For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dootyfree_24038's avatar
dootyfree_24038
Icon for Nimbostratus rankNimbostratus
Mar 28, 2012

ASM in DMZ

 

I am new to F5 products, I am having trouble setting up my asm-3600 correctly in my dmz.

 

 

Setup as:

 

 

firewall > dmz > firewall

 

 

asm and content servers are in the dmz

 

1 network address range

 

 

or point me to the correct document, as f5 documentation seems to leave a lot to be desired.

 

config
design

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Mar 28, 2012
    Hi,

     

     

    Can you clarify what you're stuck on?

     

     

    If you can have the default gateway of the servers set to LTM, you could use virtual servers without serverside source address translation. If the servers have their default gateway pointed to the firewall or a router then you'll need SNAT on the virtual servers to ensure responses come back to LTM and then go to the clients.

     

     

    Aaron