For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Venkata_Narayan's avatar
Venkata_Narayan
Icon for Nimbostratus rankNimbostratus
Aug 03, 2018

F5 ASM Communication with https proxy IP

Hi, I need F5 to communicate to https proxy for the attack signature update but in this procedure (https://support.f5.com/csp/article/K8217) I can only use the proxy hostname but my proxy doesnt have...
ASM Advanced WAF
security
Martijn_144688's avatar
Martijn_144688
Icon for Cirrostratus rankCirrostratus
Aug 03, 2018

Hi,

 

Have you tries to configure an IP-address?

 

If you must configure a hostname, the BIG-IP will look-up this hostname using the configured DNS servers. If you are the administrator of these DNS servers, just put an entry there for the hostname.

 

If you are not the administrator of these DNS servers, just add a static host entry on the BIG-IP.

 

System -> Configuration -> Device -> Hosts

 

Regards, Martijn.

 

Martijn_144688's avatar
Martijn_144688
Icon for Cirrostratus rankCirrostratus
Aug 06, 2018

Hi Venkata,

 

Go to System -> Configuration -> Device -> Hosts and add a static host(name) with the IP-address of your proxy server. You say your proxy server does not have a hostname, so you can use any host name you want. For example my.proxy.local.

 

Then follow the procedure in article K8217 with the following line:

 

modify /sys db proxy.host value my.proxy.local

 

When a signature update is needed, BIG-IP gets the IP-address of my.proxy.local from the local hostfile.

 

You can also add the host my.proxy.local to the DNS server the BIG-IP uses for resolving. But you need to be the DNS administrator.

 

Regards, Martijn