cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

Proxy Configuration for System / Live Update

Parham_EJ
Nimbostratus
Nimbostratus

Hello Dears,

We have one vCMP Guest (TMOS v16.1.2.1) with LTM + AWAF + TC + IPI Modules. All the needed Configurations for Proxy + DNS + Static Routes have been done correctly via both "TMSH Commands" and "GUI" (Upstream Proxy). But, Unfortunately, "Live Update" does NOT work and after checking DUMP, it seems that the TMOS does NOT generate any traffic. Also, the IP Intelligence Database has not been updated yet!

I have just checked F5 Bug Tracker, but with no success. Has anyone experienced the same issue?

Would you please advise.

7 REPLIES 7

CA_Valli
Cirrocumulus
Cirrocumulus

WAF signatures are available on f5 download site and can be eventually uploaded manually,

I'm relying on my memory, but for live updated I believe you need to be able to reach callhome.f5.com and activate.f5.com, can you try to generate traffic manually and see what type of error you see? 

Thanks CA_Valli for your reply.

I am aware about Offline Update. But, our issue is related to Automatic/Online Update.

About generating manual traffic to query F5 servers, unfortunately no traffic has been generated after calling F5 Update Servers, as mentioned by you.

Does this only happen with live updates?

If traffic does not exit the unit, I would suspect that there's not a match in the routing table, if you attempt a ping the portals do you see traffic or do you get an error?

 

Although we could check the correct connectivity between our F5 Guest and Proxy Server via TELNET command successfully, But Unfortunately, there is no DSN or L3 related DUMP, once we initiate manual traffic to check the issue!

So, based on our correct TELNET connectivity, it seems that there is no misconfig in Routing -table Configuration, as it has been configured as Static MGMT-Route.

DNS*

Hello, I would recommend to issue a support case to check this further.

Hello, I mentioned this issue on DevCentral to check for any probable same issue for other guys...

But, Now I agree with you to have a support ticket on F5 Portal.