BIG-IP Advanced WAF
Protect your apps, APIs, and data against the most prevalent attacks such as zero-day vulnerabilities, app-layer DoS attacks, threat campaigns, application takeover, and bots.
Secure apps and APIs with BIG-IP Advanced WAF
Product Overview
Flexible deployment and management options to fit your needs
BIG-IP Advanced WAF identifies and blocks attacks other WAFs miss. BIG-IP Advanced WAF delivers a dedicated, dynamic dashboard ensuring compliance against threats listed in the OWASP Top 10, guided configurations for common WAF use cases, learning engine and customized policy building, and granular security policies for microservices and APIs.
Software
Deploy on any leading hypervisor in your data center or your private cloud.
Public cloud
Available from select public cloud providers, including Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform.
Core Capabilities
Advanced application protection
Combines machine learning, threat intelligence, and deep application expertise
API protocol security
Deploys tools to secure GraphQL REST/JSON, XML, and GWT APIs
Security as code
Declarative API-based deployment and configuration enables delivering security as “code”
In-browser data encryption
Encrypts data at the app layer to protect against data-extracting malware and man-in-the-browser attacks
Behavioral DoS
Behavioral analytics and machine learning provide highly accurate L7 DoS detection and mitigation
Defenses for the OWASP Top 10
Defends critical apps from today’s biggest security concerns, including those listed in the OWASP Top 10
Stolen credential protection
Protects against brute-force attacks that use stolen credentials
Proactive bot defense
Protects apps from automated attacks by bots and other malicious tools
Platform Support and Integrations
-
Leading independent software vendors (ISVs)
-
Public cloud providers
-
DAST and SAST providers
-
SIEM, SOAR, and XDR providers
Technology alliances
F5 collaborates with leading independent software vendors (ISVs) to help customers secure their digital experiences.
Public cloud providers
F5 application services integrate with major cloud providers and are available directly through marketplace offerings with variable PAYG or perpetual BYOL consumption options.
Import scanning results to help update signatures
Standard telemetry streaming within automation toolchain enables exportation of signals
Awards and Recognition
Resources
Featured
Not all WAF solutions are the same. Most are inadequate against the myriad of attacks across the evolving risk landscape. BIG-IP Advanced WAF is a new category of app protection that introduces unique capabilities to the WAF market.