For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sameh_atef_2110's avatar
sameh_atef_2110
Icon for Cirrus rankCirrus
Nov 20, 2015

Firewall access to be opened for APM to operate

Hi, we have an APM cluster (2 devices in HA). we want to know when user or client is authenticating from external authentication server like AD or RSA or Radius or ACS...., what IP from F5 is communi...
BIG-IP Access Policy Manager (APM)
security
Jinshu's avatar
Jinshu
Icon for Cirrus rankCirrus
Nov 28, 2015

Purely depends on your routes. If you have management route configured and the AAA server is in management network, then the server would receive the authentication packets from your F5 management address. Otherwise it would take floating address of F5 and go out.

 

As boneyard and Amine suggested run the tcpdump and verify it once before you go ahead.

 

-Jinshu