NimbostratusHi,
I am trying to view the logging for rules configured on our network firewall. All F5 documentation I have found ultimately points applying a profile to a VIP. We are using this as a layer 4 firewall to protect the individual nodes and not a VIP. Could someone please direct me on how to accomplish this?
EmployeeIf you are applying global rules they you need to modify the global-network logging profile to log to your intended destination. I know that we generally advise against modifying default profiles, but in this case it is the only way to log rules that are applied in a global context. Creating a child profile with global-network as the parent will not work.
Bear in mind that the AFM still requires a valid TMM listener to handle the traffic after it passes the firewall. BigIP is a default deny device and will not pass traffic unless configured to do so.
NimbostratusHi Chris,
I have seen the global-network profile. But I do not understand how to modify the destination. Is there a supporting document for me to review?
EmployeeNimbostratusNimbostratus