Brute Force Blocking for SSH

yeah, as the traffic is encrypted the F5 can't differ between bad / successful attempts. you might be able to setup some kind of feedback between the ssh/scp server and the BIG-IP when it detects an attempt, but that will get complicated.