F5 Advanced Web Application Firewall
Connect to the Extended Enterprise with Confidence and Security

Overview:

Web attacks are the leading cause of data breaches. Despite the best efforts of secure application- and patch-management processes, half of all applications remain vulnerable, 24x7. Web application firewalls (WAF) protect your applications from data breaches by fixing vulnerabilities and stopping attacks. F5 Advanced WAF helps defend against attacks that target bot protection, application-layer encryption, APIs, and behavior analytics.

Attackers have embraced the use of automation to scan your applications for vulnerabilities, attack account credentials, or cause denial of service (DoS). F5’s proactive bot defenses stop automated attacks and leverage a combination of challenge- and behavior-based techniques to identify and filter out bot traffic. By stopping bad bots, you can eliminate many of these opportunistic attacks.

Seventy-five percent of data breaches start with identity attacks. Advanced WAF includes F5 DataSafe to help encrypt data and credentials at the application-layer—without having to update the application. This encrypts the data as it passes through the Advanced WAF solution.

Behavior analytics are a requirement for detecting blended attacks. Many layer 7 distributed denial-of-service (DDoS) attacks are stealthy and may go undetected by traditional signatures and reputation-based solutions. Advanced WAF automatically learns the application behavior, then combines the behavioral heuristics of traffic with the server stress to determine DDoS conditions. This process provides the most accurate detection without false positives. Dynamic signatures are then created and deployed on the fly for real-time protection.

Why F5 Advanced WAF?

Your apps are your business. Problem is, applications are the initial target in 53 percent of breaches. F5 Advanced WAF protects against the most prevalent attacks on your apps, without having to update the apps themselves:

• Automated attacks and bots that can overwhelm application resources
• Attacks that steal application credentials or take advantage of compromised accounts
• Application-layer attacks that evade signature- and reputation-based security solutions
• New attack surfaces and threats due to the rapid adoption of APIs
• Bots that target browser-based and mobile clients

Key Benefits

• Protect your web applications from vulnerabilities and web attacks
• Identify and mitigate automated attacks by bots and other attack tools before they cause damage
• Identify attacks using machine learning to detect and mitigate attacks with the highest level of accuracy