For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ramil_Ancajas_1's avatar
Ramil_Ancajas_1
Icon for Nimbostratus rankNimbostratus
Nov 02, 2015

Keeping source IP's without disabling SNAT

Hi All,   I have an on-a-stick LTM with multiple VLANs configured in the internal interfaces. All VS's configured have SNAT (automap) enabled because the default gateway configured on the servers ...
Ramil_Ancajas_1's avatar
Ramil_Ancajas_1
Icon for Nimbostratus rankNimbostratus
Nov 04, 2015

Hi Henrik,

 

Thank you for your response.

 

Yes, for some reason our infosec wants to apply it to all VS's including those do not have HTTP profile.

 

I might be ending up forcing myself to change the default gateway and disable the SNAT and do some tricks on the firewall, but i'm wondering if there is any other option i can go with, specially if they want to get the real source IP's of the clients from the node logs itself.

 

Ramil