For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Hawary's avatar
Hawary
Icon for Altostratus rankAltostratus
Mar 26, 2021

APM behind Third Party WAF

hi Folks, i would like to ask about, if it possible to put the APM behind third party external WAF (L3 WAF)? how will the traffic flow from external users to internal network? is there any guide to ...
application delivery
BIG-IP
BIG-IP Access Policy Manager (APM)
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Mar 26, 2021

As I understand you want to use Sophos in L3 mode, right?

You can search (google) for F5 reference architectures. You will find a couple of diagrams that actually recommend to have a L3/4 network firewall, like F5 AFM, in a separate tier in front of APM or ASM/AWAF, in order to protect from flooding attacks for example.

 

This link is a bit dated, but is close to your scenario: The F5 DDoS Reference Architecture - Enterprise Edition.