Forum Discussion

rodquin_211279's avatar
rodquin_211279
Icon for Nimbostratus rankNimbostratus
Jul 14, 2015

Logging traffic from span port

Hello,   I'm trying to log traffic coming from a SPAN port. The traffic is arriving properly to the F5 (if I do a tcpdump in the interface, I can see the traffic) but for some reason the F5 is no...
deployment
log
mirror
span
traffic
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 14, 2015

A bit confusing. An F5 BIG-IP is not an IDS, it's a proxy. ASM (the F5 web application firewall) does detect and alert/block web attacks, but it generally does so in a proxy configuration - where application traffic flows through the proxy to the web servers.