Technical Tip: Reasons to include F5 IP address in the trusted host list

Description

This article describes why the IP address of the F5 is required when configuring a trusted host.

Scope

FortiGate.

Solution

Example:

Topology: Internet ----- F5 ----- (SSL VPN)-FortiGate ---- Lan.

Due to the F5 device, this will monitor the FortiGate SSL VPN Service. If the FortiGate SSL VPN trusted host is configured only with the source address, including the desired address of a specific country, and the IP of the F5 is not included, this will cause the F5 to not route SSL VPN service traffic to the FortiGate.

Due to this fact, it is recommended to include the IP address that F5 uses to monitor the SSL VPN service, as explained in the following document: F5 301a Introduction.