For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
Jun 03, 2014

Access to same subnet than BIIG IP from SSL VPN

Dear,   I've a question about a basic design for SSL VPN   We've a remote Range (SSL VPN) 192.168.250.0/24   We have a BIGIP located in DMZ 172.16.1.0/24. In this DMZ I've multiple servers: ...
application delivery
design
LTM
security
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Jun 05, 2014

Assuming you are willing to entirely redesign and build the DMZ and F5 setup then sure, you can fix this. Your best bet would be to put the F5 'inline'; so have a /29 small subnet between the firewall and F5, route a /24 or similar for Virtuals from the Firewall to the F5 over it and use another /24 for the real servers. Let me know if you want me to expand on that.