CyberIndexBeta

Product

Kubernetes-native firewall, DDoS and IPS network function for containerized and 5G networks. BIG-IP CNFs can run on supported Kubernetes platforms across private cloud, service provider cloud, core, and edge environments. Cloud-Native Edition brings together BIG-IP CNFs, BIG-IP Next for Kubernetes, and BIG-IP eBPF Observability to provide traffic management, security, application delivery, infrastructure services, and visibility for Kubernetes environments. Automate operations with Kubernetes APIs, scale resources with demand, and consolidate critical services on a proven BIG-IP data plane for service provider and enterprise environments. It is available as a container image.

Current Version
2.4.2
Market
Service Provider
Licence
Paid
Price
Quote
Record Created
2026-09-20
Last Updated
2026-10-28

Vendor

F5 is an application delivery company, founded in Seattle in 1996 and listed on Nasdaq, and its equipment sits in front of applications rather than on endpoints: load balancing traffic, terminating encryption and enforcing policy at the point where users meet a service. Its security products grow out of that position. BIG-IP Advanced Firewall Manager is the network firewall module within its BIG-IP platform, and BIG-IP Next Edge Firewall CNF is the container-native version for Kubernetes environments; alongside them sit its web application firewall, bot defence and API security products, and NGINX, the web server and proxy it acquired in 2019 and still publishes as open source. What F5 protects is the application side of a network, which is not what the endpoint laboratories test. Its rows here record the firewall products rather than comparative malware results. Vendor page →

Website
f5.com
Country
United States
Headquarters
Seattle, United States
Year Established
1996
Customers
23K organisations
Users
100M users
Revenue
$3.1B (2025)

Platforms

Containernative

Target Market

Service Provider primary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)Not known
SSL/TLS InspectionkeyNot known
VPN Gatewaykeynative
SD-WANNot known
Application Controlkeynative
High AvailabilityNot known
Deep Packet Inspectionnative
Central Management ConsoleNot known

5 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeNetwork (NGFW / UTM)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 2.4.2platform not recorded

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-20. Everything below is what has changed since.

  • 2026-10-28New versionNew version: 2.4.2evidence
  • 2026-10-20Pricing plan addedPrice: price on requestevidence
  • 2026-10-13New versionNew version: 2.4.0evidence
  • 2026-10-07Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-07Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedVPN Gateway: built inevidence
  • 2026-10-07Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-10-07Capability addedStateful Inspection: built inevidence
  • 2026-09-20Product createdNew product, listed in Network Firewallevidence
  • 2026-09-20Product updatedSold to: Service Providerevidence
  • 2026-09-20Platform addedRuns on Containerevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.