Securing Azure Web Apps with the BIG-IP

Thank you very much for a very detailed writeup, i have one question on this i see that you are using a external ILB in the ASE which gives the FQDNS as external (*.p.azurewebsites.net).

And the recommendation is to use SSL bridging because the data flows through internet.

We have a requirement to use SSL offloading on the F5/WAF to read the traffic and use internal type ILB in the ASE so that it gives us an option of custom domain with an internal IP in the VNET of azure . In this scenario do you suggest to use SSL bridging. Basically trying to understand if a man in the middle attack can occur if we use SSL offloading + Internal type ILB on the ASE + VNET. We are using the F5's and WAF before the ASE.

Appreciate your response on this.