Leveraging BIG-IP APM for seamless client NTLM Authentication
Published Jul 22, 2014
Version 1.0Was this article helpful?
A client is requiring exactly the same setup for internal users. If I understand correctly this will mean the F5 to be able to poll all internal clients using NTLM and also verify the result with the AD server?
So firewall rule would be F5 Self IP --> all internal clients using UDP/TCP 137/138? Isn't this a security risk allowing a DMZ device to contact internal client on this port number?