Migrating the Cisco FWSM to F5 AFM

Hi Prasad,

You can have AFM configuration depends on your needs. It's true that AFM is based on virtual server configurations but I see that as an advantage.

Let's say You have one external, DMZ and Internal zones. Imagine you have subnets 10.x.x.x\8 for internal subnet and 20.x.x.x\8 as DMZ. You can create three virtual servers (IP forwarding VIP) with IP address 0.0.0.0\0 for external, 10.x.x.x\8 for internal and 20.x.x.x\8 for DMZ. You can add separate policy and rules for each virtual server.

You can see all these configurations in the single page if you navigate to AFM >> Active Rules. It will display all the policies and rules and even you can modify it from there.

Please refer AFM deployment guide for better understanding.

Hope this helps.

-Jinshu