Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

starboy's avatar
starboy
Icon for Cirrus rankCirrus
Jul 23, 2024

Advanced WAAP

Hi all  We are going to acquire the Big-IP Advanced WAF for traffic initiated from web servers to application servers. As an assignment, I need to clarify one thing: some of the servers don't use a ...
application delivery
security
Amine_Kadimi's avatar
Amine_Kadimi
Icon for MVP rankMVP
Jul 23, 2024

Having all components in the same VLAN doesn't make the application mono-tier, if you see it from the higher layers perspective. You still have different components to serve different functionalities.

So the answer is yes, you can have your F5 WAF between the web and the app servers. Basically, you'll just need to activate source address translation so that the return traffic goes through the F5