Advanced Firewall Manager

Protect your network against incoming threats, including the most massive and complex DDoS attacks.


DDoS attacks saturate bandwidth, consume network resources, and disrupt application services. Can your infrastructure successfully fend them off? Advanced Firewall Manager mitigates network threats before they disrupt critical data center resources. 

Secure your data center

Secure your data center

Unifies application configuration with network security policy for tighter enforcement.    

Network protection

Network protection

Identifies and mitigates network, protocol, DNS threats, before they reach critical data center resources.    

High-volume logging controls

High-volume logging controls

Supports SNMP, SIP, DNS, IPFIX collectors, and protects log servers from being overwhelmed.    

Block known bad actors

Block known bad actors

Protects data center resources with purpose-built defenses augmented by F5 threat data.    

SSH channel protection

SSH channel protection

Provides granular, policy-based control over SSH traffic in the data center.    

S/Gi firewall for service providers

S/Gi firewall for service providers

Defends your network infrastructure and mobile subscribers from attacks such as DDoS. 

Flexible defense of complex threats

Flexible defense of complex threats

Mitigate sophisticated zero-day threats or gather critical forensics using F5 iRules.    

Data center visibility

Data center visibility

Understand traffic patterns into the data center with customizable reports and analytics.    


F5 Data Center Firewall

Better together

F5 products, technologies, and solutions work together to make sure your applications are always protected and work the way they should. Extend the effectiveness of Advanced Firewall Manager by combining it with the following products.    


Integrates with BIG-IP AFM and BIG-IP DNS to provide a consolidated approach to data center protection.


Helps you manage network and application security with centralized policies, reports and alerts.

Silverline DDoS Protection

Works with BIG-IP AFM to provide hybrid protection, offloading volumetric attacks to the cloud.


ICSA Labs offers vendor-neutral testing and certification of security products using criteria based on resistance to threats, risks, and successful outcomes.

Customer Story

The University of Tsukuba Gains Advanced Firewall and DDoS Defense Using Single, Scalable Solution

Ways to deploy


BIG-IP appliances and VIPRION platforms deliver quick and easy programmability, multi-vendor service orchestration, software-defined hardware, and line-rate performance. 


F5 application services work exactly the same way in the public and private cloud as they do in the data center.


BIG-IP virtual editions have the same features as those that run on F5 purpose-built hardware—and you can deploy them on any leading hypervisor or select cloud providers.

Related Content

Getting Started with AFM

The GitHub DDoS Attack

The Power of iRules

Get started

Request a demo

See Advanced Firewall Manager in action    

Start a Trial

Try Advanced Firewall Manager in your environment    

Ready to buy?

Talk to an F5 representative today