ASM Attack Signature Updates via MGMT Interfaces

Question

Hi everyone! I need to setup the Attack Signature updates through the management interface. If i try to get the updates via the TMM interface works fine, but after create a static route to get them via mgmt interface it shows the message "Could not reach the update server. Error: No response from update server".&nbsp;
Here is the static route that i created:&nbsp;
sys management-route update_asm {
    gateway 192.168.0.254
    network 104.219.105.0/24&nbsp;
Am i missing something? Your feedback will be highly appreciated!!!&nbsp;

samstep · Answer

Are you sure the firewall is open and DNS is configured?&nbsp;
Make sure you have checked your configuration against solution SOL8217:&nbsp;
https://support.f5.com/kb/en-us/solutions/public/8000/200/sol8217.html&nbsp;
Also you need to have a route anf firewall rules for all F5 Hosted IPs needed for ASM Attack Signature Updates, which are listed here:&nbsp;
https://support.f5.com/kb/en-us/solutions/public/15000/200/sol15202.html&nbsp;
To validate that it is working try to ping callhome.f5.com first and the curl -kv https://callhome.f5.com from the CLI&nbsp;
Hope this helps,&nbsp;
Sam&nbsp;

sebastian_agui1 · Answer

Also, can i use a HTTP proxy instead an HTTPS? &nbsp;

Forum Discussion

ASM Attack Signature Updates via MGMT Interfaces

2 Replies

Recent Discussions

Help with URL Masking

Import PKCS 12 SSL to Device Certificate via API/Script or CLI on BIG-IP

F5 iRule to replace host to path

Chrome V 124+ on MacOS - Virtual Server Access Issue

F5 Rseries R2600 Tenant sizing

Related Content

Live Update- ASM attack signatures

Auditing Security Policy Updates

Application Programming Interface (API) Authentication types simplified

Are ASM Attack Signature Updates Cummulative?

Update your DevCentral user profile