For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kmurphy_130520's avatar
kmurphy_130520
Icon for Nimbostratus rankNimbostratus
Dec 16, 2014

Confusion about IP Intelligence configuration

I understand that IP Intelligence is a separate add-on license. What I don't understand is why it appears to be configurable in the UI even without that license. For instance, when I'm on the Security > Policies page while editing a virtual server, I have the ability to assign an IP Intelligence profile.

 

Would that have any effect at all, if I didn't have the IPI license? Why isn't it removed from view if not?

 

Thanks all

 

advanced firewall manager
application delivery
ASM Advanced WAF
deployment
LTM
security

3 Replies

  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    Dec 18, 2014

    You can use IPI within the device but you need the license to add the IPI-based info into HTTP headers.

     

  • kmurphy_130520's avatar
    kmurphy_130520
    Icon for Nimbostratus rankNimbostratus
    Dec 18, 2014

    Thanks, but I'm still confused.

     

    What IPI-based info in HTTP headers?

     

    Without the IPI license could I, for example, use an IPI action with an APM policy?

     

  • Eric_27859's avatar
    Eric_27859
    Icon for Nimbostratus rankNimbostratus
    Mar 06, 2015

    I think that IPI Actions are more related with ASM Blocking Settings. Also you can use them in iRules as far as I know.

     

    For APM I can't really tell, but if you don't have a license of IPI, at least you have a local DB of countries and you can filter access by SourceIP related to Countries.