BIG-IP AND NG FIREWALLS POSITIONING BEST PRACTICES

Hello WAMARANTE,

Well, answering your question, there is no right or wrong deployment method. It all depends on how you see your network ..

For me for example, I prefer to have a router as a gateway, behind it is a Firewall.

After the firewall is where everything comes .. But still depends on how you want to use them. If I'm using the F5 as a Forward Proxy, I will keep it close to the users as much as possible .. If it is a Reverse Proxy, I will try keeping it right after the Firewall, if there is WAF applied, will try to keep it near the servers ..

So, as you see .. It all depends in the end on how you want to use them, and how you design your network.