For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Albert__Tase_70's avatar
Albert__Tase_70
Icon for Nimbostratus rankNimbostratus
May 13, 2009

ftps issues

Hello     is there a way to resolve the following issue with an Irule.   I currently have a support case also opened on this issue.     we have the f5 in front of a firewal...
application delivery
dev
devops
iRules
johns's avatar
johns
Icon for Employee rankEmployee
May 13, 2009
I have had this come up before and the only way to resolve was to do the following:

 

1. Server needs to be in the same vlan as the BIG-IP (which you do not have)

 

2. Attach the ftp virtual server IP to the loopback interface on the ftp server

 

3. Configure FTP server to listen on the virtual server IP that is attached to its loopback interface

 

4. Configure the virtual server to NOT translate IP.

 

5. Server uses BIG-iP as the default gateway

 

 

Since FTPS is secured between the client and the server, there is not much BIG-IP can do as a device in the middle without visibility into the FTP session.