For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Olayinka-F5LB's avatar
Olayinka-F5LB
Icon for Altocumulus rankAltocumulus
Aug 18, 2022

Collapsed DMZ/Internal Infrastructure design

Hello community, We currently have our F5 setup with both DMZ and internal services and are reviewing security concerns around this setup. I wasn wondering if there was any kind of documentation tha...
security
Heath_Parrott's avatar
Heath_Parrott
Ret. Employee
Aug 18, 2022

I have to agree with Jason, this is a policy discussion more than a technical one.  As he points out there are many ways to achieve traffic isolation. What a collapsed architecture does not do is provide fault domain isolation and that "line in the sand" of a network cable that seperates external, dmz, internal networks.   The other caveat is if you are in a regulated industry you need to account for your auditor and how they will consider a collapsed DMZ architecture.