For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sameh_atef_2110's avatar
sameh_atef_2110
Icon for Cirrus rankCirrus
Nov 20, 2015

Firewall access to be opened for APM to operate

Hi, we have an APM cluster (2 devices in HA). we want to know when user or client is authenticating from external authentication server like AD or RSA or Radius or ACS...., what IP from F5 is communi...
BIG-IP Access Policy Manager (APM)
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Nov 28, 2015

i agree with Amine, just use tcpdump to be sure.

 

but from experience i believe the AAA stuff is the done from the non floating self IP (or management IP if you setup management routing) and the user stuff is done from the floating IP. but again, measuring and testing it is the safest.

 

also be sure to report back your results, it will help other.