For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mohanish_169493's avatar
Mohanish_169493
Icon for Nimbostratus rankNimbostratus
Nov 27, 2015

GTM generating tremendous amount of traffic

Hi,   We have a GTM installed at our DR location. We are finding its interface taking tremendous amounts of traffic. To the extent that we clear the interface statistics just 3 days ago and till n...
application delivery
BIG-IP
big-ip gtm
gtm
Jinshu's avatar
Jinshu
Icon for Cirrus rankCirrus
Nov 27, 2015

I think your GTM is under targetted attack. You need to monitor the connetions through it and continuesly capture traffic and analyse if it is genuine.

 

You might expect huge amount of DNS querries towards GTM exposed to internet. You know, that are bad guys out there.

 

Addition to above statement, we can't avoid the chances for false alarms due to code bugs. But before we go to F5, analyse the traffic and if you dont see real traffic on the interface, raise the concern with F5.

 

-Jinshu