Forum Discussion

Harish_Babu's avatar
Harish_Babu
Icon for Nimbostratus rankNimbostratus
Dec 08, 2023

F5 AFM Source / Destination NAT

Hello Team   We are having F5 DNS+AFM, the DNS configured as a transparent cache with DoS and access rules in place, diagram provided for better understanding of the setup.     We want to ...
security
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Dec 14, 2023

 

To add to Mohamed_Ahmed_Kansoh  suggestions.

 

Better have 3 forwarding virtual server 1 for TCP , 1 For UDP and 1 for TCP then investigate. See the article https://my.f5.com/manage/s/article/K5867 for ICMP only virtual.

 

 

Also the DNS part do you have a listener of UDP DNS and one for TCP DNS ? Is there any F5 DNS Firewall that the AFM has that can filter the TCP?

 

Also see if have asymetric routing as TCP can have issue with this https://my.f5.com/manage/s/article/K13558