For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

zeropixel_23561's avatar
zeropixel_23561
Icon for Nimbostratus rankNimbostratus
Dec 09, 2015

Local F5 VE: ASM unable to see the traffic (Please advise)

I have setup local F5 Virtual Edition with LTM and ASM enabled. I have configured the virtual server, pool member (external URL, not in local VM) and automatic security policy, but I am unable to see any requests in the "Event" on "Security" tab. Any ideas why and any suggestions on troubleshooting this issue? Thanks!!

 

ASM Advanced WAF
BIG-IP
security

5 Replies

  • nolipineda's avatar
    nolipineda
    Icon for Altostratus rankAltostratus
    Dec 09, 2015

    Default event log filter is illegal request. Have you tried changing your filter criteria?

     

  • zeropixel_23561's avatar
    zeropixel_23561
    Icon for Nimbostratus rankNimbostratus
    Dec 10, 2015

    I have created the Logging Profile and configured with virtual server. In "Event Logs," I am unable to unable see any logs, even I selected "All Requests" in the drop down box. My goal is to setup local F5 ASM in my macbook, and try to make the external applications go through my local F5 ASM in order to see the traffic. Are there still some configurations that I miss? Thanks!!

     

  • John_Buchanan's avatar
    John_Buchanan
    Icon for Nimbostratus rankNimbostratus
    Dec 11, 2015

    Hmm, maybe upload your QKView file to iHealth and see if that sheds any light?

     

  • zeropixel_23561's avatar
    zeropixel_23561
    Icon for Nimbostratus rankNimbostratus
    Dec 11, 2015

    Hi John, I think the question is is it possible for my local F5 VM to be able to configure with external hostname. In the F5 VM, I am able to ping and telnet the external host. I also went to system Logs but did not see relevant error. Is it related to the policy building?