For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dmitri_Ch__1425's avatar
Dmitri_Ch__1425
Icon for Cirrus rankCirrus
Dec 17, 2015

F5 'firewall sandwiches' with inline firewalls?

Hi   I'm looking at implementing F5 'firewall sandwich' to help to load balance few firewalls.   The white paper [1] shows firewalls with IP addresses (i.e. used as DGW by network equipment/ser...
application delivery
LTM
StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Dec 17, 2015

Hi Dmitri,

 

in case your firewalls are not even addressable on ethernet layer it will be necessary to put them in into different transfer VLANs.

 

The virtual server would use a pool of gateways "behind" the firewalls as next hop.

 

In case you can address them on MAC layer you can use static ARP entries with fake IP addresses and transparent health checks to monitor the availability of each path.

 

Thanks, Stephan