Which products make up TR7; what do ADC, WAAP, AAM and GTM cover?
Short answer
TR7 consists of four products: TR7 ADC, TR7 WAAP, TR7 AAM and TR7 GTM; every product is sold and licensed separately, and the products can be purchased on their own or in bundles. TR7 ADC (Application Delivery Controller; Load Balancer - ADC in the docs) receives the traffic on the vService, terminates TLS, passes the traffic through conditions and actions and distributes it to the healthy Backend Services. TR7 WAAP (Web Application and API Protection; WAF - WAAP in the docs) protects web applications and APIs. TR7 AAM (Application Access Management; AGS - AAM in the docs) controls access to applications with authentication, MFA and policies. TR7 GTM (Global Traffic Manager) routes traffic between data centers by giving the DNS response according to the health and location of the targets. In the interface, the products appear as Configuration Menu tabs; which modules the license covers is read on the License Management screen, in the Modules row.
Where It Is Used in TR7
| Where | Field / label | What for |
|---|---|---|
| Settings → General Settings → License Management | Modules: Load balancing (ADC), WAF, Access gateway (AGS), Global traffic manager (GTM), Bot/DDoS protection, Clustering | The modules the license covers |
| Configuration Menu tabs | Load Balancer, WAF, Bot/DDoS, AGS, GTM | The configuration screens of the products |
| Configuration Menu tabs | Certificates & PKI, Network, Settings | The platform components that all the products use in common |
Products
| Product | Full form | docs section | Scope |
|---|---|---|---|
| TR7 ADC | Application Delivery Controller | Load Balancer - ADC | L3-L4-L7 load balancing, SSL/TLS termination, health check, persistence, traffic management with conditions and actions |
| TR7 WAAP | Web Application and API Protection | WAF - WAAP | OWASP rules, protection with an API schema, learning-based rule generation, data masking, bot management |
| TR7 AAM | Application Access Management | AGS - AAM | Authentication, MFA, Backend SSO, session protection and account lockout policies |
| TR7 GTM | Global Traffic Manager | GTM | DNS-based multi-region traffic routing, health check, Disaster Recovery |
Certificates & PKI, Network and Settings are not separate products; they are platform components that all the products use in common (platform components). The scope of Load Balancer - ADC in detail: What does the TR7 Load Balancer - ADC module cover, and what does it not cover?
Common Misconceptions
- "Using one product requires buying all of them." Every product is licensed independently; the products can be purchased on their own or as a bundle.
- "All the tabs in the Configuration Menu appear on every device." The WAF and GTM tabs appear only if the related module is enabled in the license and the user has permission for that area; the Bot/DDoS and AGS tabs require the Load Balancer permission in addition to the license; the Load Balancer, Certificates & PKI, Network and Settings tabs depend only on the user's permissions.
- "The section names in the docs and the product names are different products." The Load Balancer - ADC, WAF - WAAP, AGS - AAM and GTM sections describe the TR7 ADC, TR7 WAAP, TR7 AAM and TR7 GTM products, respectively.
How it is done in the documentation
