For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Jun 23, 2014

Usecase for Reject Virtual server?

Hello Folks,   Can someone please help me in which case shall we use Reject VS?   In most of the implementation, BIG-IP deployed behind a permitter firewall. If Firewall receives any uninvited...
reject vs
Patrik_Jonsson's avatar
Patrik_Jonsson
Icon for MVP rankMVP
Jun 24, 2014

One scenario I could think of is when placing the LTM in front of, or replacing the LTM with the external firewall. The default setting for firewalls is to drop packets not matching a rule (uses less performance and makes it a bit harder to people looking for targets on the web) whereas the LTM would answer with a reject on all unmatched packets (all IP's, all ports). To simulate the firewall behaviour you can then set the RejectUnmatched to false.

 

/Patrik