For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JWhitesPro_1928's avatar
JWhitesPro_1928
Icon for Cirrostratus rankCirrostratus
Oct 27, 2015

F5 Internal vs External - Different Instances

Just taking a list of opinions here.   Do many of you have a different F5 device (for security reasons) that handles all your external facing traffic and a different one that handles all internal ...
application delivery
availability
design
LTM
security
TMOS
Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Oct 27, 2015

No benefit to a single vCMP. You could use route domains to keep you external and internal traffic separated if you choose to collapse them down.

 

Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Oct 27, 2015
If you are using AFM there isn't much benifit. The main reason for route domains is to maintain separate routes for network, which typically is used to default route to different firewalls/firewall interfaces. With AFM, you don't require that.