Forum Discussion

dickeypjeep_116's avatar
dickeypjeep_116
Icon for Cirrus rankCirrus
Apr 03, 2014

LTM is a firewall, so by adding a firewall you don't gain anything; you just add complexity.

 

  • Jose_Loera_1179's avatar
    Jose_Loera_1179
    Icon for Nimbostratus rankNimbostratus
    Apr 03, 2014
    Is LTM a full blown firewall just like Microsoft TMG?
  • dickeypjeep_116's avatar
    dickeypjeep_116
    Icon for Cirrus rankCirrus
    Apr 03, 2014
    Yes, that and more. LTM + APM can completely replace TMG including authentication offload, etc. With AFM, you can manage the BIG-IP platform as a layer 3/4 firewall, and ASM will provide full layer 7 protection. LTM is default deny, so it provides layer 3/4 fire-walling, plus it handles SSL so it firewalls at layer 5 as well. The BIG-IP is definitely a security device :)
  • Tosin_Omojola's avatar
    Tosin_Omojola
    Icon for Altostratus rankAltostratus
    Jul 16, 2018

    Actually, I think F5 comes more like a one-size fits all appliance. I wouldn't see a reason to deploy another solution once F5 is in place unless the service is free and really meets the need. F5's got all that's needed to secure an IT infrastructure.

     

    You're very correct