Forum Discussion

vandit_bhatia_1's avatar
vandit_bhatia_1
Icon for Nimbostratus rankNimbostratus
Jan 28, 2016

Should port 443 and 22 openfor communication between GTM and LTM. If yes then for what process it is used specifically.

we performed penetration testing on our F5 devices and found that port 443 and 22 are open on the production traffic interfaces. when checked found that the LTM devices are added on the GTM using the...
application delivery
BIG-IP DNS
LTM
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Jan 28, 2016

Hi,

 

As Mahantesh replied, the TCP 4353 must be opened to allow config and status synchronization.

 

But, bigip_add command requires SSH/SCP port opened to exchange SSL keys.

 

After this command is done, SSH port can be blocked.