can better secure access to applications and protect the ones that expose sensitive data, no matter where they live.

Look for solutions centered on access, protection, and visibility into encrypted traffic. And, above all, make sure those solutions are built on an intrinsic understanding of applications. F5 Networks secures applications and the data behind them — because that’s where today’s attacks happen. With decades devoted to connecting users and applications, F5 Networks solutions provide unparalleled visibility into hidden threats and offer the controls needed to manage access and reduce the risks of app attacks. F5 Networks solutions support security for any infrastructure, from data centers to the cloud.

VMware And F5

VMware and F5 Networks are integrating their management solutions to solve the problem of rigid networks that inhibit business progress. Learn how they’re creating a more agile, more programmatic, and more automated network. Existing network architectures are too complex and brittle to withstand the demands being placed upon them. This severely limits the speed of innovation while increasing management costs. Change is required to deploy new applications and services more efficiently, eliminate downtime due to unforeseen increases in workloads, and recover more quickly from disaster.

A software-defined data center (SDDC) architectural approach meets today’s business expectations, helps organizations transform data center economics, and increases application deployment agility. The joint F5 Networks and VMware solution derives from a symbiosis across all elements of data center networking and application delivery architecture, increasing the velocity of your business.