For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Pooja_Varekar208's avatar
Pooja_Varekar208
Icon for Altocumulus rankAltocumulus
Dec 23, 2024
Solved

ports are showing open on online scanning tool

In our case F5 sited as a front facing device both the links are terminated on F5 device and incoming and outgoing traffic going through out F5 DNS   Incoming:  Client-->F5-->SW-->FW-->DMZ Outgoin...
application delivery
security
  • Pooja_Varekar208's avatar
    Pooja_Varekar208
    Jan 20, 2025

    Hello Team,

    We have raised F5 case for this issue and F5 Internal team have found few logs and few TCP half-open (SYN cookie) vector which might be causing this issue which are related to AFM module. To isolate the issue internal has suggested to upgrade the tenant to the latest 17.1.1.4 (stability release) and F5OS to at least 1.5.2. and After upgrading the tenant to version 17.1.1.4 and F5OS to version 1.5.2, the issue has been resolved.

Pooja_Varekar208's avatar
Pooja_Varekar208
Icon for Altocumulus rankAltocumulus
Dec 24, 2024

Paulius, thanks for your reply. As you mentioned, in our scenario, one condition is met: the self IP is configured as a virtual server. To resolve this, can we change the self IP during downtime?

Nizar's avatar
Nizar
Icon for Altostratus rankAltostratus
Jan 03, 2025

Hi Pooja, i still dont get it, so you mean that, you use self ip as a vip ? Or you use one segment of self ip as your vip ?