For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

1 Reply

  • VernonWells's avatar
    VernonWells
    Icon for Employee rankEmployee
    Aug 18, 2015

    Full-cone NAT has two ramifications: any packet from iIP:iPort is mapped to the same eIP:ePort, and any inbound flow/connection to eIP:ePort is forwarded to iIP:iPort. The first ramification is a natural side-effect of how the BIG-IP maps internal clients to a translation address+port. The second is accomplished by enabling inbound connections:

     

    Though the BIG-IP documentation about this is generally spare, F5 refers to this as Endpoint-Independent Filtering.

     

    So, the short answer is: enable inbound connections as described in SOL14823.