F5 Configuring BIG-IP AFM: Advanced Firewall Manager

If you already administer BIG-IP, you know virtual servers, self IPs, and route domains. Advanced Firewall Manager adds security controls to those same objects, which makes it a natural next module to learn. This F5 BIG-IP AFM training is designed to make that step structured rather than trial and error.

F5’s Configuring BIG-IP AFM: Advanced Firewall Manager starts with a familiar chapter on setting up the BIG-IP system. It then introduces AFM, its availability, and the Security menu where it lives. From there, the course builds the network firewall concept by concept. You learn which firewall contexts exist and the order in which they are processed. You see why ADC mode suits a BIG-IP that mainly delivers applications, and why firewall mode suits one that must deny anything not explicitly allowed.

Rule building follows. You create rules and policies, use address lists, port lists, and rule lists to keep things manageable, and add schedules and geolocation where they make sense. The course also shows how to spot redundant, conflicting, and stale rules early, a habit that saves time as the rule base grows.

Logging and reporting come next, because you can’t run a firewall you can’t see. Logging profiles, log publishers, event logs, and AFM reports show what the firewall is doing. Packet Tester and Flow Inspector help you check your own work.

The second half covers threats that simple rules don’t handle. IP Intelligence blocks addresses with a poor reputation. Device DoS and DoS profiles defend against floods, while sweep flood protection and IP shunning deal with persistent attackers. DNS Firewall, DNS DoS, SIP DoS, port misuse policies, and network firewall iRules complete the material.

A final recap ties everything back to BIG-IP architecture and AFM packet processing. For an administrator moving into network firewall and DoS protection, it’s a practical first step into data center security.

Course Objectives

The course prepares you to:

• Set up a BIG-IP system and locate AFM features in the Security menu.
• Explain AFM firewall contexts and the order in which rules are processed.
• Choose ADC mode or firewall mode based on how the BIG-IP is used.
• Create rules, policies, address lists, port lists, rule lists, and schedules.
• Keep a growing rule base clean by identifying redundant, conflicting, and stale rules.
• Monitor firewall activity with logging profiles, event logs, reports, Packet Tester, and Flow Inspector.
• Apply IP Intelligence to block sources with a poor reputation.
• Configure device DoS, DoS profiles, sweep flood protection, and IP shunning.
• Protect DNS and SIP traffic, and apply port misuse policies and network firewall iRules.