For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

f5mkuDefault's avatar
f5mkuDefault
Icon for Cirrus rankCirrus
Feb 26, 2021

3rd party vulnerability scan

Hi Experts,   I'd like to get some help with another issue.   We have this new 3rd party vendor that will be scanning the webservices hosted in LTM. The Big-IP also runs with ASM. We tested ...
application delivery
ASM Advanced WAF
LTM
VAscan
f5mkuDefault's avatar
f5mkuDefault
Icon for Cirrus rankCirrus
Mar 02, 2021

Hi Pete, sorry for late response. We actually tested again focused on 1 specific website and confirmed that the scanner is able to hit the main page of the website. However the scan will stop. Base from the ASM we see some events from scanner to VS hitting some page. It looks like the real server is the one causing some issues. Not too sure if its a permission issue. Any idea what we need to adjust on the real server end?

boneyard's avatar
boneyard
Icon for MVP rankMVP
Mar 02, 2021

the webservices work fine for users i assume?

 

it sounds very much like a scanner issue, if you use it without F5 and or without ASM does it function fine? if not then talk with the scanner people and understand why it "stops".