For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

awan_m's avatar
awan_m
Icon for Cirrostratus rankCirrostratus
Jul 30, 2025

SSH proxy implementation

Hi , my scenario is -  users need to connect to sftp server - via F5 -  F5 has snat so sftp server cannot see real ip of users . i need to implement an allow list of username + client ip on F5 . ...
application delivery
awan_m's avatar
awan_m
Icon for Cirrostratus rankCirrostratus
Aug 06, 2025

Thnaks for the response 
Question - once i setup ssh proxy and it has the option to allow commands for users 
would i be able to log users - and then i can do a compare from datagroup and allow ip / user connections 

 

awan_m's avatar
awan_m
Icon for Cirrostratus rankCirrostratus
Aug 07, 2025

i have ssh proxy configured now - and ssh proxy is logging client ip and username 
"ssh_serverside_auth_success","10.10.10.10","puser"
now the task how can i extract this information and compare it against a data group 

with SSL - there are irule options to extract info with CLIENTSSL_DATA
how can i extract the username from ssh proxy ?

thanks