Forum Discussion

christopherlloy's avatar
christopherlloy
Icon for Altostratus rankAltostratus
Oct 04, 2018

ASM IP Address used for Attack Signature Update

How do you determine the IP Address that is used from an f5 ASM for an Attack Signature update? We have ASMs that sit on 4 - 20 VLANs and have not been able to determine which IP is being used. This is required for firewall configuaration.

 

ASM Advanced WAF
security
  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    Oct 08, 2018

    I would expect this to be the management IP address - there should be sufficient routing to enable this, it would be a good idea to have a proxy server available on the management network.

     

  • Emad_26973's avatar
    Emad_26973
    Icon for Cirrus rankCirrus
    Oct 08, 2018

    In firewall you need to allow management IP address of BigIp Units against destination "vector.brightcloud.com" and Port 443.

     

    Some firewalls do support host name otherwise you have to add IP address of "vector.brightcloud.com".