Forum Discussion

Hans_Mayer's avatar
Hans_Mayer
Icon for Altostratus rankAltostratus
Jul 15, 2019

Malicious Source IP Addresses

  Dear All,   we are using BIG-IP v14.1.0.3 when I go to Security -> Event Logs there I see a window "Malicious Source IP Addresses" with several IP addresses.   Is there a way to blo...
BIG-IP
security
Hans_Mayer's avatar
Hans_Mayer
Icon for Altostratus rankAltostratus

 

Hello Lidev,

 

Many thanks for your answer but actually it's not that what I am looking for. I know of this possibility to block individual IP's there. My question is more if BIGIP can do it automatically. In this list of "Malicious Source IP Addresses" are obviously only those IP's which were seen several times. So to say the really bad guys. Why not block them automatically ?

 

// Hans

 

 

Lidev's avatar
Lidev
Icon for MVP rankMVP
Jul 16, 2019

Maybe because F5 provides an add-on license with IP Intelligence\Reputation Services ;-)

https://support.f5.com/csp/article/K13875

https://devcentral.f5.com/s/articles/the-big-ip-application-security-manager-part-6-ip-address-intelligence-and-whitelisting