For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JWhitesPro_1928's avatar
JWhitesPro_1928
Icon for Cirrostratus rankCirrostratus
Jun 30, 2016

AFM NAT vs LTM NAT

This feature seems to have creeped up somewhere in the 12.x release for AFM? Or maybe it's been there but I've never seen it...   https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/produc...
AFM
application delivery
LTM
security
Peter_Mills_697's avatar
Peter_Mills_697
Historic F5 Account
Mar 13, 2017

AFM NAT rules are applied after AFM Firewall rules. The functionality of the CGNAT module has been ported to AFM (dynamic-pat) and extended using 1:1 mapping features like static-nat and static-pat because a rule construct is more flexible. An AFM NAT Policy cannot be configured in tandem with other forms of address translation, like SNAT, a LSN pool or Automap since the two workflows are mutually exclusive.