Layout of BIP-LTM

This is a standard configuration and will work just fine. You can map your translations on the firewall instead of the BigIP to keep your security zones well defined. In most environments I've worked in, the F5 device between fe & be dmz's is not considered a security boundary and therefore the translations occur before or after the BigIP. Ultimately your security policy should guide the final solution.