Forum Discussion

player_72606's avatar
player_72606
Icon for Nimbostratus rankNimbostratus
Mar 04, 2012

bigip as FW

Hi all,     i would like to use the bigip as FW between the networks it is the L3 for them   for example one network is web server and the other is sql servers, i would like to permit   14...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Mar 04, 2012
Yep.

 

 

There's several ways. v11 is targeted to provide firewalling as well as ADC. There's several features that will provide the drop anything (e.g. Packet filters). However by default packets won't be forwarded across the LTM anyway. If the list of traffic you want is small, you could just create forwarding VS's for that traffic and nothing else.

 

 

The management may be a bit more unwieldy than a dedicated firewall though..

 

 

H