Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

TJ_92153's avatar
TJ_92153
Icon for Nimbostratus rankNimbostratus
Sep 26, 2012

SSH Security

Is there a way to create a Security Policy for SSH traffic. I have a virtual server listening on port 22. Is there a way i can enable Application Seurity on this?     Thanks   TJ  
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 05, 2012
Hi TJ,

 

 

ASM does not validate the SSH protocol. You could try to do something with iRules based on layer 4 info like client IP address, connection attempts per time interval and/or GeoIP location data.

 

 

I think it also makes sense to implement more SSH-specific validation on the SSH servers themselves. There are a lot of opensource solutions for securing SSH like:

 

 

http://alternativeto.net/software/ipban/

 

 

Aaron