The F5 Networks Silverline Web Application Firewall service offering provides quick web application firewall (WAF) implementation and unified, scalable policy enforcement capabilities. The service also includes 24x7 support from highly specialized F5 security experts with the company’s Security Operations Center (SOC) resources. As the latest addition to F5’s Silverline cloud-based application services platform, the new WAF offering is built on the award-winning capabilities of the company’s BIG-IP Application Security Manager product. F5 seamlessly provides leading WAF services in both on-premises and subscription-based cloud offerings. The company’s versatile, easy to deploy WAF solutions let organizations confidently incorporate cloud resources while protecting apps and data from increasingly sophisticated security attacks, risks, and vulnerabilities.

1. Introduction to
F5 Silverline Web Application
Firewall (WAF)
April 2015

2. © F5 Networks, Inc 2
Today’s application infrastructure
Most applications are
Web applications
Cloud and SaaS
based applications
are being deployed more than,
and faster than, ever before
Users are going
Mobile

3. © F5 Networks, Inc 3
Customers need a more operationally and
cost efficient way to protect web applications
across multiple environments without scaling
out IT infrastructure and staff.
Maintain
compliance
(PCI DSS)
Defend against
Layer 7 attacks
Secure data
and web
applications

4. © F5 Networks, Inc 4
Recognized as the most
scalable WAF on the
market
Deployed in more
datacenters worldwide
than any other WAF
Now available as an
enterprise-grade cloud-
based service managed
by F5 Security
Operations Center
(SOC) experts
F5’s web application firewall portfolio
Built on BIG-IP ASM
VIPRION Platform BIG-IP Platform BIG-IP Virtual Edition F5 Silverline
WAF

5. © F5 Networks, Inc 5
Protect web applications and data from layer 7 attacks, and enable compliance,
such as PCI DSS, with the Silverline Web Application Firewall service which is
built on BIG-IP Application Security Manager and backed by 24x7x365 support
from F5 experts.
Silverline Web Application Firewall (WAF)
Proven security effectiveness as a convenient cloud-based service
Legitimat
e
User
L7 Protection:
Geolocation attacks, DDoS,
SQL injection, OWASP Top
Ten attacks, zero-day threats,
AJAX applications, JSON
payloads
Public Cloud
Hosted Web
App
Private Cloud
Hosted Web
App
VA/DAST
Scans
Policy can be built
from 3rd Party
DAST
Web Application
Firewall Services
W
AF
Cloud
Physical Hosted
Web App
Attackers F5 Silverline
WAF

6. © F5 Networks, Inc 6
Key benefits
Reduce operating
costs
Protect web apps,
anywhere
Leverage proven
security efficacy
Rapidly deploy WAF
protections and drive
operational and cost
efficiencies by outsourcing
WAF policy management to
F5 security experts.
Protect web apps, no matter
where they reside with
consistent policies across
hybrid environments in
conjunction with BIG-IP
deployments.
Protect against critical web
attacks with an enterprise-
grade service built on BIG-IP
ASM which is recommended
by NSS Labs with 99.89%
overall security
effectiveness*.
Source: NSS Labs Web Application Firewall Product Analysis. F5 BIG-IP ASM 10200 V11.4.0. https://interact.f5.com/2015ALLF-NSS-Web-App-Firewall--Analysis-for-BIG-IP-ASM_2---
Reg.html

7. © F5 Networks, Inc 7
recommends BIG-IP ASM
Web Application Firewall when
compared with competitors:
Overall security
effectiveness
%
99.89
Minimal false positives
%
.124
Enterprise-grade protection against
layer 7 geolocation attacks, DDoS,
SQL injection, OWASP Top Ten
attacks, zero-day threats, AJAX
applications, and JSON payloads
delivered as a convenient cloud-
based service.
Leverage proven security efficacy
An enterprise-grade web application firewall service
Source: NSS Labs Web Application Firewall Product Analysis. F5 BIG-IP ASM 10200 V11.4.0. https://interact.f5.com/2015ALLF-NSS-Web-App-Firewall--Analysis-for-BIG-IP-ASM_2---
Reg.html

8. © F5 Networks, Inc 8
F5 security experts proactively monitor,
and fine-tune policies to protect web
applications and data from new and
emerging threats.
• Expert policy setup
• Policy fine-tuning
• Proactive alert monitoring
• False positives tuning
• Detection tuning
• Whitelist / Blacklist Set up and
monitoring
Availability & Support
Expert Policy Setup and
Management
Active Threat Monitoring
Reduce operating costs
by outsourcing WAF policy management to F5 SOC experts
F5 Security Operations Center

9. © F5 Networks, Inc 9
Protect web apps, anywhere
Easily extend WAF protections to SaaS and cloud apps
Protect web apps, no matter where they reside with consistent policies and
compliance across hybrid environments, in conjunction with BIG-IP
deployments.