For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mahmoud_El-Say1's avatar
Mahmoud_El-Say1
Icon for Nimbostratus rankNimbostratus
Dec 11, 2017

Attack Signatures updates

Should I make policy on our firewall to permit any for F5-source-IP that be used to update attack signatures or there are list of IPs could be used as repository for these updates?   Which recomme...
ASM Advanced WAF
security
Ashwin_Venkat's avatar
Ashwin_Venkat
Icon for Employee rankEmployee
Dec 14, 2017

Hello Mahmoud,

 

If you are having the ASM perform signature updates automatically, then that would require your BIG-IP device to have internet connectivity either via the TMM interface or management interface. Depending on which route it takes, make sure you have the IP range and port 443 specified in this article: https://support.f5.com/csp/article/K15202 allowed through the firewall policy.