Forum Discussion

Kaynewbie_30762's avatar
Kaynewbie_30762
Icon for Nimbostratus rankNimbostratus
Jan 25, 2017

F5 ASM Design

Hi,

 

Web app on DMZ need F5 ASM because this web app can be accessed by public, so it can potentially be hacked. My question is does internal web app need F5 ASM for protection ? I need an answer based on security perpective.

 

Thanks

 

ASM Advanced WAF
security

1 Reply

  • samstep's avatar
    samstep
    Icon for Cirrocumulus rankCirrocumulus
    Mar 28, 2017

    It depends on your requirements and policies. Any internal web app can still be hacked by insiders or by attackers who can get into your network via say an RDP hack. Most financial services organizations I worked in had their internal apps protected as a policy and best practice.