Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

JWhitesPro_1928's avatar
JWhitesPro_1928
Icon for Cirrostratus rankCirrostratus
Feb 04, 2018

F5 FireEye Ingress with Single BIG-IP

Please--before you link me the existing deployment documents understand that I am asking for help on this because the existing deployment guides do say they are for ingress traffic but the guide just...
AFM
LTM
security
Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Feb 05, 2018

The VE limitations only apply to the 2nd VE in the demo, which is only used to simulate an L2 IPS. So when using a real L2 IPS, you shouldn't worry about this.

 

I think the fail-open depends on the IPS being used, but if the IPS doesn't have a fail-open solution it should be possible to configure a fail-open by using priority groups or a simple iRule.