Beyond visibility: Six more questions F5 Insight for ADSP helps you answer and act on

Nirav ShahSVP, Product and Solution Marketing | F5

Identifying an operational gap is only half the battle. The other half is fixing it in production safely, quickly, and across every device you run. To help our customers meet this need, we launched F5 Insight for ADSP earlier this year. Since then, hundreds of customers have deployed the solution, gained a deeper understanding of apps and their F5 BIG-IP infrastructure, and streamlined operational cadences for their fleets.

F5 Insight for ADSP v2.0, generally available starting today, picks up where our first six questions left off and helps you act on what you see, at fleet scale.
The timing matters. In the F5 2026 State of Application Strategy Report, 93% of organizations said they run applications in a hybrid model. Recent regulations like DORA and NIS2 are forcing the financial sector and other industries to take another look at their IT visibility and fleet management procedures. Frontier AI is also shrinking the time from "issue found" to "issue exploited" from weeks to hours, sometimes before public disclosure. Yet teams still need validation cycles to patch safely.

That leaves an exposure window, which makes patching a security capability, not a maintenance chore. Observability tools report and visualize data. Device managers help teams execute on that intelligence. F5 Insight does both, in one end-to-end solution. Here are six more questions it can help you answer and act on.

1 – Can I patch my fleet without losing another weekend?

Serial, device-by-device change windows eat weekends and cut into time to recharge. Homegrown runbooks can break quietly and cause major headaches. The hard part isn't downloading or distributing an image. It's executing changes safely, repeatedly, across hundreds of systems without downtime or configuration drift.

F5 Insight solves these common challenges with highly automated, guided, high availability (HA)-aware fleet management jobs for TMOS and F5OS (rSeries) instances. These fleet management jobs can be run serially or in parallel (including in custom batches) and feature optional pause points if something doesn’t look right and requires investigation. Rolling and batch settings fit different customer architectures and patch run book preferences, covering HA Pairs (Active/Standby), Standalone devices, and rSeries appliances.

Jobs cover many available platforms: vCMP Guests, BIG-IP Virtual Editions, iSeries, F5OS (rSeries), and F5OS Tenants (both rSeries tenants and VELOS tenants). And with the release of F5 Insight v2.0, all this fleet management functionality now extends to minor version upgrades (17.x -> 17.y or 21.x -> 21.y) in addition to the updates, patches, and engineering hotfixes (EHFs) already supported.

In F5 lab testing, a full update cycle across a 100-device F5 BIG-IP fleet took less than 90 minutes, including pre-flight checks, execution, and post-flight verifications. That's a long lunch break instead of a lost weekend. Recently, a large financial services customer was able to update dozens of BIG-IP instances faster and with fewer engineers than ever before. According to feedback from this customer, one engineer using F5 insight was able to do in 2 hours what would normally take three to four engineers four hours each.

F5 Insight v2.0 also introduces license management for BIG-IP instances and the ability to clean up outdated and unused software images—consolidating and reducing the number of required management plane tools/interfaces and helping teams to reclaim disk space and keep the solution lightweight.

2 – How do I know an update won't break something?

Speed doesn’t mean much if every change feels like a gamble. Something as simple as a missed license check can leave a device inoperative after it’s rebooted.

F5 Insight helps teams reduce risk by offering pre-and-post flight snapshots that show what changed for every management job.

F5 Insight’s readiness gates catch these risks before the change, checking resources, image presence, and license compatibility (and, for F5OS-A: cluster, firmware, and tenant status). The improved guided workflows in F5 Insight v2.0 also fold backup and license re-activation into the install workflow—simplifying and enhancing operations. Afterward, side-by-side pre-and-post-flight snapshots in the UI show what changed across interfaces, pools, and virtual servers. The result? You get proof, not assumptions.

3 – What if it goes wrong?

Teams won't patch faster across hundreds of devices unless they know they can undo changes if something goes wrong. F5 Insight V2.0 adds the capability to roll back instances to a known-good software version for TMOS and F5OS—including HA or standalone devices—with the same human-in-the-loop pauses as the original install. Additionally, F5 Insight v2.0 introduced backup and restore functionality into fleet management capabilities. Backups can be both manually triggered or scheduled and can optionally retrieve and securely store the Master/Primary Key, which is critical for restores config. With that, the

Restore functionality includes options that allow for RMA workflows, like no-license and keep-current-management-ip, and platform-migrate, and replacing the Master/Primary key that was collected with the backup—to allow for maximum flexibility when you need it most.

F5 Insight v2.0 and the rollback job reduce risk by providing operators a path forward in the event something goes wrong.

F5 Insight is also a highly resilient solution. In addition to BIG-IP and F5OS backup and restore capabilities, operators can back up and restore F5 Insight configurations, dashboards, and telemetry (directly from the UI) to recover fast in the event of an outage.

4 – What's really running, and how secure is it?

Ask five teams what sits behind a virtual server, and you may get five answers. Object names are conventions, and conventions drift depending on team, function, or day of the week.

With F5 AI Data Fabric integration, F5 Insight v2.0 automatically identifies and categorizes application workloads, such as AI/ML, healthcare, finance, and IAM. It works from traffic signals Insight already collects—customers will just need to share metadata with F5 to process securely. Each detection carries a confidence score, and you can confirm, rename, or reject it.

F5 Insight v2.0 makes the security scorecard and workload identification generally available. This intuitive view adds a 0–100 score and A–F grade per application, and shows its work, making the evidence behind every finding available to operators. This operational intelligence is invaluable for prioritizing resources and acting quickly.

To power these features, you enable F5 AI Data Fabric and share a limited set of traffic metadata with F5. Request and response content isn't included.

5 – Are we ready for post-quantum cryptography?

Preparing for Q Day is a top-of-mind concern for many teams. The biggest challenge is determining what cryptographic assets are in place across devices. Many teams just don’t know where to begin, so migration planning stalls. The new PQC readiness dashboard works at the virtual-server level. For each virtual server and its Client SSL profile, it shows whether PQC is supported, configured, in use, or configured but not in use, plus cryptographic dependencies and gaps.

With U.S. federal mandates pushing PQC readiness sooner rather than later, the all-new PQC readiness dashboard sheds light on crypto agility and enables public sector agencies, financial institutions, healthcare organizations, and other critical infrastructure providers get clear visibility into where they stand and a defensible starting point for building and improving crypto agility.

6 – Can I do all this with the tools I already have?

F5 strives to meet our customers where they are. And that means not having to choose how to present intelligence or abandon tools you’ve chosen. Teams already juggle an average of 10 monitoring tools, according to Dynatrace. Nobody needs an eleventh that demands a rip-and-replace exercise.

F5 Insight v2.0 enables teams to export time-series metrics to platforms like Datadog and Splunk, so you can correlate F5 data with the rest of your telemetry. Best of all, you choose what metrics and data points are exported, which helps teams easily meet corporate policies.

F5 Insight v2.0 also enhances overall useability with searchable AI chat history navigation that greatly reduces the time needed to surface the intelligence you’re looking for to just a couple of clicks.

Finally, we’ve also improved access, auth, and role-based access control administrator, operator, and viewer roles work with SAML SSO, map LDAP directory groups to Insight roles, and ensure visibility into interactions with an AI audit log for accountability—all of which enable better enterprise governance.

From seeing to doing

Hybrid multicloud complexity isn't going away, and neither are shrinking patch windows. F5 Insight v2.0 pairs F5 expertise in visibility and AI-guided narratives with governed fleet execution to help teams align to a scalable, repeatable approach to operations: Observe the signal. Understand the context. Act on this advanced intelligence.

This operational mantra helps NetOps, SecOps, and platform teams close the gap between "risk identified" and "fix applied."

To learn more, please register for our F5 Insight for ADSP webinar and check out our technical article on DevCentral.

Also, be sure to read my previous blog post, “Announcing F5 Insight for ADSP: Answering six critical questions.”

About the Author

Nirav ShahSVP, Product and Solution Marketing | F5

Nirav Shah is the Senior Vice President and Head of Products and Solution Marketing at F5, where he leads the strategic direction for Application Security and AI Security. Before joining F5, he spent eleven years at Fortinet in several leadership positions, most notably heading the AI-Powered SASE, SOC, and Secure Networking solutions. His extensive background also includes significant roles at Cisco Systems, where he spearheaded major initiatives for SD-WAN. With more than two decades of experience in the cybersecurity sector, he has an established record of launching market-defining products and building high-performance teams that align product development with sales and marketing for maximum impact. As a thought leader and USC alumnus, he is a frequent speaker at industry conferences and a regular contributor to leading publications on the intersection of AI and cybersecurity, while remaining dedicated to mentoring emerging cybersecurity professionals.

More blogs by Nirav Shah