For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sekhar's avatar
Sekhar
Icon for Nimbostratus rankNimbostratus
May 09, 2016

F5 VCMP Security

Hi,   We are trying to deploy 5250 in our DMZ network and make use of VCMP feature to host both internal and external applications as two different guests (internal as one instance and external as...
application delivery
BIG-IP
hypervisor
security
TMOS
vcmp
Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
May 09, 2016

Hello,

 

Firstly, an attacker should not be able to gain control of the Guest via the Data Plane (where you have selfip).

 

However, if an attacker gain access to the management plane, he will be able to try to connect to the host or the other guest in the standard mode. When using isolation mode, all guests are isolated from each others at the network level.

 

All resources are dedicated to every guest except the SSL and Compression cards that share resource accross every guest.

 

Moreover, you can turn your guest into appliance mode to strenghten the security.

 

Sekhar's avatar
Sekhar
Icon for Nimbostratus rankNimbostratus
May 09, 2016
Thank you Yann, for providing info on this.