BIG-IP AND NG FIREWALLS POSITIONING BEST PRACTICES

Well, thanks Islam and Boneyard (also to Corrado). In some way I know I would see the "depends", because its use is quite appropriated to broad questions like mine. My goal is to gather experiences and different POV to bring those insights to my team in order we may evaluate our infra and look for gaps and points that need improvements.

Today, the majority of our traffic is outbound (Internet access). We have around 3,000 internal users.

The two main objectives underlying the BIG-IP purchase were 1. open SSL traffic to be analyzed by the FW and 2. internal app load balancing.

Recently, we have been asked to deliver apps to Internet clients.

So, as I said, I'm gathering experiences to redraw our network.

Thanks again.