For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nafooesi's avatar
nafooesi
Icon for Altostratus rankAltostratus
Mar 30, 2020

IP intelligence feed list for ASM/WAF?

Hi all,   Just started learning about ASM and AFM via documentation. AFM seems to allow importing of external ip list into IP intelligence database, but ASM/WAF seems to use Webroot for its databas...
ASM Advanced WAF
feed list
IP Intelligence Services
security
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Jun 29, 2021

I am starting to wonder if by using the REST-API can a feed list be created without the AFM module. I may try in the future but if someone has tested this they can share if it works.

 

 

https://clouddocs.f5.com/api/icontrol-rest/APIRef_tm_security_ip-intelligence_info.html

 

 

 

Another way could be to use the CVS tabular imported that I am using for importing a list of bad IP addresses or using external data group and populating it or using ansible or BIG-IQ with external data groups:

 

 

https://devcentral.f5.com/s/articles/csv-tabular-data-sideband-importer

 

https://devcentral.f5.com/s/articles/populating-tables-with-csv-data-via-sideband-connections

 

 

https://devcentral.f5.com/s/question/0D51T00006aFjFFSA0/managing-datagroups-from-bigiq

 

 

There are some free lists from free or payed providers with palo alto minemeld or misp free systems.