For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joe_Pipitone's avatar
Joe_Pipitone
Icon for Nimbostratus rankNimbostratus
Feb 08, 2011

Restrict FTP traffic on VIP to IP address or range

We're running BigIP LTM 9.4.7.   I have a contractor who requires FTP access to an FTP server on our network.   We have created a VIP that only allows...
application delivery
dev
devops
iRules
Austin_Geraci_3's avatar
Austin_Geraci_3
Icon for Cirrus rankCirrus
Mar 30, 2011
@kavan

 

 

LTMs are the best of bread Application Delivery Controllers, and are versitle enough to block some unwanted traffic like you've seen above. They were definitley never intended to replace your firewall by themselves.. especially if your firewal is Internet Facing..

 

 

Depending on your needs you may want to look into the APM...

 

 

http://www.f5.com/products/big-ip/a...nager.html

 

 

Internally you can definiltey do some traffic blocking without any hitches depending on your topology. Probably more usefull when servers are inline and are only accessed through your LTM...