F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Alladinsane's avatar
Alladinsane
Icon for Nimbostratus rankNimbostratus
Jan 15, 2025

Can SSM Agent run on Ec2 with BEST license?

I am setting up F5 on AWS, using a BEST licensed AMI from the Marketplace. I wanted to be able to manage the instance via Systems Manager. In order for ec2 instances to communicate via SSM, I must in...
cloud
devops
security
VishnuGatla's avatar
VishnuGatla
Icon for Cumulonimbus rankCumulonimbus
Jan 22, 2025

Running the AWS Systems Manager (SSM) Agent on an F5 BIG-IP instance with a BEST license and FIPS protection can indeed be challenging, as you've encountered. The BEST license includes advanced features such as WAF (Web Application Firewall) and FIPS compliance, which imposes stricter security measures that may conflict with the SSM Agent.

If you need both WAF and less restrictive FIPS settings, you might need to explore different licensing options or configurations. However, F5 does not typically offer a license that combines WAF without the stricter FIPS requirements under the BEST tier. You may need to contact F5 sales directly to discuss custom licensing options or configurations that meet your needs.