Forum Discussion

shadow82's avatar
shadow82
Icon for Cirrus rankCirrus
Jun 26, 2023

F5 LTM and ASM Sentinel integration - works on one cluster, doesn't on another

Hi! I have quite complex trouble with Sentinel integration. I have 2 F5 clusters implemented as IaaS in Azure - Prod and PreProd with LTM logging took from this manual: https://my.f5.com/manage/s/a...
application delivery
ntp
Sentinel
whisperer's avatar
whisperer
Icon for MVP rankMVP
Jun 27, 2023

Have you performed the same TCP dumps to see how the NTP traffic is routing in preprod? Have you taken the bigip.conf and bigip_base.conf files from both units and performed a diff to notice any differences? Just some ideas.

 

shadow82's avatar
shadow82
Icon for Cirrus rankCirrus
Jun 27, 2023

Yup - all 4 F5s try to coomunicate with NTP server using external interface, even if MGT has a default route

As for diff - I did it focusing on Sentinel integration, not NTP (as PreProd sends the logs to Sentinel while Prod isn't). NTP config is the same (and there is not much to congfigure. NTP server IP address and that's it)