chaining with other WAF

Interesting drawing. :P

Try this in the future:

http://asciiflow.com/

You can use the standard setup with clientssl and serverssl, but that means ASM will terminate the SSL connection and start again. However, there are some useful options in the ssl profile. I never remember which one is for what, so here is both:

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-ssl-administration-12-0-0/14.html

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-ssl-administration-12-0-0/15.html