The BIGIP Leverages the same user interface management
The BIG-IP “Leverages the same user interface, management, and breadth of features as on BIG-IP Hardware” § Advanced Global Server Load Balancing § Remote Access, Pre-Authentication, SSO, and Multi-Factor Authentication AFM AAM APM ASM BIG-IP L 4 -L 7 Services in the Public Cloud © F 5 Networks, Inc § SAML 2. 0 Federation Id. P/SP § ICSA Certified Web Application Firewall / WAF § ICSA Certified L 3/4 Network Firewall § Intelligent L 7 Load Balancing 2
The BIG-IP Modules PERFORMANCE LTM AVAILABLITY SECURITY LTM TMOS BIG-IP Virtual Edition BIG-IP Platform High Performance Fabric § Intelligent L 4 -L 7 Load Balancing § Traffic Optimization - (Caching & Compression) § Deep Packet Inspection § Intelligent Traffic Steering § Full-Proxy Architecture DNS VIPRION Platform Local Traffic Manager § § § Global Traffic Manager Global Server Load Balancing (GSLB) Application availability Awareness Geolocation DNS services DNSSEC
The BIG-IP Modules PERFORMANCE APM AVAILABLITY SECURITY ASM APM DNS BIG-IP Virtual Edition BIG-IP Platform High Performance Fabric § Strategic Point of Control for Application Delivery § Multi-Factor = Integrates with RSA, Secur. ID, RADIUS, OTP, certificates, etc. § Device-based access controls § Single Sign-On (SSO) ASM § § LTM TMOS VIPRION Platform Access Policy Manager Application Security Manager ICSA Labs Certified Layer 7 firewall Web Application Firewall Positive and Negative Security Models Mitigate Layer 7 attacks – DDo. S, SQL injection, OWASP Top Ten
The BIG-IP Modules PERFORMANCE AFM AVAILABLITY SECURITY AAM AFM ASM APM § § LTM TMOS BIG-IP Virtual Edition BIG-IP Platform High Performance Fabric § ICSA Labs Certified § Stateful firewall § Processes 8 x more traffic than closest competitor § Access rules applied at multiple levels, (virtual server, VLAN, route domain) AAM DNS VIPRION Platform Advanced Firewall Manager Application Acceleration Manager Web performance optimization Mobile optimization WAN Optimization Saa. S acceleration
Azure Security Center WAF Considerations § BIG-IP VE w/ASM as a service § Three levels of WAF Policy Enforcement § Currently only supported in ARM mode § 1 to 2 instances can be deployed § One Application per WAF deployment § BYOL
Demo End Users Internet Europe
www. microsoft. com/itprocareercenter www. microsoft. com/itprocloudessentials www. microsoft. com/mechanics https: //techcommunity. microsoft. com
http: //myignite. microsoft. com https: //aka. ms/ignite. mobileapp
- Slides: 12