Forum Discussion

Franky-frank-reg7's avatar
Franky-frank-reg7
Icon for Altocumulus rankAltocumulus
Jul 18, 2023

SMTP outbound F5 Design

Hello all, I've been unable to find a clear answer for SMTP outbound configuration with F5 Inline. Currently, I have SMTP and other Exchange services working inbound just fine. From the Internet, we...
application delivery
CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP
Jul 18, 2023

You're almost right! Since F5 is a default deny device, you must configure an object to accept and route this traffic flow. Usually, this is a Virtual Server. If F5 is the server's Gateway, you should account this VS to allow all the required connections. This means the VS should have wildcard destination. If a firewall is in place after the F5, I'm used to configuring this VIP in Forwarding (IP) mode and allow connections to "0.0.0.0/0 : any" and then filter traffic on the firewall. If you need NAT, you can configure it directly on the VS, or on the firewall if it's application-specific.  

If you have routing domains in place, VS IP becomes "0.0.0.0/0%ID : any"