For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Irfan_Gazi_3882's avatar
Irfan_Gazi_3882
Icon for Nimbostratus rankNimbostratus
Oct 01, 2008

Web Server in the Intranet

I am planning to have an ASM in the DMZ talking to the WEB server (f5 loadbalanced) in the Corporate server farm.   Would i have some issues (security, design etc) with this design.   ...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 14, 2008
Hi irfangazi,

 

 

Can you explain your concern(s) with the architecture?

 

 

It's fairly common to have a firewall - ASM - firewall - www server - app server - database architecture. It sounds like you're considering something like: firewall - ASM - firewall - BIG-IP LB'er - www server - app server - database

 

 

Out of curiosity, do you have separate ASM and BIG-IP load balancing units? Is the BIG-IP a 6400 or higher? If so, you could run ASM on that.

 

 

Aaron