F5 adds fleet management tools for BIG-IP environments

F5 has introduced new fleet management tools for its Insight for ADSP platform, aimed at BIG-IP environments.

The new functions give security and operations teams a single view of software versions, update readiness, and security posture across BIG-IP estates. They also add guided workflows to stage and carry out TMOS updates across standalone deployments, high-availability pairs, and fleet segments.

The move comes as software suppliers and customers face shorter response windows for newly disclosed vulnerabilities. The latest release builds on F5's shift to monthly hardened software releases and is intended to help customers move more quickly from identifying exposure to applying fixes in production.

New tools include pre-execution readiness checks designed for fleet and high-availability architectures, along with update status tracking during maintenance windows. These are intended to help teams reduce the risk of disruption while keeping a record of progress across distributed environments.

F5 has also added governance features tied to the use of AI in day-to-day operations. These include integration with existing identity systems through LDAP and SAML single sign-on, role-based access controls, and what F5 describes as a tamper-evident audit trail for interactions with its AI assistant.

According to F5, the audit log records what the AI accessed, what it recommended, who approved the action, and the resulting outcome. Records are retained for 30 days, with controlled access.

Operational pressure

The changes reflect a wider shift in cyber defence operations as generative and frontier AI tools reduce the time needed to identify and exploit software weaknesses. That has increased pressure on infrastructure and security teams to assess exposure and deploy updates without interrupting critical services.

The latest version of Insight for ADSP links observability data with fleet management context, allowing users to ask natural-language questions about their environments. Through MCP integration and support for large language models, teams can query which applications and policies are affected by a given vulnerability and receive prioritised action plans.

Users can rely on pre-configured queries created by F5 specialists or submit custom questions based on their own environments. The system is intended to help teams connect visibility into risk with practical steps for remediation.

Kunal Anand, Chief Product Officer at F5, outlined the company's view of the shift in cyber operations.

"Frontier AI has fundamentally altered both sides of cybersecurity," said Kunal Anand, Chief Product Officer at F5. "It gives defenders powerful new ways to harden software, and it gives attackers faster ways to find and exploit vulnerabilities. F5 is meeting that shift end-to-end. We are changing how we build, harden, and deliver software, and we are giving customers the operational control to move at the same speed. F5 Insight helps teams see what needs attention, update critical infrastructure safely at scale, and prove what changed, when, and by whom. That is what resilience looks like in the frontier AI era."

Governance focus

The governance elements are likely to matter most to customers in regulated sectors, where change control and auditability are often as important as patching speed. By tying authentication into corporate identity providers and limiting visibility and actions through role-based controls, F5 is seeking to place AI-assisted operations within existing oversight structures.

The latest release is available now for BIG-IP environments, with Insight for ADSP offered as self-managed software. A software-as-a-service version will follow.

BIG-IP remains one of F5's central application delivery and security products, and the addition of fleet-wide update management suggests the company is placing greater emphasis on operational tooling around established infrastructure. That focus reflects a market need for tighter control over patching and configuration changes as vulnerability handling becomes a more continuous process.

For operations teams, the practical issue is no longer only whether a fix exists, but whether it can be deployed consistently across large estates with a clear trail of approval and execution. F5's latest release is aimed squarely at that problem.