Intro
BIG-IP Next Central Manager enables you to control all your BIG-IP security devices from a single location, making it easier to manage and protect your applications across large networks.
Context/Specs
Designing Real-Time Protection with Live Updates
UX-driven solution to support timely security patching and user control
UX-driven solution to support timely security patching and user control
The "Live Updates" feature ensures continuous protection by automatically updating website security against emerging online threats. Think of it as a real-time security guard that evolves to keep your system safe.
I led the design and behavior definition of this feature, leveraging my background in UX for complex systems. I partnered with project managers and engineers to develop a solution that’s intuitive and responsive to user needs.
Goals: Understand how the "Live Updates' function works in older F5 products. Identify user challenges and strengths. Redesign the feature to make updates more straightforward to manage and more transparent.
Success Metrics:
• Users can install updates manually without errors
• Users can configure automatic updates with confidence
• Users are notified of pending updates if manual action is needed
• Users can install updates manually without errors
• Users can configure automatic updates with confidence
• Users are notified of pending updates if manual action is needed
Timeline: ~2 months
Constraints: Create a UI that meets both product demands and user expectations for real-time protection.
The role of "Live Updates" at F5 BIG-IP Next
"Live updates" are crucially important for website security. Here's why:
1. Real-time protection: Online threats constantly evolve, and new attack methods emerge regularly. The live updates feature ensures that the security measures are always current, enabling the system to respond to new threats as they arise in real-time.
2. Proactive defense: With live updates, F5 ASM can proactively adapt to potential risks, even before they become widely known or exploited. This helps prevent potential breaches or disruptions before they occur.
3. Minimal downtime: Automatic updates reduce the need for manual intervention and maintenance, ensuring that the website's security remains effective without causing unnecessary downtime.
4. Enhanced security posture: The website can maintain a strong security posture by staying up-to-date with the latest security patches and threat intelligence, deterring potential attackers, and minimizing the risk of data breaches or other security incidents.
5. Peace of mind: For website owners and administrators, the live updates feature provides peace of mind, knowing that their security defenses are continually being reinforced to protect against new and emerging threats.
In summary, the "Live Updates" feature is a critical component of F5 ASM, as it plays a central role in maintaining a dynamic and resilient defense against the ever-changing landscape of online threats.
Research Steps & Challenges
Competitive Analysis
I researched products that have similar functionality and purpose. Like F5's direct competitors, and F5's old products, I've found out which features are the most attractive
and wanted.
and wanted.
Persona: SecOps
Talk to potential users
After completing the research, I created mockups and shared my thoughts on improving "Live Updates" with the users.
This is how it works on F5 old products:
MVP
Ability to:
1. Update manually
2. See pending new updates
1. Update manually
2. See pending new updates
Design
Design Iterations Mistakes
Final Design
Live Updates Main Screen
"Update All" Flow
"New Updates Ready"
Conclusions
Product Impact
- Users can now find and use Live Updates more easily
- User feedback helped shape the following feature: Scheduled Updates
Key Learnings from Research
- Many users delay or skip updates
- Users want clear notifications when updates are available
- Some users need the ability to roll back to a previous version
