Is it possible to capture the login id out of a SSH session with an iRule?

Question

We have an iRule that looks for logins other than annoymous and rejects the seesion for our ftp site. We would like to have the same protection for our SFTP site. Can this be done with TCP::Collect?

hooleylist · Answer

I don't think it's possible to decrypt SSH/SFTP on BIG-IP.  The username should be encrypted so I don't think you can parse it from the logon attempt.&nbsp;
https://devcentral.f5.com/articles/ftps-offload-via-irules&nbsp;
Aaron&nbsp;

Forum Discussion

Is it possible to capture the login id out of a SSH session with an iRule?

1 Reply

Recent Discussions

Wildcard SSL Certificate Deployment on F5 LTM

iRule resulting in too many redirects

What happens if I only enable ASM in BIG-IP Under System > Resource Provisioning

URL

Migration from i series 10200 with 1 child VCMP to r series 10900 series

Related Content

Decrypting BIG-IP Packet Captures without iRules

Decrypting BIG-IP Packet Captures Automatically

DevCentral Connects hosts Capture the Flag!

Automating Packet Captures on BIG-IP

Ultimate irule debug - Capture and investigate