2. Managing Security Services & Service Chains

The majority of enterprise forward proxy configurations will involve an HA pair of BIG-IPs performing SSL orchestration functions. F5 SSL Orchestrator has been designed with that principle in mind and performs robust and dynamic service chaining of security devices. This lab is designed to help leverage dynamic service chaining of security devices.

• 2.1. Scenario
• 2.2. Lab Overview
• 2.3. Pre-existing environment validation
• 2.4. Review the current SSL Orchestrator deployment
• 2.5. Create a new Cisco Firepower Threat Defense TAP service
• 2.6. Create a new "All Services" Service Chain
• 2.7. Create a new "Cisco Firepower" Service Chain
• 2.8. Update Service Chains on existing Security Policy rules
• 2.9. Confirm Service Chain and Security Policy rules are working as expected