Cloud Apps Protection

Hi Stan_Marsh​ 

The better approach & architecture is to leverage F5 Distributed Cloud WAAP solution for AWS/Azure applications (Cloud/Edge apps).   

1. Can the Big-IP on-premise solution protect external web applications hosted on AWS and Azure?  ===> This is possible but you would have to accept implementing a sub-optimal design and be able to route traffic through the BIG-IP On-Premise WAF and then as pool members route to the AWS/Azure hosted internal apps.  This likely involves a internal backbone out to AWS Direct Connect etc.   Ideally you would want the BIG-IP in a security VPC front ending this.. Having customer traffic traverse on-prem BIG-IP and then back out to cloud externally or internally adds un-needed complexity.

2. Can the WAF module in Big-IP on-premise protect mobile applications (APP Mobile)?  ===> Yes!   - Distributed Cloud might have some more advanced features to consider.