Category ✅

For those interested in exploring the capabilities of the BIG-IP ASM, creating a hands-on lab environment can be a great way to dive deeper into its features. In this guide, we’ll outline the steps to set up a testing environment using a BIG-IP ASM and a PHP Auction site. By the end, you’ll have a working setup to test policy building, parameter management, and other ASM functionalities. What You’ll Need To set up this lab, you’ll need the following: A hypervisor, such as VMw

BIG-IP virtual server types in F5

Configuring Event Logging in BIG-IP ASM In this article, we will explore the importance and configuration of event logging in BIG-IP ASM (Application Security Manager) . While event logging might not seem exciting, it plays a critical role in identifying and preventing cyber threats. System logs often capture signs of malicious activity, making proactive log review an essential part of security management. Logging Profiles Logging profiles in BIG-IP ASM define how and where t

Data Guard As we all know, we need to protect the personal and sensitive information of our users. So back in the day, some super-smart people developed an iRule that scrubs out credit card numbers from HTTP traffic that passes through the BIG-IP (the link to the iRule is here ). This is a great iRule, but the good news is that the BIG-IP ASM gives you all the power of this iRule (and more) by simply checking a box in the Data Guard settings. In fact, the ASM gives you the op

This article will discuss some really cool ASM features: IP address intelligence and whitelisting. It's hard to defend against all the crazy cyber threats out there today, so wouldn't it be nice to know if the IP address requesting access to your application is trusted or not? And, wouldn't it be convenient to tell certain IP addresses that you explicitly trust them? Well the ASM allows you to do all that! So turn on that ASM and get ready to configure some awesomeness... IP

SSL Methods for LTM  There are 3 types of SSL Methods used in F5. SSL Offload, SSL Pass-Through Full SSL Proxy SSL Offloading  - In this method the client traffic to BIG-IP is sent as encrypted. Instead of the server decrypting and re-encrypting the traffic BIG-IP would handle that part. So the client traffic is decrypted by the BIG-IP and the decrypted traffic is sent to the server. The return communication from the server to client is encrypted by the BIG-IP and sent back t