For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

TD-Roy_133837's avatar
TD-Roy_133837
Icon for Nimbostratus rankNimbostratus
Oct 14, 2013

Hi Michael,

 

Thank you for the quick response.

 

Where on the F5 would I check for UDP 4172 inbound?

 

I do have Allow All on Port Lockdown option, so Im assuming all can pass through.

 

BinaryCanary_19's avatar
BinaryCanary_19
Historic F5 Account
Sep 09, 2014
Hi, "Allow All" on port lockdown settings for Self-IPs is not what you think it is. It only applies to traffic addressed to the BIGIP itself (targetting the specified self-IP). It is generally best to leave this to "allow-default" if this self-IP is in use for failover/mirroring, or allow-none (or custom, with HTTPS only) if this self-IP is exposed to the Internet. Leaving it to allow-all for Internet-facing self-IP addresses will expose the SSH port to the Internet, and if you have weak passwords...