BIG-IP^® Access Policy Manager^™

Simplify and scale access control for web applications

Organizations are moving more services and applications to the web to improve delivery of valuable consumer services and increase worker productivity. Yet ensuring security in the face of increasing web access requirements adds complexity to IT infrastructures and makes it difficult and expensive to scale.

BIG-IP Access Policy Manager (APM) is a flexible, high-performance access and security solution. BIG-IP APM drives identity into your network to provide secure, context-aware user access to web applications while simplifying authentication, authorization, and accounting (AAA) management.

BIG-IP APM provides a simplified, central point of control based on access policies, giving you granular control of users' web access. An optional endpoint security service validates devices with policy to protect your organization from virus or malware infections, accidental data loss, and rogue device access. The advanced Visual Policy Editor makes it easy to create individual and group access policies for many different identities and web authentication environments.

Simplified Infrastructure and Reduced Costs

Many solutions use application coding, web server agents, or specialized proxies or servers to manage web access. With AAA control directly on the BIG-IP system, you can apply repeatable access policies across many applications and servers while gaining centralized visibility of your authorization infrastructure. BIG-IP APM enables you to consolidate infrastructure, eliminate redundant tiers, simplify management, and reduce capital and operating expenses by up to 10x.

Dynamic Access Control

With BIG-IP APM, you gain valuable insight into who is on the network and which applications they are using, and maintain complete, policy-based control of their navigation. BIG-IP APM secures connections with SSL (HTTPS) encryption and provides access authentication using ACLs and AAA server support.

BIG-IP APM provides dynamic access control by creating L4 and L7 access control lists (ACLs) based on user identity, IP address, and attributes such as group membership pulled from the directory. The results of endpoint inspection checks also contribute to access profiles.

High Performance, Scalability, and Layered Interoperability

BIG-IP APM offers multi-gigabit per second SSL encryption throughput with HTTP(s) and supports hundreds of logins per second. For organizations looking to scale, a single high-end appliance with the BIG-IP APM module can support tens of thousands of concurrent users.

With the efficient, multi-solution BIG-IP platform, you can add BIG-IP^® Application Security Manager^™ (ASM) to create a hardened application delivery network solution that layers web access management with application protection. For an additional performance boost, you can add BIG-IP^® WebAccelerator^™ for even faster application performance.

BIG-IP Access Policy Manager is available as a product module on the BIG-IP system.

BIG-IP Product Modules:

• Local Traffic Manager (LTM)
• Global Traffic Manager (GTM)
• Link Controller (LC)
• Application Security Manager (ASM)
• WebAccelerator (WA)
• Edge Gateway
• WAN Optimization Module (WOM)
• Access Policy Manager (APM)