For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bkanna_133485's avatar
bkanna_133485
Apr 10, 2014

SNAT Configuration on F5

We have 2 servers in DMZ which are the pool members of the F5 VIP. These servers need internet access and servers default gateway is pointing to the F5 self IP. Can we configure the SNAT to allow the...
application delivery
deployment
LTM
security
Vincent_96223's avatar
Vincent_96223
Icon for Cirrus rankCirrus
Apr 10, 2014

The way I normally do it is to point the DMZ servers to the default gateways of your DMZ network. Setup rules in your firewall to allow outbound Internet access for the servers, but block inbound access to the servers. Create another rule to allow HTTP/HTTPS services to the VIP on the F5 for the Pool of servers. SNAT only applies to inbound connections.