CyberIndexBeta

Product

Network firewall module for the F5 BIG-IP platform, available on BIG-IP/VIPRION hardware, as a virtual edition, and as cloud CNF/VNF. BIG-IP AFM is a core component of F5’s application protection solutions, which combine four key security elements: firewall, DDoS mitigation, DNS security, and application Intrusion Protection Systems (IPS). BIG-IP AFM is a high-performance, full-proxy network security solution designed to protect networks and data centers against incoming threats that enter the network on the most widely deployed protocols. BIG-IP AFM, an ICSA lab certified firewall, drives accurate detection with machine learning, stress monitoring, dynamic signatures, and attack mitigation. It is recorded as supporting application control, central management console, deep packet inspection and intrusion prevention (ips).

Current Version
21.1.0.1
Market
EnterpriseService Provider
Licence
Paid
Price
Quote
Record Created
2026-09-19
Last Updated
2026-10-28

Vendor

F5 is an application delivery company, founded in Seattle in 1996 and listed on Nasdaq, and its equipment sits in front of applications rather than on endpoints: load balancing traffic, terminating encryption and enforcing policy at the point where users meet a service. Its security products grow out of that position. BIG-IP Advanced Firewall Manager is the network firewall module within its BIG-IP platform, and BIG-IP Next Edge Firewall CNF is the container-native version for Kubernetes environments; alongside them sit its web application firewall, bot defence and API security products, and NGINX, the web server and proxy it acquired in 2019 and still publishes as open source. What F5 protects is the application side of a network, which is not what the endpoint laboratories test. Its rows here record the firewall products rather than comparative malware results. Vendor page →

Website
f5.com
Country
United States
Headquarters
Seattle, United States
Year Established
1996
Customers
23K organisations
Users
100M users
Revenue
$3.1B (2025)

Platforms

Cloudnative
Hardware Appliancenative
Virtual Appliancenative

Target Market

Enterprise primaryService Provider secondary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)Not known
SSL/TLS Inspectionkeynative
VPN Gatewaykeynative
SD-WANNot known
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management Consolenative

2 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeNetwork (NGFW / UTM)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 21.1.0.1platform not recorded

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Common Criteria5 active3 expiredshow 8 certificates ▾
FIPS 140-34 activeshow 4 certificates ▾

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-28New versionNew version: 21.1.0.1evidence
  • 2026-10-14Capability addedHigh Availability: built inevidence
  • 2026-10-12Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-12Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-12Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-12Certification addedCertified: Common Criteriaevidence
  • 2026-10-12Certification addedCertified: Common Criteriaevidence
  • 2026-10-12Certification addedCertified: Common Criteriaevidence
  • 2026-10-12Certification addedCertified: Common Criteriaevidence
  • 2026-10-12Certification addedCertified: Common Criteriaevidence
  • 2026-10-08Capability addedCentral Management Console: built inevidence
  • 2026-10-08Capability addedSSL/TLS Inspection: built inevidence
  • 2026-10-07Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-07Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedVPN Gateway: built inevidence
  • 2026-10-07Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-10-07Capability addedStateful Inspection: built inevidence
  • 2026-10-06Capability addedIntrusion Prevention (IPS): integratedevidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-09-20Pricing plan addedPrice: price on requestevidence
  • 2026-09-20New versionNew version: 17.5.1evidence
  • 2026-09-20Platform addedRuns on Cloudevidence
  • 2026-09-20Platform addedRuns on Virtual Applianceevidence
  • 2026-09-20Platform addedRuns on Hardware Applianceevidence
  • 2026-09-19Product createdNew product, listed in Network Firewallevidence
  • 2026-09-19Product updatedAlso sold to: Service Providerevidence
  • 2026-09-19Product updatedSold to: Enterpriseevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.