For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Abhijith_KS_302's avatar
Abhijith_KS_302
Icon for Altostratus rankAltostratus
Aug 03, 2017

Port Lock Down : UDP 514

Hi Guys,a quick question. I have syslog set up on UDP 514 and I see the syslog traffic via one of my self ip's and I am wondering how is that possible. Because syslog traffic should flow via manageme...
application delivery
BIG-IP
TMOS
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Aug 03, 2017

Hello,

 

I think you are confusing with the Port Lock Down.

 

This feature is applied on listenning ports for each self ip.

 

By definition the "Port lockdown is a BIG-IP security feature that allows you to specify particular protocols and services from which the self IP address defined on the BIG-IP system can accept traffic"

 

When you send syslog, the self-ip connects to the remote server on port 514 UDP.

 

Reference : https://support.f5.com/csp/article/K17333

 

Hope it helps

 

Regards