Forum Discussion

Jnon's avatar
Jnon
Icon for Nimbostratus rankNimbostratus
Jul 18, 2016

I need to be able to capture source IP on FTPS connection.

I need to capture the source IP for ftps traffic, and match that IP to a FTP session. It is easy enough to create an irule to capture source IP, and have that sent to a logging server, where then spl...
application delivery
ftps
iRules
LTM
security
VernonWells's avatar
VernonWells
Icon for Employee rankEmployee
Jul 18, 2016

Your choices are:

 

  1. Offload TLS on the BIG-IP (and potentially re-encrypt between BIG-IP and the servers);
  2. Inspect a presented client certificate.

Naturally, 2 only works if a.) a certificate is actually presented by the client; and b.) it is a user certificate, rather than a machine certificate.