For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

puneet_mandyal_'s avatar
puneet_mandyal_
Icon for Nimbostratus rankNimbostratus
Mar 28, 2018

SFTP port 22 to be allowed on specfic IP addresses

Hi All,   We have SFTP allowed on f5 and we need to narrow down the access parameter to hit by specific IP address How We can create rule for SFTP allow on specific IP addresses  
BIG-IP
LTM
security
oguzy's avatar
oguzy
Icon for Cirrostratus rankCirrostratus
Mar 28, 2018

Hi,

You can use Data Groups within an irule.

For instance;

when CLIENT_ACCEPTED {
    Comparing source IP to a list of entries in a LTM data-group.
   if { not ( [class match [IP::remote_addr] equals data_SourceIps ] ) } {
      reject;
   }

}