For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
Jun 03, 2014

Access to same subnet than BIIG IP from SSL VPN

Dear,   I've a question about a basic design for SSL VPN   We've a remote Range (SSL VPN) 192.168.250.0/24   We have a BIGIP located in DMZ 172.16.1.0/24. In this DMZ I've multiple servers: ...
application delivery
design
LTM
security
ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
Jun 05, 2014

Hi,

 

Not sure I understand why we need to put it inline?

 

What will be the benefits inspite of using a dedicated DMZ for the F5 ?

 

Thanks for you help

 

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Jun 05, 2014
    The benefits are no SNAT and full visibility of all traffic into and out of the DMZ. It's still just a DMZ but you have full control and visibility at L3 within it.