Forum Discussion

nafooesi's avatar
nafooesi
Icon for Altostratus rankAltostratus
Mar 30, 2020

IP intelligence feed list for ASM/WAF?

Hi all,   Just started learning about ASM and AFM via documentation. AFM seems to allow importing of external ip list into IP intelligence database, but ASM/WAF seems to use Webroot for its databas...
ASM Advanced WAF
feed list
IP Intelligence Services
security
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Jun 29, 2021

I am starting to wonder if by using the REST-API can a feed list be created without the AFM module. I may try in the future but if someone has tested this they can share if it works.

 

 

https://clouddocs.f5.com/api/icontrol-rest/APIRef_tm_security_ip-intelligence_info.html

 

 

 

Another way could be to use the CVS tabular imported that I am using for importing a list of bad IP addresses or using external data group and populating it or using ansible or BIG-IQ with external data groups:

 

 

https://devcentral.f5.com/s/articles/csv-tabular-data-sideband-importer

 

https://devcentral.f5.com/s/articles/populating-tables-with-csv-data-via-sideband-connections

 

 

https://devcentral.f5.com/s/question/0D51T00006aFjFFSA0/managing-datagroups-from-bigiq

 

 

There are some free lists from free or payed providers with palo alto minemeld or misp free systems.