For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

maz_01_159546's avatar
maz_01_159546
Icon for Nimbostratus rankNimbostratus
Jun 03, 2014

Accessing Administration of old F5

Hi,

 

We apparently had an F5 set up some time ago (3+ years), which was lost in the ether. There an active external facing webpage, which takes a username and password and authenticates against an LDAP somewhere on our network.

 

I have been provided with the LDAP server IP address, which I have been able to identify, but I'm quite confused as to how the whole F5 process works. If the page is set to point at the LDAP server, should having a group set up with the appropriate cn, ou, dc, be sufficient?

 

Is there a way to locate the source of the F5 installation?

 

BIG-IP Access Policy Manager (APM)
ibm
management
new to f5
security

1 Reply

  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Jun 03, 2014

    Your LDAP server IP address will likely be a member of some pool, and that pool is likely applied to a virtual server. Client connections to the IP address assigned to this virtual server will be routed to your LDAP server. How the virtual server is configured will largely dictate how the environment is working.

     

    You should be able to navigate to Statistics -> Module Statistics -> Local Traffic (code version dependent) and search statistics type 'Pools', then specify your IP address to see which pool your LDAP server is assigned to.