For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Pepillo_358524's avatar
Pepillo_358524
Icon for Nimbostratus rankNimbostratus
Apr 15, 2018

F5 BIG-IP vcmp with guests using ltm and afm

Hi, we recently bought a pair of i5800 and we need to configure vcmp with 4 guest, 3 of them using LTM and the last just to configure AFM. This will be done for intranet and the idea is to configure ...
AFM
BIG-IP
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
May 08, 2018

Hi,

 

Even if your configuration works as expected, I should recommend to enable AFM on LTM guests.

 

It allow to

 

  • manage per context policy with less rules in each policies —> easier to manage
  • configure firewall rules between servers behind each LTM
  • manage per virtual server policy for each incoming virtual server —> when you remove an old virtual server, related policy rules are disabled
  • create a generic policy for most of virtual servers with rule src=any, dst=any, port=any, action=allow then assign it to all public VS to allow access.