Forum Discussion

Ravager's avatar
Ravager
Icon for Altostratus rankAltostratus
Oct 29, 2019

Limited outgoing access to a url

Hopefully a simple query.

We have a f5 that we just use for incoming traffic and have no real need for outgoing traffic before (to the internet).

 

Recently we have a system that has to connect to a internet website for licensing functionality.

 

Never having to have to have done something like this before I am not sure how to best accomplish this.

Buying a SWG license isn't on the cards.

 

  1. Is it possible just to write a afm rule and just have the application server have a default route on a internal self ip. (note not really sure around afm stuff).
  2. Should I just make like a ltm rule that work backwards and have the create a single pool member as the destination website and have a listener on the internal interface. Once again make a default route for the license server as the listener ip?
  3. Is there some other way/s to do this that is secure?

 

Just looking for some ideas and a pointer in the right direction as its something thats a bit out of the box for me having only done awaf and gtm stuff on the f5.

 

Cheers

1 Reply

  • You can setup outgoing senerio.

    1. Public IP address needed to create SNAT Pool

    2. Create route per requirement.

    3. Create IP forwading virtu server.

    4. If any condition needed then call in irule

    Hope it works for you.​