F5 Distributed Cloud Deployment Service

The service product is a prepaid fixed fee engagement aimed to provide the Customer with a deployment experience that utilizes F5 standard process and procedures. The Services include the design of F5 Distributed Cloud deployment, establishment of a base tenant configuration (as outlined in the Initial Tenant Configuration sections of Scope of Work), and assistance with F5 Distributed Cloud Web Application and API protection (WAAP) as detailed within the Scope of Work section of this document.

Scope of Work

F5 shall provide the Services as follows:

Pre-Engagement Call

A pre-engagement call with the Customer will be scheduled prior to the scheduled engagement start date. This call is an opportunity to review the Service Description, the application or network requirements, the anticipated deployment architecture and identification of activities that may be required prior to the start of the engagement.

Engagement Kick-off Meeting

The first activity of the engagement is to hold a kick-off, planning, and pre-requisite gathering meeting with the Customer to review the planned architecture and address any additional items that may have been missed in the pre-engagement call. Includes the following:

• Review of F5 Distributed Cloud Services functionality and the use case/s that are applicable to Customer.
• Review in-scope application and/or API traffic flows and desired F5 Distributed Cloud protections.
• Review Customer’s existing cloud or on-premises design (as applicable to the in-scope F5 Distributed Cloud service).
• As required, review and align on plan for routing and securing traffic between the various F5 Distributed Cloud and other related multi-cloud solution components.
• Identify pre-requisites required for deployment (DNS name for delegation, SSL certificates, etc.)

Initial Tenant Configuration

An initial functional configuration will be applied to one (1) F5 Distributed Cloud Services tenant. These tasks include:

• Configure F5 Distributed Cloud Services tenant for administrative access (authentication/authorization).
• Assistance with the configuration of one (1) Customer-owned DNS domain delegation to F5 Distributed Cloud Services.
• Assistance with the configuration of F5 Distributed Cloud logging and/or monitoring.

F5 Distributed Cloud WAAP (Regional Edge)

The F5 Distributed Cloud WAAP (Regional Edges) deployment service is intended for Customers seeking cloud-based SaaS consumed Web Application and/or API Protection (WAAP) functionality utilizing only Regional Edges (RE) in F5 Distributed Cloud Global Infrastructure without the use of Customer Edge (CE) sites. F5 will assist with deployment of the following:

• Configure F5 Distributed Cloud Services to support up to five (5) applications or API FQDNs.
• Configure up to five (5) Distributed Cloud WAAP policies. Includes configuration of the following associated WAAP functionality if required.
• Artificial Intelligence & Machine Learning (AI/ML). Includes configuration of shared AI/ML settings, as well as application specific AI/ML settings.
• Service Policy to allow/deny traffic based on the geographic location of the end user (geo-fencing).
• API rate limiting and/or API definition (swagger spec).
• Configure up to five (5) Distributed Cloud HTTP Load Balancer objects to support up to five (5) application or API FQDNs.
• Bind the configured HTTP Load Balancers to the Application Firewall or API protections described above and the desired Distributed Cloud Origin-Pool.
• Apply agreed upon DDoS mitigations to in-scope HTTP Load Balancers (if licensed)
• Apply agreed upon Bot Defense mitigations to in-scope HTTP Load Balancers (if licensed).
• Test application traffic routing and WAAP processing to ensure expected/desired functionality.
• Provide security policy tuning assistance (limited to simple policy tightening).
• Assist Customer with pointing application testing client traffic to Distributed Cloud for the in-scope applications (via local host file/s or similar).
• Provide assistance to the Customer during non-business hour maintenance window, up to four (4) contiguous hours.
• Assist Customer performing traffic cutover in a single maintenance window during non-business hours.
• On the next-business day following the maintenance window, F5 will host an operational verification session (up to one (1) hour) to review and discuss the activity logs and address issues related to the deployed solution.

Knowledge Transfer

To aid you in supporting the solution post engagement, the assigned resource will provide ad-hoc knowledge transfer to explain the configuration or activities performed during the engagement. The knowledge transfer of services performed will occur while the assigned resource is engaged with you and prior to the completion of the engagement.