Integrating the F5 BIGIP with Azure Sentinel

So here’s the deal; I have a few F5 BIG-IP VEs deployed across the globe protecting my cloud-hosted applications. It sure would be nice if there was a way to send all that event and statistical data ...
Published Jun 12, 2019
Version 1.0
application delivery
ASM Advanced WAF
Azure
cloud
Kristoffer's avatar
Kristoffer
Icon for Nimbostratus rankNimbostratus
Dec 19, 2019

Hi,

Thanks for the great walkthrough!

However I'm Having an issue with the F5Telemetry_LTM_CL connector.

I run 2x-1NIC-BIG-IP's with Azure LB in front.

 

I'm not allowed to create the ltm pool since it's referencing a self IP.

I've tried following this on https://github.com/F5Networks/f5-telemetry-streaming/issues/1

But it's possible I'm doing something wrong, the workaround is not very detailed so I'm asking if anyone could elaborate on it.

Created VS with listener 255.255.255.254:6514

irule:

when CLIENT_ACCEPTED {

  node 127.0.0.1:6514

}

 

Any help is appreciated!

 

Regards

Kristoffer