How to Configure Security Policies to Allow Layer 7 Load Balancing

Besides Layer 4 load balancing capabilities, Layer 7 load balancing can also identify application-layer characteristics and select real servers based on the application-layer characteristics such as the URL and host. In Layer 7 load balancing scenarios, two sessions are established on a firewall for the access requests of each client.

• Session for the client to access the virtual server. A security policy needs to be configured for such access. In the security policy, the destination security zone is the security zone where the real server resides, and the destination IP address is the IP address of the virtual server.
• Session for the client to access the real server. The firewall directly forwards packets of the session without security policy check. Therefore, no security policy needs to be configured.