For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ravager's avatar
Ravager
Icon for Altostratus rankAltostratus
Dec 09, 2019

Webtops and how IP to intenal is determined

Just a generalist query around which source IP from the F5 is used for various sessions in webtops.   Say I have a weblink, a rdp session, vpn and a ssh session on the webtop.   I believe the...
BIG-IP Access Policy Manager (APM)
security
Dave_W's avatar
Dave_W
Icon for Employee rankEmployee
Dec 10, 2019

Hello, looking at some solutions it is basically implied that App Tunnels, RDP, Portal Access, Citrix, etc will use the Virtual Server SNAT. Webtop links are direct links and Network Access will also use the Virtual Server SNAT, BUT in the Network Access configuration you have the option to set a SNAT or set it to none (typical for VoIP use cases).

 

In addition there is also a Route Domain and SNAT Selection object that can be added in the VPE.

 

https://support.f5.com/csp/article/K33368912

 

https://support.f5.com/csp/article/K26410462