4.3. Ansible Playbooks we can use in this lab

The GitHub SSL Orchestrator API Reference repository contains sets of example playbooks to configure SSL Orchestrator:

• Outbound Layer 3 Topology

  • Deploys an Outbound Layer 3 Transparent Proxy Topology

  • Outbound Layer 3 Transparent Proxy: Outbound Layer 3 Transparent Proxy Topology Playbook

• Inline Layer 2 FireEye NX

  • Deploys an Inline Layer 2 Inspection Service

  • Inline Layer 2 Inspection Service - Inline Layer 2 Inspection Service Playbook

  • Inline Layer 2 - an inline L2 device does not have IP addresses and does not participate in routing. It is effectively no more than a physical presence on the wire. This is specifically for the FireEye service running on

• Inline Layer 2 Wireshark TAP Service

  • Deploys an Inline Layer 2 Wireshark TAP Service

  • Inline TAP Wireshark Service- Inline Layer 2 TAP Service Playbook

  • This is a great option for testing and learning how to build your own custom inspection services. It is also a great option for troubleshooting and learning how to use the API.

• Secure Web Gateway as a Service (SWGaaS)

  • Deploys an SWGaaS Service.

  • SWGaaS Service - SWGaaS Service Playbook

  • This playbook has dependencies on an existing Secure Web Gateway Per-Request Policy. This is provided within the Lab BIG-IP.

• Delete Utility

  • Deletes all SSL Orchestrator configuration objects.

  • Delete SSL Orchestrator Playbook - Delete all SSL Orchestrator configuration objects Playbook

  • This is a Nuke and Pave option.