For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shweta_b_215169's avatar
Shweta_b_215169
Icon for Nimbostratus rankNimbostratus
Aug 11, 2015

Need to track suspicious IP traffic through F5 LTM

Hi There,

 

I am looking for a way to be able to see connection information for a given IP on F5. We are using F5 to load balance exchange traffic to our exchange servers. Is it possible to see connection history for a particular IP to see which exchange server/servers it has connected to it in past? Is it possible to log this traffic?

 

Thanks in advance!

 

Shweta

 

2 Replies

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Aug 11, 2015

    Hi,

     

    the default behavior is to log nothing.

     

    to log traffic, you can configure a Request logging profile to send log to an external syslog server.

     

    Stanislas

     

  • Shweta_b_215169's avatar
    Shweta_b_215169
    Icon for Nimbostratus rankNimbostratus
    Aug 11, 2015

    Hi Stanislas,

     

    Thanks for your quick response! I apologize for asking this again but is there any documentation I can refer to, to set this logging? I am new to F5 and still learning things:) Also just to confirm this logging will log connection history.. correct?

     

    Thanks again! Shweta