For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Apr 28, 2014

Don't think of a WAF in the traditional layer 3 sense of a firewall. It's intended to protect your applications at layer 7. For example, a SQL injection would look like a normal request by your average network firewall, and typically be allowed through. The only redesign you need is to insert the WAF in front of your applications, which if you already have LTM load balancing that traffic, is a service on that device.