Outbound DNS/ICMP traffic

I personally think it's best to stick with the protocols in question. For example, your FTP and SFTP forwarders should bind to TCP, your DNS should be all (as DNS can potentially fall back to TCP), etc.

 

 

In other words, if you're setting up a forwarder for a specific protocol, just match it with the LTM setup. Use performance l4 for these as well - should work great.

 

 

-Matt