F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

kargyrides_1348's avatar
kargyrides_1348
Icon for Nimbostratus rankNimbostratus
Oct 03, 2013

F5® BIG-IP® Global Delivery Intelligence - Capabilities

Hi, I would like to know if the ONLY way for a BIG-IP ASM to protect from Malicious IPs, Phishing URLs, Anonymous Proxies and TOR IPs is by incorporating the F5® BIG-IP® Global Delivery Intelligence ...
deployment
security
Michael_Koyfma1's avatar
Michael_Koyfma1
Icon for Cirrus rankCirrus
Oct 03, 2013

Leveraging our IP Intelligence subscription service is the best way to protect against those threats. You could try other approaches, but none will be as scalable and efficient as leveraging F5's own IPI service. It does not have to be used in conjunction with ASM, it can be used via iRules with LTM, and also can be leveraged with AFM(Network Firewall).

 

Would like for you to expand on the second question so that we can give you a more precise answer.

 

Michael_Koyfma1's avatar
Michael_Koyfma1
Icon for Cirrus rankCirrus
Oct 07, 2013
We don't have a feed that contains intelligence about attacks on specific providers, but you can easily craft a rule that leverages both IPI and potentially other custom-crafted/maintained data to make the access decision. There is also Geo-IP information available on the device, so it is pretty effective to use combination of both Geo-IP data(https://devcentral.f5.com/wiki/irules.whereis.ashx) as IPI to protect against those threats.