ACL FOR APM

acls support only tcp, udp and any (ip protocols)

 

with the filter configuration you have the ability to allow icmp and the tcp ports you need.

 

 

see also

 

http://www.f5.com/pdf/deployment-guides/data-center-firewall-dg.pdf

 

"Using Packet Filters

 

Another tool made available to use for configuring our sources and destinations are Packet Filters.

 

These are configured on the BIG-IP system at a global level. This means that packet filters will

 

impact all traffic traversing the BIG-IP system. This is useful in the case of setting global security for

 

non TCP and UDP traffic such as ICMP."

 

 

But you can also

 

- allow tcp you need

 

- drop tcp

 

- drop udp

 

- allow all

 

but there are a lot of protocols which are allowed with this rule