Link Controller Security Design

Hello,

 

We have an appliance which includes LTM,GTM,LC,and ASM modules,

 

The F5 is configured as inline and it is located before the firewall(All traffic from the internet is coming to the F5 before reaching the firewall).

 

LTM virtual servers and GTM Listners are configured with public IPs.

 

My question here is that is it a good design from security perspective, or do anyone recommend to have a dedicated appliance with LC only and all other modules will be on another appliance behind the firewall.

 

Thank in advance.