For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gudalam's avatar
Gudalam
Icon for Nimbostratus rankNimbostratus
Feb 03, 2017

Auditing configuration changes on F5 LTM

How can I audit configuration changes in F5 ? Can I configure snmp trap some to notify come changes are done on F5 ?   Please help me on this.  
application delivery
LTM
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Feb 05, 2017

Gudalam,

 

Firstly you need to configure audit logging in the GUI. Once this is done you'll see config changes in the audit log /var/log/audit.

 

You should find that these logs have a corresponding trap in etc/alertd/alert.conf so if you configure SNMP in the GUI you should see these traps sent to your favourite SNMP server.

 

If not, or you want more specific traps then youll need to configure custom traps. See configuring custom SNMP traps

 

Hope this helps,

 

N