Open firewall for Dynamic IP?

Question

I'm new to F5/BigIP ...&nbsp;
How to create a packet filter or otherwise open the firewall to a dynamic IP, like for a site on CloudFlare which changes unpredictably?&nbsp;
AFAIK the packetfilter rule Expressions only allow a static IP&nbsp;
(and is there a way to add comments to the expressions?)&nbsp;

smithy · Answer

From TMOS version 12.0 onwards you can use FQDN in AFM rules. Assuming you have an AFM license: https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-12-0-0/4.html&nbsp;
You can also use FQDN nodes:https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-12-1-0/25.html&nbsp;

Forum Discussion

Open firewall for Dynamic IP?

1 Reply

Recent Discussions

CONNECTION IS LOST DUE TO SELF IP IS DELIVERED

ASM instance creation

Can iRule mask the payload content on event logs of security

Disacard SSL::cert mode to ignore when default SSLClient profile is set to request or require

F5Access | MacOS Sonoma

Related Content

AppWorld 2024 Call For Speakers open

F5 AFM/Edge Firewall and the difference between Edge Firewalls and Next-generation Firewalls (NGFW)

Integrating SSL Orchestrator with CheckPoint Firewall VM-Explicit Proxy

F5 XC vk8s workload with Open Source Nginx

Integrating SSL Orchestrator with CheckPoint Firewall VM-Bridge Mode (L2)