{"id":1830,"date":"2023-01-23T15:54:24","date_gmt":"2023-01-23T12:54:24","guid":{"rendered":"https:\/\/www.netsys.com.tr\/en\/?p=1830"},"modified":"2023-01-23T15:54:24","modified_gmt":"2023-01-23T12:54:24","slug":"f5-internet-access-permissions","status":"publish","type":"post","link":"https:\/\/www.netsys.com.tr\/en\/f5-internet-access-permissions\/","title":{"rendered":"F5 Internet Access Permissions"},"content":{"rendered":"[vc_row][vc_column][vc_column_text el_class=”paraglead themeprimarydark”]In F5 BIG-IP and BIG-IQ systems, the necessary internet permissions must be given on the firewall for services that need access to the outside world, such as license activation, firmware download, automatic signature updates.
\nPermissions can be given as IP address range or hostname. It should be taken into account that IP address ranges may change.<\/p>\n

<\/strong><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Host name<\/strong><\/td>\nIP address range<\/strong>
\n(network address\/mask bits)<\/strong><\/td>\n		Service\/port<\/strong><\/td>\nService<\/strong><\/td>\n<\/tr>\n
activate.f5.com<\/td>\n104.219.104.0\/21<\/td>\nHTTPS \/ 443<\/td>\nBIG-IP license activation
\nBIG-IQ license activation
\nBIG-IP Automatic Update Check
\nBIG-IP Automatic Phone Home<\/td>\n<\/tr>\n
api.f5.com<\/td>\n104.219.104.0\/21<\/td>\nHTTPS \/ 443<\/td>\nBIG-IP Automatic Phone Home
\nUploads to BIG-IP iHealth
\nBIG-IQ license usage reporting<\/td>\n<\/tr>\n
callhome.f5.com<\/td>\n104.219.104.0\/21<\/td>\nHTTPS \/ 443<\/td>\nBIG-IP ASM attack signature updates
\nBIG-IP Automatic Update Check
\nBIG-IP FPS malware and fraud signature updates<\/td>\n<\/tr>\n
downloads.f5.com<\/td>\n104.219.104.0\/21<\/td>\nHTTPS \/ 443<\/td>\nBIG-IP ISO product and hotfix downloads
\nBIG-IP ASM attack signature updates<\/td>\n<\/tr>\n
ihealth-api.f5.com<\/td>\n104.219.104.0\/21<\/td>\nHTTPS \/ 443<\/td>\nUploads to BIG-IP iHealth<\/td>\n<\/tr>\n
login.f5.com<\/td>\n104.219.104.0\/21
\n107.162.185.48<\/td>\n		HTTPS \/ 443<\/td>\nF5 Technical Support portal login including BIG-IP iHealth<\/td>\n<\/tr>\n
supportfiles.f5.com<\/td>\n104.219.104.154
\n104.219.105.154
\n104.219.106.154
\n104.219.107.154
\n104.219.110.154
\n104.219.111.154<\/td>\n		HTTP \/ 80
\nHTTPS \/ 443
\nSSH \/ 22<\/td>\n		Uploads to F5 Technical Support<\/td>\n<\/tr>\n
securefiles.f5.com<\/td>\n104.219.104.0\/21
\n107.162.232.131<\/td>\n		HTTPS \/ 443
\nSSH \/ 22<\/td>\n		Uploads to F5 Technical Support<\/td>\n<\/tr>\n
product.apis.f5.com<\/td>\n35.199.173.84<\/td>\nHTTPS \/ 443<\/td>\nBIG-IQ usage data collection<\/td>\n<\/tr>\n
downloads-ire-f5.s3.eu-
\nwest-1.amazonaws.com<\/td>\n		<\/td>\n<\/td>\nF5 related products downloads from AWS Ireland<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/div><\/strong><\/p>\n

IP Address Intelligence Service Access Permissions<\/strong><\/p>\n

If the IP Address Intelligence Service (IPI) service is used, internet permissions must be given on the firewall in order for the iprepd<\/strong> service to receive database updates automatically.<\/p>\n

\n\n\n\n\n\n\n\n
BIG-IP version<\/strong><\/td>\nIPI Subscription service update server<\/strong><\/td>\n<\/tr>\n
BIG-IP 15.1.6, 16.1.3, 17.0.0, and later<\/td>\napi.bcti.brightcloud.com (default)
\nlocaldb-ip-daily.brightcloud.com (base file)
\nlocaldb-ip-rtu.brightcloud.com (updates)
\nlocaldb-ipv6-daily.brightcloud.com (IPv6 updates)<\/td>\n<\/tr>\n
BIG-IP 15.1.4 and later for BIG-IP 15.1.x branch<\/td>\napi.bcti.brightcloud.com (default)
\nlocaldb-ip-daily.brightcloud.com (base file)
\nlocaldb-ip-rtu.brightcloud.com (updates)<\/td>\n<\/tr>\n
BIG-IP 13.1.0 and later (excluding BIG-IP 15.1.4.x)<\/td>\nvector2.brightcloud.com<\/td>\n<\/tr>\n
BIG-IP versions prior to BIG-IP 13.1.0<\/td>\nvector.brightcloud.com<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

If it is desired to be allowed as an IP, the IP address of the services can be resolved with the nslookup<\/strong> command. It should be noted that IP addresses may change.<\/p>\n

<\/em>nslookup <IPI Subscription service update server><\/div><\/div>[\/vc_column_text][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"

[vc_row][vc_column][vc_column_text el_class=”paraglead themeprimarydark”]In F5 BIG-IP and BIG-IQ systems, the necessary internet permissions must be given on the firewall for services that need access to the outside world, such as license activation, firmware download, automatic signature updates. Permissions can be given as IP address range or hostname. It should be taken into account that IP address…<\/p>\n","protected":false},"author":1,"featured_media":1831,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"acf":[],"_links":{"self":[{"href":"https:\/\/www.netsys.com.tr\/en\/wp-json\/wp\/v2\/posts\/1830"}],"collection":[{"href":"https:\/\/www.netsys.com.tr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.netsys.com.tr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.netsys.com.tr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.netsys.com.tr\/en\/wp-json\/wp\/v2\/comments?post=1830"}],"version-history":[{"count":1,"href":"https:\/\/www.netsys.com.tr\/en\/wp-json\/wp\/v2\/posts\/1830\/revisions"}],"predecessor-version":[{"id":1832,"href":"https:\/\/www.netsys.com.tr\/en\/wp-json\/wp\/v2\/posts\/1830\/revisions\/1832"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.netsys.com.tr\/en\/wp-json\/wp\/v2\/media\/1831"}],"wp:attachment":[{"href":"https:\/\/www.netsys.com.tr\/en\/wp-json\/wp\/v2\/media?parent=1830"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.netsys.com.tr\/en\/wp-json\/wp\/v2\/categories?post=1830"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.netsys.com.tr\/en\/wp-json\/wp\/v2\/tags?post=1830"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}