For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

1 Reply

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 05, 2012
    Hi TJ,

     

     

    ASM does not validate the SSH protocol. You could try to do something with iRules based on layer 4 info like client IP address, connection attempts per time interval and/or GeoIP location data.

     

     

    I think it also makes sense to implement more SSH-specific validation on the SSH servers themselves. There are a lot of opensource solutions for securing SSH like:

     

     

    http://alternativeto.net/software/ipban/

     

     

    Aaron