The F5® Good, Better, and Best licenses are a huge step forward for F5 in bundling their BIG-IP® modules to deliver the most complete, and technically advanced Application Delivery Controller (ADC) in the industry. Understanding which modules are included in each is important – below is a breakdown of which modules come with each F5 license bundle, including their features and capabilities:
F5 Good Better Best
| Good | Better | Best | |
|---|---|---|---|
| BIG-IP® Local Traffic Manager™ | |||
| Load balancing and monitoring | ⬤ | ⬤ | ⬤ |
| Application visibility and monitoring | ⬤ | ⬤ | ⬤ |
| L7 intelligent traffic management | ⬤ | ⬤ | ⬤ |
| Core protocol optimization (HTTP, TCP, HTTP/2, SSL) | ⬤ | ⬤ | ⬤ |
| SSL proxy and services | ⬤ | ⬤ | ⬤ |
| IPv6 support | ⬤ | ⬤ | ⬤ |
| Programmability (iRules®, iCall®, iControl®, iApps®) | ⬤ | ⬤ | ⬤ |
| ScaleN™ (on-demand scaling of performance and capacity) | ⬤ | ⬤ | ⬤ |
| BIG-IP® APM® Lite (user authentication, SSL VPN for 10 concurrent users) | ⬤ | ⬤ | ⬤ |
| SYN flood DDoS protection | ⬤ | ⬤ | ⬤ |
| Software Services | |||
| Advanced routing (BGP, RIP, OSPF, ISIS, BFD) | Optional | ⬤ | ⬤ |
| BIG-IP® DNS | |||
| Global server load balancing | ⬤ | ⬤ | |
| DNS services | ⬤ | ⬤ | |
| Real-time DNSSEC solution | ⬤ | ⬤ | |
| Global application high availability | ⬤ | ⬤ | |
| Geolocation | ⬤ | ⬤ | |
| DNS DDoS attack prevention | ⬤ | ⬤ | |
| BIG-IP® Advanced Firewall Manager™ | |||
| High performance ICSA firewall | ⬤ | ⬤ | |
| Network DDoS protection | ⬤ | ⬤ | |
| Application-centric firewall policies | ⬤ | ⬤ | |
| Protocol anomaly detection | ⬤ | ⬤ | |
| BIG-IP® BIG-IP Application Security Manager® | BIG-IP® Application Security Manager® | BIG-IP® Application Security Manager® | BIG-IP® Application Security Manager® |
| PCI-compliant web application firewall | ⬤ | ||
| Web scraping prevention | ⬤ | ||
| Integrated XML firewall | ⬤ | ||
| Violation correlation and incident grouping | ⬤ | ||
| Application DDoS protection | ⬤ | ||
| BIG-IP® Access Policy Manager® | |||
| 500 concurrent user sessions; scalable up to 200,000 | ⬤ | ||
| BYOD enablement | ⬤ | ||
| Full proxy for VDI (Citrix, VMware) | ⬤ | ||
| Single sign-on enhancements (Identity federation with SAML 2.0) | ⬤ | ||
| BIG-IP® Advanced Web Application Firewall (AWAF) formerly known as Application Security Manager (ASM) | |||
| PCI-compliant web application firewall | ⬤ | ||
| Anti-Bot Defense against Credential Stuffing | ⬤ | ||
| L7 DDos & Behavioral DoS | ⬤ | ||
| Continuous Attack Signature updates | ⬤ | ||
| OWASP Compliance Dashboard | ⬤ | ||
| Data Safe | ⬤ | ||
| Web scraping prevention | ⬤ | ||
| Integrated XML firewall | ⬤ | ||
| Violation correlation and incident grouping | ⬤ | ||
| Application DDoS protectionBIG-IP® Access Policy Manager® 500 concurrent user sessions; scalable up to 200,000 BYOD enablement Full proxy for VDI (Citrix, VMware) Single sign-on enhancements (identity federation with SAML 2.0 | ⬤ | ||
SDN services are automatically included with all iSeries appliances. BIG-IP Application Acceleration Manager (AAM) is end-of-sale.