Use of SSL Decryption.

Hello RockBD,

Are you talking about forward proxy or reverse proxy in this scenario?

Eitherway - If you have a physical F5 it will outperform firewalls in almost every case when it comes to SSL Decryption/encryption.

And if you for example use the F5 with the SSLO (SSL Orchestration) module you can decrypt outing traffic in the F5, send the traffic via ICAP (for example) to the firewall for AntiVirus scanning and so on.  If you pair it with for example IP-intelligence you can also get an outbound-reputation based block for traffic. You can also use the firewall for inspection in the servicechain where it also uses its reputation engine, thus having a in-depth analysis of client traffic along with having the protection of both products.

When it comes to using it as a Reverse Proxy/Load Balancer for incoming traffic to internal servers and such i would still keep it in the F5, the F5 is designed for handling incoming webtraffic and decryption (SSL Offloading) and has all of the features for protecting incoming webtraffic.

Is the new firewall a Gen5-firewall with all the bells and whistles?

Br 

Ted