Forum Discussion

christopherlloy's avatar
christopherlloy
Icon for Altostratus rankAltostratus
Oct 04, 2018

ASM IP Address used for Attack Signature Update

How do you determine the IP Address that is used from an f5 ASM for an Attack Signature update? We have ASMs that sit on 4 - 20 VLANs and have not been able to determine which IP is being used. This is required for firewall configuaration.

 

2 Replies

  • I would expect this to be the management IP address - there should be sufficient routing to enable this, it would be a good idea to have a proxy server available on the management network.

     

  • In firewall you need to allow management IP address of BigIp Units against destination "vector.brightcloud.com" and Port 443.

     

    Some firewalls do support host name otherwise you have to add IP address of "vector.brightcloud.com".