To allow TCP Port Range

We need your suggestion here:   Here is the traffic flow of the customer accessing our web-based solution :   Customer IPSEC VPN > JDA IPSEC VPN > JDA F5:   Till now they got one service run...