For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Franky-frank-reg7's avatar
Franky-frank-reg7
Icon for Altocumulus rankAltocumulus
Sep 24, 2023
Solved

F5 SMTP Fast Template - SNAT Not working as expected

Hello all, I'm having issues with getting SMTP to work with the FAST templates. Specifically, I'm trying to configure an SMTP template with no SNAT option checked so the backend pool members receive...
application delivery
  • Paulius's avatar
    Paulius
    Oct 06, 2023

    Franky-frank-reg7 That is true but to simplify the configuration so that you reduce the man hours you might/will spend in the future troubleshoot a non-standard deployment of the F5 you should deploy it as option 1

Franky-frank-reg7's avatar
Franky-frank-reg7
Icon for Altocumulus rankAltocumulus
Oct 03, 2023

Paulius  Can you explain why? Option2 is actually preferred because we don't want to change our topology.

If we want to got with option 2, where would the NAT be applied on the IP forwarding VS? We want the SNAT to only affect the exchange server.

  • Paulius's avatar
    Paulius
    Icon for MVP rankMVP
    Oct 04, 2023

    Franky-frank-reg7 The reason for option 1 is because it is the easiest to troubleshoot and it would require no SNAT at all. With option 2 when you troubleshoot it could cause you headaches in the future because you typically don't see that topology with F5s, you either have them in path with no bypass or SNAT unless absolutely necessary or you have them in one arm mode where they are out of path completely and you enable SNAT on everything.