Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Parham_EJ's avatar
Parham_EJ
Icon for Nimbostratus rankNimbostratus
Mar 13, 2022

Proxy Configuration for System / Live Update

Hello Dears, We have one vCMP Guest (TMOS v16.1.2.1) with LTM + AWAF + TC + IPI Modules. All the needed Configurations for Proxy + DNS + Static Routes have been done correctly via both "TMSH Command...
CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP
Mar 13, 2022

WAF signatures are available on f5 download site and can be eventually uploaded manually,

I'm relying on my memory, but for live updated I believe you need to be able to reach callhome.f5.com and activate.f5.com, can you try to generate traffic manually and see what type of error you see? 

  • Parham_EJ's avatar
    Parham_EJ
    Icon for Nimbostratus rankNimbostratus
    Mar 13, 2022

    Thanks CA_Valli for your reply.

    I am aware about Offline Update. But, our issue is related to Automatic/Online Update.

    About generating manual traffic to query F5 servers, unfortunately no traffic has been generated after calling F5 Update Servers, as mentioned by you.

    • CA_Valli's avatar
      CA_Valli
      Icon for MVP rankMVP
      Mar 14, 2022

      Does this only happen with live updates?

      If traffic does not exit the unit, I would suspect that there's not a match in the routing table, if you attempt a ping the portals do you see traffic or do you get an error?

       

      • Parham_EJ's avatar
        Parham_EJ
        Icon for Nimbostratus rankNimbostratus
        Mar 14, 2022

        Although we could check the correct connectivity between our F5 Guest and Proxy Server via TELNET command successfully, But Unfortunately, there is no DSN or L3 related DUMP, once we initiate manual traffic to check the issue!

        So, based on our correct TELNET connectivity, it seems that there is no misconfig in Routing -table Configuration, as it has been configured as Static MGMT-Route.