For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jnon's avatar
Jnon
Icon for Nimbostratus rankNimbostratus
Jul 18, 2016

I need to be able to capture source IP on FTPS connection.

I need to capture the source IP for ftps traffic, and match that IP to a FTP session. It is easy enough to create an irule to capture source IP, and have that sent to a logging server, where then spl...
application delivery
ftps
iRules
LTM
security
VernonWells's avatar
VernonWells
Icon for Employee rankEmployee
Jul 18, 2016

Your choices are:

 

  1. Offload TLS on the BIG-IP (and potentially re-encrypt between BIG-IP and the servers);
  2. Inspect a presented client certificate.

Naturally, 2 only works if a.) a certificate is actually presented by the client; and b.) it is a user certificate, rather than a machine certificate.