DDoS attacks saturate bandwidth, consume network resources, and disrupt application services. Can your infrastructure successfully fend them off? With deep threat intelligence services and flexible mitigation options, F5 Networks BIG—IP Advanced Firewall Manager™ (AFM) defends against threats to network layers 3—4, stopping them before they reach your data center. Specifically, F5 Networks BIG—IP AFM™ scales to shut down high—capacity DDoS attacks that can overwhelm load balancers, firewalls, and even networks. It automatically invokes mitigation, alerts security admins, and configures or adjusts DDoS thresholds as traffic patterns change and without affecting legitimate traffic. F5 Networks BIG—IQ Centralized Management™ brings all of your devices together, so you can discover, track, upgrade, and deploy more efficiently. If you can see and understand it, you can stop it. With deep threat intelligence services and flexible mitigation options, F5 Networks BIG—IP Advanced Firewall Manager™ (AFM) defends against threats to network layers 3—4, stopping them before they reach your data center.

By automatically signaling upstream edge routers or ISPs to drop or reroute blacklisted traffic, F5 Networks BIG—IP AFM™ keeps bad traffic away from specific network addresses and protects the data center against not only DDoS, but also other network or application attacks—before they materialize. It also brings visibility and control to SSH and SSL connections, protecting against backdoor threats that use the SSH channel for data breaches and app attacks. Extend security via open programmability—you can extend the capabilities of F5 Networks BIG—IP AFM™ to expand its functionality and deploy custom rules that protect against complex, multi—level attacks. F5 Networks BIG—IP ASM™ stops these threats via a combination of leading layer 7 DDoS defenses, advanced detection and mitigation techniques, deep threat analysis, dynamic learning, virtual patching, and granular attack visibility. And, F5 Networks BIG—IP ASM™ provides visibility into HTTP and WebSocket traffic to protect against attacks that blend in with normal web traffic, data feeds, and chat sessions.

F5 Networks BIG–IP Application Security Manager

Integrates with F5 Networks BIG—IP AFM™ and F5 Networks BIG—IP DNS™ to provide a consolidated approach to data center protection. The threats against apps and data are unrelenting and evolving every day. They have to be identified and stopped without crippling application performance or compromising your company’s data. F5 Networks BIG — IP Application Security Manager™ (ASM) enables you to defeat sophisticated, complex threats with 99.89% overall security effectiveness. At the same time, it improves app performance by offloading SSL and preventing malicious content from being cached. F5 Networks BIG—IP AFM™combines with other F5 Networks BIG—IP™ solutions to strengthen and unify security capabilities. It eliminates the need for single—point products that support application delivery, application security, client—side protections, user access, and DNS security. That means increased efficiency and lower costs. F5 Networks™ products, technologies, and solutions work together to make sure your applications are always protected and work the way they should.

F5 Networks BIG–IQ Centralized Management

Helps you manage security policies and centralize reports and alerts across F5 Networks BIG—IP AFM™ and F5 Networks BIG—IP ASM™. Because adding more boxes increases complexity, you need ways to simplify system management. That’s where F5 Networks BIG—IQ Centralized Management™ comes in. From licensing to policies, traffic to security, you’ll see it all from a single pane of glass. When you go from managing a few boxes to managing a few dozen, your processes, logistics, and needs all change. BIG—IQ Centralized Management™ brings all of your devices together, so you can discover, track, upgrade, and deploy more efficiently. You can also monitor key metrics from one location, saving yourself both time and effort. Extend security via open programmability—you can extend the capabilities of BIG—IP AFM™ to expand its functionality and deploy custom rules that protect against complex, multi—level attacks. Use iRules™ scripting language for extensibility and customization of rules that mitigate sophisticated, uncommon zero—day threats. Gain reporting visibility and understand your security status with customizable reports and charts that provide insight into user types and enable effective forensic analysis.

F5 Networks Silverline DDoS Protection

Works with F5 Networks BIG—IP AFM™ to provide hybrid protection, offloading volumetric attacks to the cloud. DDoS attacks are an IT nightmare. By combining high—volume traffic clogging with application—targeted techniques, these attacks disrupt service for users, or take down entire networks. F5 Networks Silverline DDoS Protection™ detects and mitigates large—scale, SSL, or application—targeted attacks in real—time—defending your business from even the largest attacks, over hundreds of gigabits per second. The Always On subscription stops bad traffic from reaching your network by continuously processing all traffic through the F5 Networks Silverline™ cloud—scrubbing services and returning only legitimate traffic to your site. The Always Available subscription is pre—configured for your systems, runs on standby, and can be initiated when under attack. BIG—IP AFM™ combines with other F5 Networks BIG—IP™ solutions to strengthen and unify security capabilities. It eliminates the need for single—point products that support application delivery, application security, client—side protections, user access, and DNS security.

Features And Benefits

Terminates all connections and transparently runs checks to identify and mitigate network, protocol, and DNS threats, including those that hide behind SSL encryption—before they reach the data center. Automatically guards against known bad actors at the earliest point in the traffic flow, while accelerating blacklisting based on intelligent reputation feeds from third—party services and F5 Networks™ security solutions. Delivers granular control over SSH channel in the data center, with policy—based protections, regular key management, and session time—out enforcement. It enforces blacklisting, stopping bad actors at the earliest point of access, at the network edge, or upstream—before feed lists are updated. By automatically signaling upstream edge routers or ISPs to drop or reroute blacklisted traffic, BIG—IP AFM™ keeps bad traffic away from specific network addresses and protects the data center against DDoS and other network or application attacks. It brings visibility and control to SSH and SSL connections, protecting against backdoor threats that use the SSH channel for data breaches and app attacks.