LTM service policy vs AFM service policy

Question

When AFM is provisioned, it is possible to apply a Network Service Policy to the Global context, on a per-rule basis, and on a per-virtual basis.&nbsp;
Does a Network Service Policy have the same effect in all cases, provided the targeted traffic is flowing through the virtual it is applied to, or matches the AFM rule to which it is applied?&nbsp;
Is it necessary to configure the service policy in both places (rule and virtual), in order for it to be applied to the targeted traffic?&nbsp;

leonardo_souza · Answer

This concept in the AFM maybe the confusing from firewall guys coming from other vendors, but that is simple if you have experience with LTM.&nbsp;
First, you need to understand in which mode you have AFM.
Here is the section of the manual that explains that:&nbsp;
https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-13-0-0/1.html&nbsp;
The rule processing follows an order, there are more options, like self IP:&nbsp;
https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-13-0-0/2.html&nbsp;
So, if you have the AFM in ADC mode (default), you don't need to configure any rule when you create a virtual server. :P&nbsp;

Forum Discussion

LTM service policy vs AFM service policy

1 Reply

Recent Discussions

minimum tmos software version for connect CIS (openshift)

Chrome V 124+ on MacOS - Virtual Server Access Issue

F5 Rseries HA

Need advise to setup a policy on F5

F5 Rseries R2600 Tenant sizing

Related Content

F5 Distributed Cloud - Service Policy - Header Matching Logic & Processing

Converting TCL-Based iRules to Distributed Cloud Service Policies and L7 Routes

Per-app failover for Kubernetes-based services using F5 Distributed Cloud Services

Migrating F5 BIG-IP APM From Legacy NAC Service to Compliance Retrieval Service

Kubernetes architecture options with F5 Distributed Cloud Services