For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dickeypjeep_116's avatar
dickeypjeep_116
Icon for Cirrus rankCirrus
Apr 03, 2014

LTM is a firewall, so by adding a firewall you don't gain anything; you just add complexity.

 

dickeypjeep_116's avatar
dickeypjeep_116
Icon for Cirrus rankCirrus
Apr 03, 2014
Yes, that and more. LTM + APM can completely replace TMG including authentication offload, etc. With AFM, you can manage the BIG-IP platform as a layer 3/4 firewall, and ASM will provide full layer 7 protection. LTM is default deny, so it provides layer 3/4 fire-walling, plus it handles SSL so it firewalls at layer 5 as well. The BIG-IP is definitely a security device :)