For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jknock6560's avatar
jknock6560
Icon for Altostratus rankAltostratus
Jun 05, 2025

F5 Internal IPs Nessus Scans

I am confused.  I scan my Virtual BIG-IP F5s via a NESSUS scanner.  It appears the scanners scans the "MGMT" ip for both VEs.  I assume the MGMT IPs are the ones on top left when you open the GUI?  I...
scanners
P_Kueppers's avatar
P_Kueppers
Icon for MVP rankMVP
Jun 06, 2025

When you scan your IPs from the virtual Servers, there is only the virtual server answering. But if you scan the network/vlan and nessus is scanning the F5-Self-IP and your "port-lockdown"-Setting is not setup to "allow none" than mgmt appears on that IP. That needs to be changed. 

 

jknock6560's avatar
jknock6560
Icon for Altostratus rankAltostratus
Jun 06, 2025

Ok so from my understanding - I need to change the port-lockdown setting in the GUI of the F5? Once I select allow none then when i run the scan it will scan on the internal interface instead of the mgmt ip?