For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

shadow82's avatar
shadow82
Icon for Cirrus rankCirrus
Jun 26, 2023

F5 LTM and ASM Sentinel integration - works on one cluster, doesn't on another

Hi! I have quite complex trouble with Sentinel integration. I have 2 F5 clusters implemented as IaaS in Azure - Prod and PreProd with LTM logging took from this manual: https://my.f5.com/manage/s/a...
application delivery
ntp
Sentinel
whisperer's avatar
whisperer
Icon for MVP rankMVP
Jun 27, 2023

Have you performed the same TCP dumps to see how the NTP traffic is routing in preprod? Have you taken the bigip.conf and bigip_base.conf files from both units and performed a diff to notice any differences? Just some ideas.

 

  • shadow82's avatar
    shadow82
    Icon for Cirrus rankCirrus
    Jun 27, 2023

    Yup - all 4 F5s try to coomunicate with NTP server using external interface, even if MGT has a default route

    As for diff - I did it focusing on Sentinel integration, not NTP (as PreProd sends the logs to Sentinel while Prod isn't). NTP config is the same (and there is not much to congfigure. NTP server IP address and that's it)