For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

taro_107756's avatar
taro_107756
Icon for Nimbostratus rankNimbostratus
Nov 02, 2007

OneConnect: Security Consideration

The following description is in SOL6997.     "The BIG-IP LTM applies the source mask to the request, finds an eligible TCP connection, and aggregates the request from client B over the existing...
config
design
Deb_Allen_18's avatar
Deb_Allen_18
Historic F5 Account
Dec 20, 2007
Is it to be meant the use of the server-side connection simultaneously by client A and client B?yes, that is correct

 

 

I want to separate the user traffics for security reasons. Should not I use OneConnect?

 

 

Source mask cannot be used as a solution, because there is Reverse Proxy on the client side and source IP has been translated by PAT. If that's the case, I'd say you should disable OneConnect.

 

 

/deb