Forum Discussion

BRoan1's avatar
BRoan1
Icon for Nimbostratus rankNimbostratus
Mar 21, 2023

LTM VE behind Sophos Firewall deployment - configuration/setup question

Apologies both for the long post and my ignorance. This is a different setup than what I'm used to dealing with and I'm trying to get some clarity. I am standing up a new rack in a co-location facil...
  • mihaic's avatar
    Mar 24, 2023

    when you use one-arm configurations you need to use SNAT on the BIgIP,  you can use automap or a SNAT pool.

    Without this, the requests coming from the Internet to the Virtual server and the servers will not go back through the BigIP. 

    If your servers in this case need to have the firewall as the default gateway, so traffic they initiate will not go through the BigIP. And use a SNAT to make any reply from the server go back through the BigIP. But you probably already have this if you say you can browse a web server.

    You use BigIP as the default gateway when you have dual-arm (routed mode)