For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mohanish_169493's avatar
Mohanish_169493
Icon for Nimbostratus rankNimbostratus
Dec 08, 2015

GTM listener IP open on SSH from internet

Hi,   I have a GTM with two listener IP address configured. When I am doing a port scan from open internet I am finding that SSH is open for it. Please if someone can tell how can I secure it. Sh...
application delivery
BIG-IP
BIG-IP DNS
f5 big-ip gtm
gtm
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Dec 08, 2015

Mohanish,

 

Is your GTM listener also a self IP? If so then what is your Port Lockdown settings for the self IP? Allow Default will allow SSH. Any internet facing self IPs should have Allow None as their setting. In your case you may want to create a custom allow and just allow port 53.

 

Hope this helps,

 

N