F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

JasonTheF5Guy's avatar
JasonTheF5Guy
Icon for Nimbostratus rankNimbostratus
Jan 31, 2024

How do I figure out if F5 has an attack signature or threat campaign for a given vulnerability?

Given the recent Ivanti vulnerabilities I'm wondering if F5 has released any pertinent attack signatures and/or threat campaigns to help me defend against these vulnerabilities. However I'm not findi...
security
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Jan 31, 2024

Hi JasonTheF5Guy , 

I see the mentioned CVEs are related to ivanti :

So if you have any solution related to ivanti ( x pulse secure ) you can check and apply the needed workarounds. 

F5 announces each quarter all found CVEs and sometimes doesn't wait for each quarter in case of urgent or critical CVEs, thus I don't see any relatively to F5.

Thanks

JasonTheF5Guy's avatar
JasonTheF5Guy
Icon for Nimbostratus rankNimbostratus
Jan 31, 2024

Yes, these are Ivanti related CVE's.

It's possible to protect an Ivanti solution by putting it behind an LTM/ASM and configuring a security policy within ASM. If somebody had done that then I'm wondering if F5 has a web site where I can quickly search for a given CVE (or some other vulnerability) and see if there is either a pre-packaged attack signature or threat campaign formulated to protect against that given vulnerability.