Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 

Is it possible to prevent BIG-IP to send TCP RST?

TeemuK
Altostratus
Altostratus

Hello,

I was wondering if it is possible to prevent the big-ip system to send TCP RST to connections / ports that are not actually in use? This is a problem when scanning etc activities occur towards services.

 

BR

 

Teemu

3 REPLIES 3

Hi @TeemuK ,

Could you be more specific about why you want to prevent TCP resets? because the F5 is a deny device by default, if the port is not open it have to send a reset as a firewall, in the case you want to allow all port in a virtual server you have to configure the port in 0 in the virtual server.

Hi,

check TM.rejectunmatched from this article

https://my.f5.com/manage/s/article/K9812

So basically case resolved 🙂