APM network access for iOS and Android

Hi Guys, I would like to configure network access from mobile phones (iOS and android) with using BIG-IP Edge Client.

 

I developed F5 VE cluster in version 12. Internal VLAN 172.16.4.0/24 External VLAN 172.17.3.0/24 IP address pool for clients: 172.30.20.0/24 I have got public IP address for APM

 

As you see I don't have public IP address assigned to F5, can I create NAT and firewall rules? Is it good idea?

 

NAT: Orginal packets: Src: Any, Dst: Public IP address for F5, Service: 443 Translated packets: Src: Original, Dst: Internal VS APM, Service: 443

 

Firewall: Src: Any, Dst: Public IP address for F5, Service:443 Do you have some experience in such configuration? Do you have some manuals or videos to recommend?

 

Regards, WO