F5-BIG-AWF-R4600 Advanced Web Application Firewall

F5-BIG-AWF-R4600 Advanced Web Application Firewall

  • Enterprise-Grade Encrypted Traffic Inspection: 30K SSL TPS for comprehensive HTTPS inspection.
  • High-Capacity App-Layer Threat Protection: 30 Gbps WAF throughput for fast, complex policy enforcement.
  • Million-Level API Security: 1.3M L7 RPS to secure high-volume APIs.
  • Advanced Bot Defense: Multi-core architecture for intelligent bot detection and analytics.
Key Features

F5-BIG-AWF-R4600: Offering Advanced Protection for Mission-critical Applications and APIs.

F5-BIG-AWF-R4600 Features

The F5-BIG-AWF-R4600 is an enterprise-grade WAF purpose-built to meet higher traffic demands and stronger security requirements. Compared to entry-level AWF R2000 series (such as F5-BIG-AWF-R2800), the R4600 represents a generational leap with:

  • 16-core enterprise CPU
  • 64GB RAM
  • 2× SSL processing performance

These upgrades make it the ideal choice for mid-sized enterprises, large branch offices, or organizations in regulated industries like education and healthcare that require high-throughput, policy-rich web and API protection.

Enterprise-Grade SSL Traffic Inspection
With 30,000 SSL TPS, double that of the R2800, it can efficiently decrypt and inspect large volumes of HTTPS traffic. It ensures deep visibility into encrypted sessions—critical for protecting high-traffic e-commerce platforms, SaaS services, and online portals.

High-Throughput Application-Layer Protection
Supporting up to 30Gbps of L7 threat inspection and powered by a 12-core security engine, AWF-R4600 delivers enterprise-grade WAF capabilities—enabling advanced protections like OWASP Top 10 defense, data loss prevention, and behavioral analysis without performance trade-offs.

Million-Level API Security
With the ability to process 1.3 million Layer 7 requests per second, it is engineered for modern, API-intensive applications. It applies real-time validation, schema enforcement, and rate limiting to block malicious calls and protect your business-critical data.

Advanced Bot Mitigation
The robust hardware platform (64GB RAM, 12 vCPUs) supports advanced bot mitigation techniques including behavioral analysis, reputation checks, and interactive client challenges. It effectively identifies and stops malicious bots, scanners, and scrapers from disrupting your core services.

F5-BIG-AWF-R4600 Datasheet

  • L7 Threat Inspection Throughput: 30 Gbps
  • SSL TPS (2K Keys): 30,000
  • L7 Requests Per Second: 1.3M
  • Memory: 64 GB DDR4
  • Tenancy vCPUs: 12 Cores
  • Primary Ports: 4x 10G RJ45, 4x 25G SFP28
Specification

Traffic Processing and Acceleration

Intelligent Traffic Processing:

  • L7 requests per second: 1.3M
  • L4 connections per second: 500K
  • L4 HTTP requests per second: 2.5M Maximum
  • L4 concurrent connections: 38M
  • Throughput: 40 Gbps/30 Gbps L4/L7

Hardware Offload SSL/TLS:

  • 30K TPS (2K SSL TPS)
  • 14K TPS (ECDHE-ECDSA P-256 TPS)
  • 14K TPS (ECDHE P-256-RSA 2k TPS)
  • 20 Gbps bulk encryption

Hardware Compression: 20 Gbps

System Architecture & Logical Design

  • Software Architecture: 64-bit TMOS; 64-bit F5OS
  • Multi-Tenancy: 2 Tenant
  • Processor: 16-Core Intel® Atom® processor(12 CPUs available for Tenancy)
  • Memory: 64 GB DDR4
  • Hard Drive: 480GB M.2 SSD

Network Interfaces & Connectivity

  • Management Ports:
    • 1x 1000BASE-T,
    • 1x USB 3.0,
    • 1x serial console
  • 10/40 Gigabit Fiber Ports: 4 × 10 G/1 G RJ-45 ports
  • 25/10/1G Gigabit Fiber Ports: 4 × 25 G/10 G/1 G SFP+/SFP28

Power Supply & Energy Consumption Management

Power Supply:

  • 1 x 250 W 100-240 VAC (+/- 10%) AUTO Switching Platinum,
  • Dual DC PSU Optional

Typical Consumption: 85W (single power supply, 48V DC or 110V AC input)

Input Voltage / Typical Heat generated:

  • Single Power supply
  • 110 VAC input: 1455 BTU/hour
  • 230 VAC input: 1420 BTU/hour

Physical Specifications & Environmental Adaptation

Dimensions: H: 1.74 inches (4.37 cm) x W: 17.1 inches (Standard rack) x D: 16.9 inches (42.9 cm). 1U industry standard rack-mount chassis
Weight: 20.0 pounds (9.07 kg) with one power supply units (PSUs) (per unit)
Operating Temperature: 32 to 104°F (0 to 40°C)
Operational Relative Humidity: 5% to 85% (40 C) non-condensing

Safety Certification & Compliance

Hardware Certification Model: r2000
Safety Agency Approval:

  • ANSI/UL 60950-1-2014
  • CSA 60950-1-07, including A1:2011+A2:2014 IEC 60950-1:2005,
  • A1:2009+A2:2013
  • EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013
  • IEC 62368-1:2014 (Second Edition) EN 62368-1:2014+A11:2017
  • CSA C22.2 No. 62368-1-14, UL 62368-1, 2nd edition

Certifications / Susceptibility Standards:

  • 47 CFR FCC Part 15, Subpart B, Class A
  • EN 55032:2015 +A11:2020, Class A
  • EN 55035:2017 +A11:2020
  • EN 300 386 V2.1.1 (2016-07)
FAQs

What is the main reason to choose the AWF-R4600 over the AWF-R2800?
The AWF-R4600 offers double the memory (64GB), double the SSL performance (30K TPS), a 16-core CPU, and 25G ports—ideal for growing enterprises with complex security needs.

Does the F5-BIG-AWF-R4600 have hardware compression?
The R4600 uses its 16-core CPU for efficient software compression. In security-focused deployments, CPU resources prioritize threat inspection and SSL processing.

Can the AWF-R4600 protect a network with 25Gbps of internet traffic?
Yes. With 30Gbps threat throughput and 25G ports, the AWF-R4600 is perfect for protecting up to 25Gbps internet connections as a WAF gateway.

How does the AWF-R4600 help with PCI DSS compliance?
The AWF module meets PCI DSS Requirement 6.6 by providing robust protection against OWASP Top 10 threats, helping payment-processing organizations stay compliant.

contact for F5 product

Work with Our Experts in F5 Products

As leading F5 specialists, we offer a full range of services from expert product selection to seamless procurement and reliable delivery.
Our goal is to ensure you get the right F5 products for your needs, maximizing value and supporting your success.

Submit a Quick Quote

Freely send us message for any questions about F5 hardware, we will get back to you no later than 24 hours.