Forum Discussion

Jan_Rockstedt_4's avatar
Jan_Rockstedt_4
Icon for Nimbostratus rankNimbostratus
Nov 13, 2013

Recommended Approach for EP on the Web [AX 2012]

Hi all,   I got this question from our AX team, any sugestion for a setup? We use only LTM and 11.2.1 and will upgrade to 11.3.0 For me it's look like they can skip the AD server in DMZ, move the ...
microsoft
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Nov 18, 2013

Hey Jan,

 

It depends really. I can't see most enterprise security people agreeing to move the whole thing to the LAN but personally I'd have no problem with that assuming your confident your F5 is secure and whatever firewall you have at your Internet border is up to the job too.

 

Can I assume the DMZ and two tier firewall architecture isn't possible in your environment?

 

F5 device security wise, there's lots of things to think about, Port Lockdown, ICMP etc. rate limiting, disabling root access, ARP settings, audit logging, SSH/HTTPS mgmt idle timeouts, packet filters and a few others.