In order to protect a critical application (Oracle EBS), we went the AzureAD/OAuth2 pre-authentication way.This mean that the users needs to have a valid M365 session in their browser to reach the application. They can then log in (again) and use the...
I am trying to use the Guided Configuration to create SAML Service Provider. However ths is can only be run from the Common partition whereas the VIP required has to be on a different parition for security reasons. I have tried to configure this manu...
Hi -I'm writing an iRule using the HSSR HTTP client and am specifying the -maxtime argument. It looks like there are a couple of issues in how maxclock is computed.The 'maxtime' argument is specified in seconds as is 'wait', but 'timeout' is in milli...
1. Get all configuration through API instead of a specific Pool. (https://1.1.1.1/mgmt/tm/ltm/pool/members/stats)2.This can only obtain Common Partition, and other Partitions cannot be obtained. Obtaining each API separately incurs too much performan...
Hi I need your help ~ I checked below url but does not work,, refer : https://my.f5.com/manage/s/article/K43590271 I entered the https://ipaddress/mgmt/shared/authz/tokens/<token vlaue> error occurred please let me know if you know that than...
Hi,I am trying to create a declarative for a parent TCP profile. However, unable to find anywhere to setup tcp-wan-optimized as parent profile. Can anyone please confirm if this is feasible? If not, what alternatives are available?Have tried to creat...
Hello,We have an existing application https://abc.com which is configured with F5.When we open the page and click on status tab it will route to https://abc.com/api-status. Now the users want to see contents of https://abc.com/api-status in a new URL...
Hi Team,We are trying to setup alerts to Splunk so that in case any member becomes unavailable for any reason within a particular virtual server then we can see it on Splunk. There is recommended way to use use Splunk Universal forwarded/agent but ar...
Hi! I'm having some problems deploying a dynamic website via Docker with Nginx. It seems that everything in my configuration is okay because it deploys correctly but my website does not apply my CSS or JS files. Also, i have to say that the images i ...
Hello,Is there any setting that allows the proxy to do packet bufferWait for the proxy to accumulate a certain amount of packets before sending them to the destinationBecause it is a cross-sea connection, it will take more time if small packets keep ...
With code for an irule below is there a way I can set a unique identifier for the data coming back. I ask because when the logs are ingested into Splunk we would like to know which header came with which request, but each response header is on a dif...
Hello everyone,I have an application accessible through my portal's webtop, which is published via Big-IP APM. The portal requires user authentication with a username and password, while the application itself uses basic authentication to verify user...
How are you all using AI in your day-to-day jobs? Are you using it to create a rough draft of code you then check before implementing? Using it to write emails or other things for you? Using it to check text? Using it for serious business? Using it f...
Hi,i need to check the uptime of the node based in health monitor.For example, one node have 03 health monitor associate and i need check the uptime for one specific health monitor.Exists an a GUI option or cli command for check this. Thanks
The topology map is client-->F5-->backend nginx serviceNow the nginx service log only has the customer’s real ip, I want the F5’s ip to be recorded in the log, what should I do?
I am trying to deploy Exchange 2019 using iapp 2016. At the end SMTP was not created by the iapp.how can I can create SMTP?
Hi Team,Please I have an issue with deplying SAP NetWeaver on F5 LTM I have added the pool members and VS however when I try to access the VS I keep getting the login screen for each page after login however without using F5 ltm and using the origin...
Hello,I'm trying to publish new url, which is in port 8040, I want to publish it in 443, so the scenario as below.when the user want to access the url, must be in 443 https://abc.com, then, from DMZ F5 to the internal server should be in port 8040, i...
Folks,Can you please guide me how we can add a txt record in GTM for domain verification. I have a requirement to purchase an SSL certificate for a domain hosted in GTM where CA wants to verify the domain by adding a txt record.Please help.
Hello,When I was building IPsec Interface I found that I could not select the option I wanted...But I've obviously put this option up ....Why can't I select it in " Tunnels : Profiles : IPsec Interface" ?Any help is appreciate....
Hi,i have a VIP that should only be accessable by domain *.microsoft.com - i have AFM provisioned and a DNS resolver . but the Rule cannot take *.microsoft.com as source . is there a way to achieve this .thanks
Hi We are currently uplifting our jenkins pipeline for F5 and there is a requirement for static analysis on the code. Since TCL scripts are not supported by default on Sonar. I am looking for automated linters which can perform the static analysis. C...
Good Day,iRule “radius_callingid_persist_irule” is referenced in the Cisco’s How To: Cisco & F5 Deployment Guide: ISE Load Balancing Using BIG-IP.https://community.cisco.com/t5/security-knowledge-base/how-to-cisco-amp-f5-deployment-guide-ise-load-bal...
Hello Guys,I would like to send email and snmp trap with ltm log event "HA Connection with peer %la:%d for traffic-group %s lost". I tried to set custom alert on /config/user_alert.conf and try to trig the event with the logger command but nothing oc...
Dear all,We want to allow our users to review, modify and deploy their web application firewall policy on the big-IQ.The default roles do not allow for this; because they also allow the users to create and delete policy's.I think this can be done by ...
Hi all,We're running F5 LTM (version 14.1.4.x) and sorry for any newbie question.We're trying to perform some tasks through REST API to the LTM:1. Check system status, e.g.curl -ks -H "Content-Type: application/json" -u admin:admin "https://192.168.1...
HiI am working on to seup APM policy to connect to VMware horizon on new BIG-IP.This is sample to simplify the trouble. I input ID and password on the logon page, but my input ID and password is not set on session variables. Therefore, any action aft...
Hello,I am trying to set up Site to Site VPN between F5 and PA but can't get it to work.Here is my structure :Here is my PA setting :Here is my F5 setting :Virtual Server has created a Forwaring IPAm I missing something?or is the setting wrong?Any he...
CLIENT_HELLO SSL/TLS version insertHELLO,I want to insert the SSLv3, TLSv1, TLSv1.1 version in the HTTP headerThe name of the HTTP header is "version"I must use irulewhen CLIENTSSL_CLIENTHELLO {set version [SSL::cipher version]}when HTTP_REQUEST {if ...
I'm trying to upload f5 analystics, i get the error - "Configuration error: /Common/f5.iapp.1.5.6.cli:iapp_pagedata_table is used by another script. Cannot rename or delete. Unexpected Error: Loading configuration process failed."Any ideas? Thanks,
Hi!We are using AWS WAF managed rule 'F5-OWASP_Managed'. I would like to create a WAF custom response when requests are blocked by this rule. To do so I need to change the rule from block to count, and capture labels assigned by this rule in a WAF cu...
hi All how do you set Entry DNS in F5?
Hello everyone, I am currently looking to see if there is any way to find out how much blocking each individual security policy has in place. I have not seen any reports I can run that would show the amount of blocking a policy currently has in place...
