Forum Discussion

Altostratus

Feb 16, 2018

AFM Firewall and NAT policies - how to implement

Hi, I need to implement policies for few hundreds src IP, dst IP SNAT and NAT combinations. Something like that, all related to 13.1.0.1: For given dst IP: Allow traffic from given se...

Historic F5 Account

Aug 31, 2018

AFM NAT(CGNAT) is applied after AFM Firewall rules because it is pointless spending time processing traffic which will be dropped anyway. It seems popular to use a wildcard Virtual Server and attach an AFM policy to it containing a long set of AFM rules.

dragonflymr
Cirrostratus
Aug 31, 2018
Hi,

Thanks for answer. Probably you are right, but it some cases wildcard approach do not work, especially when rules are attached to non wildcard VS.

Piotr