Explicit FTP/S VS - v13.x
I have been asked to provide a VS for explicit FTP/S. We have recently upgraded to v13 (we were pretty far behind) and I have noticed the FTP profile has an option for 'Allow FTPS'. Does anyone have any working configurations for Explicit FTP/S using this profile or working configurations for E FTP/S in general? Thank you...
Problem FTPS passive
Hello Everyone, For one of our customer, we have to deploy a FTPS server behind the F5. Here is my configuration of the VS : And here is my problem, The FTP behind the F5 is working great, I can connect to it and transfer a file with success. But where I have a problem is when the server has TLS turned on. First I tried to manage the certificate with the F5 (TLS is off on FTP server) so I created a SSL client profiles but it's not working : And when TLS is turned on onto the server but the certificate is not managed by the F5 here is the error message i have: I connect with a real account. 1/Do you think it's a F5 conf problem of a FTP/Certificate problem : Someone already had this kind of problem and how did he manage to resolve it? 2/Do I need to create a irules to limit the range of port to connect? Thanks in advance.
I need to be able to capture source IP on FTPS connection.
I need to capture the source IP for ftps traffic, and match that IP to a FTP session. It is easy enough to create an irule to capture source IP, and have that sent to a logging server, where then splunk can query the logs. After I have the list of source IP's I need to be able to match that up with a user. Because the data is being passed through the load balancer as secure, I can not do any inspection at the LTM, and I don't see time stamps as being a good enough match for busy servers to positively match a ftp session to a source IP.FTPS Offload?
Hello Folks, Anyone have implemented FTPS Offloading on F5? I have gone through the following article, but I didn't find any y.y.y.y IP address in the iRule as mentioned on step 3 under "Solution 2: Offloading SSL for FTPS". https://devcentral.f5.com/articles/ftps-offload-via-irules I am not getting how the VS1 on X.X.X.X:21 is going to communicate with the proxy VIP, he has mentioned as Y.Y.Y.Y Can someone please help? Thank you, Darshan
