DDoS Two-Layer Architecture

Hi ukhan20 , 
No worries brother. 

I just need to understand , you want to apply the two tiers in one device "VIPRION" Chassis or what. 

If you want to allocate two vCMP guests one for AFM and the other for AWAF , I believe you need at least 2 separate VLANS , you will work in One-arm deployment on each VM/Guest 

For Example , I Drew this design for you: 

This is in case you want to split your Viprion into two Guests ( One for AFM and the other for ASM ) , you can deploy it in one arm for each Guest but you need two VLANs , as I described in the above traffic flow.

again, you can do the same deployment using only one VLAN and One ARM , but you have to use only on Guest with much resources and in this Guest you will provision ( AFM and AWAF ) and then move forward with this. 

So Let me know if the above approach works with you or not 
and I will discuss with you , how to configure AFM and AWAF to achieve this. 
Configs aren't the hard part but the putting the proper design is the most challenging thing.

So have a look deeply in my design and Traffic flow above and discuss it with me if you wish.