For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mikeshimkus_111's avatar
mikeshimkus_111
Historic F5 Account
Mar 04, 2014

Hi Steele6599,

 

Which version of BIG-IP are you running? The AFM module and Secure Web Gateway feature will let you replace TMG completely (AFM is in v11.4, SWG is v11.5).

 

Publishing external and internal VIPs on different VLANs should be no problem. You'll need to deploy the iApp service twice, once for internal and another for DMZ, and select the VLANs on which each one will listed from within the iApp config.

 

thanks

 

Mike

 

mikeshimkus_111's avatar
mikeshimkus_111
Historic F5 Account
Mar 13, 2014
You can create a new virtual server(s) at the same IP address, but listening on the hub tranport port(s). Create a pool for the hub transport servers and make that the default for the new virtual server(s).