We have a case where we have to monitor some Azure IaaS servers without setting up a VPN. Therefore the the communication between the SW agent and APE has to go over the internett. To save the cost of adding a public facing APE, we want the agent to go a BigIP VIP which forwards to a our internal APE. Does anyone have any experience doing this and if it is even possible?