For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

krishans_52349's avatar
krishans_52349
Icon for Nimbostratus rankNimbostratus
Jan 25, 2011

Configure syslog server in F5 with an irule to see actual internet IP in syslog server

Hi,     we are using Big IP 3900 version 10.2 , We had network topolgy in this way that we need to enable SNAT as AutoMap , For this reason we are not been able to see the actual Internet IP ...
application delivery
dev
devops
iRules
Chris_Miller's avatar
Chris_Miller
Icon for Altostratus rankAltostratus
Jan 26, 2011
Posted By Colin Walker on 01/26/2011 07:21 AM

 

Ahh, that's a bit of an issue actually. Your iRule won't be able to send traffic out the management port. That'd be a heinous security risk. You'll need to make sure the syslog server you want to send traffic to is routable from a non management interface on the system.

 

 

Colin And this isn't limited to HSL, right? Any logs originating from iRule will not take mgmt routes?