irule to read host from HTTP request and redirect

SNATing it to the proxy's IP will likely cause issues when the response comes back to the firewall as the firewall will already have an arp entry for the proxy.

 

 

Does it have to be the proxy's IP or can it simply be an IP on the same subnet?

 

 

Is this your design for outbound? Where the firewall allows the proxy's IP outbound but not the Client's?

 

 

Client -> Proxy -> LTM -> Firewall -> Internet