Forum Discussion

starboy's avatar
starboy
Icon for Cirrus rankCirrus
Oct 25, 2023

F5 WAF Request not receiving

Hi All We have Checkpoint firewall and F5 WAF device and the traffic from external/public first comes to the Firewall then redirected to WAF Virtual Server and both are on the same subnet however, w...
application delivery
security
Jeffrey_Granier's avatar
Jeffrey_Granier
Icon for Employee rankEmployee
Nov 02, 2023

Hello,

So the topology is like this?  Internet User --> Chpt FW -----> F5 BIG-IP WAF VS ----> Origin/PoolsYour not seeing any traffic hits on the BIG-IP VS that has a WAF policy applied on?

Can you run sample external curl tests to the BIG-IP VS, are you seeing traffic stats and or connection table entries on the BIG-IP?   Is the VS setup to listen on the appropriate vlans?   for TCPdump you will want to use the dataplane interfaces... If this is a non-prod unit  tcpdump -i 0.0 should cover all data plane interfaces and include the VS IP in the filter.    Can you post the vs config ?