Introduction to

F5 Silverline Web
Application Firewall (WAF)

April 2015

Todays application infrastructure

Users are going

Mobile

Most applications are

Web
applications
F5 Networks, Inc

Cloud and SaaS

based
applications
are being deployed more
than, and faster than, ever
before

Customers need a more operationally

and cost efficient way to protect web
applications across multiple
environments without scaling out IT
infrastructure and staff.

Secure data
and web
applications
F5 Networks, Inc

Maintain
compliance
(PCI DSS)

Defend
against
Layer 7
attacks
3

F5s web application firewall portfolio

Built on BIG-IP ASM

Recognized as the most scalable WAF on the market

Deployed in more datacenters worldwide than any other WAF
Now available as an enterprise-grade cloud-based service managed
by F5 Security Operations Center (SOC) experts

WA
F

VIPRION Platform

F5 Networks, Inc

BIG-IP Platform

BIG-IP Virtual Edition

F5 Silverline

Silverline Web Application Firewall (WAF)

Proven security effectiveness as a convenient cloud-based

service
Protect web applications and data from layer 7 attacks, and enable
compliance, such as PCI DSS, with the Silverline Web Application
Firewall service which is built on BIG-IP Application Security Manager
and backed by 24x7x365 supportCloud
from F5 experts.
L7 Protection:
Geolocation attacks, DDoS,
SQL injection, OWASP Top
Ten attacks, zero-day
threats, AJAX applications,
JSON payloads
Legitima
te
User

Attacker
s

Private Cloud
Hosted Web
App

Web Application
Firewall Services
WWA
AF F

F5 Silverline

Physical
Hosted Web
App
VA/DAST
Scans
Policy can be
built from 3rd
Party DAST

F5 Networks, Inc

Public Cloud
Hosted Web
App
5

Key benefits

Leverage proven
security efficacy

Reduce operating
costs

Protect web apps,

anywhere

Protect against critical

web attacks with an
enterprise-grade service
built on BIG-IP ASM which
is recommended by NSS
Labs with 99.89% overall
security effectiveness*.

Rapidly deploy WAF

protections and drive
operational and cost
efficiencies by
outsourcing WAF policy
management to F5
security experts.

Protect web apps, no

matter where they reside
with consistent policies
across hybrid
environments in
conjunction with BIG-IP
deployments.

Source: NSS Labs Web Application Firewall Product Analysis. F5 BIG-IP ASM 10200 V11.4.0.
https://interact.f5.com/2015ALLF-NSS-Web-App-Firewall--Analysis-for-BIG-IP-ASM_2---Reg.html
F5 Networks, Inc

Leverage proven security efficacy

An enterprise-grade web application firewall service

Enterprise-grade protection
against layer 7 geolocation
attacks, DDoS, SQL injection,
OWASP Top Ten attacks, zero-day
threats, AJAX applications, and
JSON payloads delivered as a
convenient cloud-based service.

recommends
BIG-IP ASM Web Application
Firewall when compared with
competitors:

99.8
9. %
12

Source: NSS Labs Web Application Firewall Product Analysis. F5 BIG-IP ASM 10200 V11.4.0.
https://interact.f5.com/2015ALLF-NSS-Web-App-Firewall--Analysis-for-BIG-IP-ASM_2---Reg.html
F5 Networks, Inc

% Overall security
effectiveness

Minimal false
positives

Reduce operating costs

by outsourcing WAF policy management to F5 SOC experts

F5 security experts proactively
monitor, and fine-tune policies to
protect web applications and data
from new and emerging threats.

F5 Security Operations
Center
Expert Policy Setup
and Management

Expert policy setup

Policy fine-tuning
Proactive alert monitoring

Availability &
Support

False positives tuning

Detection tuning
Whitelist / Blacklist Set up and
monitoring
F5 Networks, Inc

Active Threat
Monitoring
8

Protect web apps, anywhere

Easily extend WAF protections to SaaS and cloud apps

Protect web apps, no matter where they reside with consistent
policies and compliance across hybrid environments, in conjunction
with BIG-IP deployments.

F5 Networks, Inc