AltocumulusI've just setup an VS, listering on a specific IPv4 address and HTTPS. Two nodes in the pool. Simple. However, when I scan the IP from outside, nmap also lists tcp port 21 and 554 (rtsp). There is no ftp or rtsp profile connected to the vs.
Why? :)
CumulonimbusIf you create a virtual server on port 443, only packets matching port 443 will mach this VS. a virtual server listen on a specific port, all other ports are not handled by this virtual server.
when you create a virtual server, it create another object named virtual address. Are there multiple virtual servers sharing the same virtual address?
Do you have a firewall in front of BigIP?
if yes, is it configured to allow these ports? is it working as application proxy for these services?
Can you try the same map scan from a host connected on the same subnet as the virtual server address?
CirrostratusIt was nmap false positive. I've found a few threads describing similar scenarios, like this one: https://hackerific.net/2016/03/20/false-positive-tcp-ports/