F5 BIG-IP ve BIG-IQ sistemlerinde lisans aktivasyon, firmware indirme, otomatik imza güncellemeleri gibi dış dünyaya erişmesi gereken servisler için, gerekli internet izinlerinin firewall'da verilmesi gerekir.
İzinler IP adres range veya hostname olarak verilebilir. IP adres range'lerinin değişebileceği göz önünde bulundurulmalıdır.
Host name
IP address range
(network address/mask bits)Service/port
Service
activate.f5.com
107.162.235.62
HTTPS / 443
BIG-IP license activation
BIG-IQ license activation
BIG-IP Automatic Update Check
BIG-IP Automatic Phone Home
api.f5.com
104.219.104.0/21
HTTPS / 443
BIG-IP Automatic Phone Home
Uploads to BIG-IP iHealth
BIG-IQ license usage reporting
callhome.f5.com
104.219.104.0/21
HTTPS / 443
BIG-IP ASM attack signature updates
BIG-IP Automatic Update Check
BIG-IP FPS malware and fraud signature updates
ihealth-api.f5.com
ihealth2-api.f5.com107.162.135.238
HTTPS / 443
Uploads to BIG-IP iHealth
securefiles.f5.com
107.162.232.131
HTTPS / 443
SSH / 22Uploads to F5 Technical Support
product.apis.f5.com
35.199.173.84
HTTPS / 443
BIG-IQ usage data collection
downloads-ire-f5.s3.eu-
west-1.amazonaws.com
F5 related products downloads from AWS Ireland
IP Address Intelligence Service Erişim İzinleri
IP Address Intelligence Service(IPI) hizmeti kullanılıyorsa, iprepd servisinin database güncellemelerini otomatik alabilmesi için, internet izinlerinin firewall'da verilmesi gerekir.
| BIG-IP version | IPI Subscription service update server |
| BIG-IP 15.1.6, 16.1.3, 17.0.0, and later | api.bcti.brightcloud.com (default) localdb-ip-daily.brightcloud.com (base file) localdb-ip-rtu.brightcloud.com (updates) localdb-ipv6-daily.brightcloud.com (IPv6 updates) |
| BIG-IP 15.1.4 and later for BIG-IP 15.1.x branch | api.bcti.brightcloud.com (default) localdb-ip-daily.brightcloud.com (base file) localdb-ip-rtu.brightcloud.com (updates) |
| BIG-IP 13.1.0 and later (excluding BIG-IP 15.1.4.x) | vector2.brightcloud.com |
| BIG-IP versions prior to BIG-IP 13.1.0 | vector.brightcloud.com |
IP olarak izin verilmek istenirse nslookup komutu ile servislerin IP adresi çözülebilir. IP adreslerinin değişebileceği göz önünde bulundurulmalıdır.
F5 Certified! Solutions Expert, Security
F5 Certified! Solutions Expert, Cloud
F5 DevCentral MVP 2021-2022-2023
This Post Has 0 Comments