For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

david_20684's avatar
david_20684
Icon for Nimbostratus rankNimbostratus
May 08, 2008

IP address and domain name restrictions in IIS

Has anyone come up with a solution for "IP Address and Domain Name Restrictions" settings in IIS behind an f5?     I would like to restrict access to our web servers running a private appli...
microsoft
partner
jondyke_46152's avatar
jondyke_46152
Icon for Nimbostratus rankNimbostratus
Jun 26, 2008
Hi David

 

Did you ever get a solution to this problem?

 

I have a similar setup - two F5 boxes sitting on one VLAN along with all of the nodes(same subnet). I have tried the x-forward method but this only works for the log file and does not help.

 

 

Aaron

 

If I disable SNAT then the VS do not work. The F5 is not the default gateway for the nodes (that is the firewall) as they need outbound access.

 

Is there any way around this without creating additional subnets/vlans and swtiching off SNAT?

 

Can the F5 itself do the IP validation on a particular URL (move it from IIS to the F5)?

 

 

 

Regards,

 

Jon