Forum Discussion
Tihomir_Hristov
Nimbostratus
Apr 15, 2015LTM Connection Loggin
Hey guys,
We have recently migrated to F5 HA pairs using SNAT and one of the requirements that came from our Security Group is logging every connection that passes through the F5 Load Balancers....
Tihomir_Hristov
Nimbostratus
Apr 29, 2015Hey Robert,
HSL in an iRule is definitely an approach that would work on a per-iApp basis. The goal here is to achieve Connection Logging globally for all traffic, so we maintain proper Security policy without running the risk of forgetting to configure logging on certain iApps.
We have also setup a template that configures this for all of our HTTP iApps but still there will be other custom implementations that would allow for mis-configuration and skipping the iRule. We would like to assure that all connections are always being logged.
Thanks
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects