For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

siru_129409's avatar
siru_129409
Icon for Nimbostratus rankNimbostratus
Mar 10, 2016

How can I protect my DNS Servers from DDoS attack via LTM+ASM

Hi I have a setup of Big-IP LTM+ASM to load balance and secure various application.   Recently I did a configuration for load balancing my DNS Servers via iApp and it is working fine.   Now I...
ASM Advanced WAF
ddos
dns
LTM
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Mar 10, 2016

siru - i believe this depends on what version of ASM you have. If i recall DNS DoS protection was part of Protocol Security Manager, which then went end of sale and was integrated into ASM. You would need to create a DoS Profile and enabled DNS security. This would be applied to a Virtual Server. I think from 11.4.x this functionality was moved to F5's Advanced Firewall Manager instead, again same process.

 

Hope this helps - and hope and DNS experts could correct me if incorrect.

 

Many thanks,

 

N