For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Wasfi_182818's avatar
Wasfi_182818
Icon for Altostratus rankAltostratus
Aug 12, 2016

How can I apply an AFM DoS profile (DNS) and an DNS service profile to a GTM listener

Hi

 

How can I apply an AFM DoS profile (DNS) and an DNS service profile to a GTM listener. The idea here is to protect the BIG-IP GTM appliance itself from a DNS DoS attack.

 

Kindly Wasfi

 

application delivery
BIG-IP DNS
security

1 Reply

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Aug 12, 2016

    What version are you running? On 11.6.0 the DNS service profile can be assigned to either the dns listener or the listeners corresponding local traffic virtual server (GTM listeners are really just virtual servers). The AFM dns dos profile is assigned to the local traffic virtual server: Local Traffic > Virtual Server List > vs/listener_name > Security > Policies. This dos protection profile does not appear under the GTM listener settings.