Hello,
We are working on implementing the Virtual Sourcefire sensors, using an F5 LTM to decrypt and redirect traffic to the IPS Sensors.
The documentation I have been reading states that since I am using a single LTM (LTM > IPS > back to LTM) the IPS devices need to be in "routed" mode.
See here for more detail (the exception being it's only 1 LTM, but the concept is the same).
https://f5.com/resources/white-papers/ngips-recommended-practices-f5-big-ip-and-ciscosourcefire-ngips-load-balancing
However, as we are setting up the virtual sensors, we do not see where to enable routed mode. All of my research shows that only the IPS hardware appliance can be put in routed mode, not the the virtual.
Can anyone confirm and/or possibly direct me on how to put the virtual sensors into routed mode?
Thank you in advance!