F5 i5800 Deployment

Hi Muhammad,

 

You'll also need ASM in addition to LTM & AFM. LTM = LB, AFM = L3/L4 FW, ASM = L7 FW.

 

Here's where the deployment guides can be found: https://support.f5.com/csp/home

 

Here's the guides for LTM: https://support.f5.com/csp/knowledge-center/software/BIG-IP?module=BIG-IP%20LTM&version=13.1.1

 

Here's the guide on AFM for L3/L4 DoS: https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/dos-firewall-implementations-13-1-0.html

 

Here's the deployment guide for ASM v13: https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-getting-started-13-0-0.html

 

I highly recommend that you reach out to your VAR that you worked with to procure the devices and see if they can help you get these setup. Learning enough to deploy the devices properly isn't something you can read about for a few weeks and secure a website. The safety of your customers' data relies on proper configuration.

 

Having said that, if you choose to go it alone, make sure to watch all of the devcentral youtube videos, check out F5's great free training at , and plan the environment out with your SE before configuring anything.

 

Good Luck!

 

-Dave

 

Hi Muhammed,

 

Also, depending on your license, I would deploy the i5800 as vCMP.

 

You will be able to deploy independent instances for the different modules Dave mentioned (or combinations thereof). And strategically place them in your network.

 

It might involve more planning and time for deployment but it will pay off a lot in the future, in my opinion.

 

But like Dave said, please do not underestimate this kind of deployment (in general, not just vCMP).

 

In any case, good luck!

 

-Jeroen

 

Hi Muhammed:

 

i5800 have vcmp is default license. and do you have best license? or option module ?

 

VCMP it not easy to config .

 

i suggestion you to ask you provide and config it!

 

have a good day

 

There is an architecture guide for anti-DDoS wherein F5 recommends two-tiering. Technically you have tier 1 for your network defense(L3-L4) and tier 2 for application defense(L7/SSL).

 

https://f5.com/Portals/1/Cache/Pdfs/2421/the-f5-ddos-protection-reference-architecture.pdf