For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dbrandel_11561's avatar
dbrandel_11561
Icon for Nimbostratus rankNimbostratus
Jan 19, 2012

Routing outbound traffic to a different VIP

I have a question regarding the routing capabilities of the F5 LTM. We have a scenario in which we have webservers sitting behind a VIP in our DMZ needing to initiate an HTTP session to an RSA web se...
config
design
mikand_61525's avatar
mikand_61525
Icon for Nimbostratus rankNimbostratus
Jan 19, 2012
A hole is a hole is a hole... adding complexity to the hole doesnt make it go away :P

 

 

Cant your firewall setup some url-category instead which you bind to the group of webservers?

 

 

Like:

 

 

url-category: RSA_web_services:

 

*.rsa.com, rsa.com

 

 

(or whatever the urls are along with domains etc)

 

 

and then as security policy:

 

 

srcip: group_webservers

 

srcport: >1023

 

dstip: any

 

dstport: 80

 

appid: web-browsing

 

url: RSA_web_services (if no match then block)

 

action: allow and log