Forum Discussion
WAF License and Deployement
I am new at F5 and I
m going to implement F5 WAF only. Before the question, excuse me if I write inadmissible thoughts)
So I
d like to know Which licenses do I need to activate WAF? Besides it, after buying licenses, which mode should I put it in the network? I just know that reverse proxy mode would be better for my topology, because I`m going to configure WAF for all WEB servers(DMZ,Reserve center DMZ) For the Reverse proxy mode, do I need extra license to buy?
I would appreciate if you write comprehensive explanation. Thank you in advance!Hi Hikmat,
The F5 WAF, or ASM, as they like to call it, can be purchased either as a standalone or as part of the "Best" license.
You don't need any other license to operate the Big-IP as a reverse-proxy; it will serve as a full or half proxy based on network configuration, not licensing.
In order to perform https-to-https redirection, or ssl bridging, you would just need to apply an http profile, and two different ssl profiles, a client ssl profile and a server ssl profile.
That being said, it would probably be best to speak with a sales engineer before making a purchasing decision. They can take a look at your network needs and help find the right product for you.
Best of luck,
Austin
- Hikmat_385212Nimbostratus
By the way, it can be needed https-to-https redirection for certificate which that only WAF will carry certificate.
- AMiles_377865Cirrocumulus
Hi Hikmat,
The F5 WAF, or ASM, as they like to call it, can be purchased either as a standalone or as part of the "Best" license.
You don't need any other license to operate the Big-IP as a reverse-proxy; it will serve as a full or half proxy based on network configuration, not licensing.
In order to perform https-to-https redirection, or ssl bridging, you would just need to apply an http profile, and two different ssl profiles, a client ssl profile and a server ssl profile.
That being said, it would probably be best to speak with a sales engineer before making a purchasing decision. They can take a look at your network needs and help find the right product for you.
Best of luck,
Austin
- Hikmat_385212Nimbostratus
Thank you for great explanation. Sure, It will be talked with sales engineer before making decision.But I`ve installed virtual appliance and earlier that buying it, I intend to trial it. Then I should prepare for ASM module and LTM. Thank you a lot!
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com