F5 BIG-IP ve BIG-IQ sistemlerinde lisans aktivasyon, firmware indirme, otomatik imza güncellemeleri gibi dış dünyaya erişmesi gereken servisler için, gerekli internet izinlerinin firewall'da verilmesi gerekir.
İzinler IP adres range veya hostname olarak verilebilir. IP adres range'lerinin değişebileceği göz önünde bulundurulmalıdır.
Host name | IP address range (network address/mask bits) |
Service/port | Service |
activate.f5.com | 107.162.235.62 | HTTPS / 443 | BIG-IP license activation BIG-IQ license activation BIG-IP Automatic Update Check BIG-IP Automatic Phone Home |
api.f5.com | 104.219.104.0/21 | HTTPS / 443 | BIG-IP Automatic Phone Home Uploads to BIG-IP iHealth BIG-IQ license usage reporting |
callhome.f5.com | 104.219.104.0/21 | HTTPS / 443 | BIG-IP ASM attack signature updates BIG-IP Automatic Update Check BIG-IP FPS malware and fraud signature updates |
ihealth-api.f5.com ihealth2-api.f5.com |
107.162.135.238 | HTTPS / 443 | Uploads to BIG-IP iHealth |
securefiles.f5.com | 107.162.232.131 | HTTPS / 443 SSH / 22 |
Uploads to F5 Technical Support |
product.apis.f5.com | 35.199.173.84 | HTTPS / 443 | BIG-IQ usage data collection |
downloads-ire-f5.s3.eu- west-1.amazonaws.com |
F5 related products downloads from AWS Ireland |
IP Address Intelligence Service Erişim İzinleri
IP Address Intelligence Service(IPI) hizmeti kullanılıyorsa, iprepd servisinin database güncellemelerini otomatik alabilmesi için, internet izinlerinin firewall'da verilmesi gerekir.
BIG-IP version | IPI Subscription service update server |
BIG-IP 15.1.6, 16.1.3, 17.0.0, and later | api.bcti.brightcloud.com (default) localdb-ip-daily.brightcloud.com (base file) localdb-ip-rtu.brightcloud.com (updates) localdb-ipv6-daily.brightcloud.com (IPv6 updates) |
BIG-IP 15.1.4 and later for BIG-IP 15.1.x branch | api.bcti.brightcloud.com (default) localdb-ip-daily.brightcloud.com (base file) localdb-ip-rtu.brightcloud.com (updates) |
BIG-IP 13.1.0 and later (excluding BIG-IP 15.1.4.x) | vector2.brightcloud.com |
BIG-IP versions prior to BIG-IP 13.1.0 | vector.brightcloud.com |
IP olarak izin verilmek istenirse nslookup komutu ile servislerin IP adresi çözülebilir. IP adreslerinin değişebileceği göz önünde bulundurulmalıdır.
F5 Certified! Solutions Expert, Security
F5 Certified! Solutions Expert, Cloud
F5 DevCentral MVP 2021-2022-2023
This Post Has 0 Comments