AskF5 Knowledge Base - Recent Additions and Updates

(SOL2486) TopicF5 Technical Support may require diagnostic files to help resolve technical support issues. To upload files to F5, use one of the following two methods:Uploading qkview diagnostic files to BIG-IP iHealthUploading/downloading files using dropbox.f5.comUploading qkview diagnostic files to BIG-IP iHealthIf you are running BIG-IP 10.x or later and need to provide a qkview diagnostic file to F5, the preferred way to do so is to upload the file to the BIG-IP iHealth website. BIG-IP iHealth allows

(SOL21856463)

(SOL24311131)

(SOL34224086)

(SOL03031249)

(SOL17959662)

(SOL5917) TopicSome BIG-IP application health monitors, such as the HTTP monitor, include a Receive String field. This field specifies a string for comparison with the server response. You can specify a regular expression in that field to provide some flexibility in matching an expected response from a healthy server. Health monitors that support regular expressions include TCP, HTTP, HTTPS, and User Datagram Protocol (UDP).Regular expressions provide the flexibility for identifying strings of text that a

(SOL11438) TopicFor information about creating Secure Socket Layer (SSL) Subject Alternative Name (SAN) certificates and certificate signing requests (CSRs) using the Configuration utility or the Traffic Management Shell (tmsh) in BIG-IP 11.1.x and later, refer to the following article:SOL13471: Creating SSL SAN certificates and CSRs using the Configuration utility or tmshSAN certificates or Unified Communication (UCC) certificates allow control of the subject alternative name field to secure multiple doma

(SOL14620) TopicThis article applies to the Configuration utility for BIG-IP 11.x. For information about using the Traffic Management Shell (tmsh) for BIG-IP 11.x, refer to the following articles:SOL15462: Managing SSL certificates for BIG-IP systems using the tmsh utilityYou should consider using this procedure under the following condition:You want to manage new or existing Secure Sockets Layer (SSL) certificates for BIG-IP SSL profiles using the Configuration utility.DescriptionBIG-IP software offers fe

(SOL7267) TopicIn BIG-IP versions prior to 11.0.0, there is no option in the Configuration utility to specify an IPv6 default route. The default configuration when creating network routes on the BIG-IP system is for IPv4. To specify a default route for an IPv6 address, you must specify both a destination network that uses the route, and a netmask value. Otherwise, the route will be added to the BIG-IP system configuration as an IPv4 default route pointing to an IPv6 gateway.To specify an IPv6 default rout

(SOL30403302)

(SOL11307303)

(SOL68785753)

(SOL13567) TopicYou should consider using this procedure under the following condition:You want to synchronize DNS Express zones using a Sync-Only device group.DescriptionThe DNS Express feature allows a BIG-IP system to act as an authoritative secondary DNS server by performing zone transfers and serving DNS records faster than the primary DNS servers and local BIND servers.You can configure a DNS Express zone on a BIG-IP system, and then synchronize the zones to a Sync-Only device group. This configurati

(SOL34556595) TopicYou should consider using this procedure under the following condition:You want to manage login failures for a local user account authenticated by the BIG-IP system.DescriptionWith the secure password policy, you can deny access to a user after a specified number of failed authentication attempts. You can enable this feature by specifying a value for the Maximum Login Failures setting in the secure password policy. For more information about configuring the Maximum Login Failures setting, r

Security Advisory: MySQL vulnerability CVE-2016-5633

How-To: Providing files to F5 Technical Support

Security Advisory: MySQL vulnerability CVE-2016-8289

Security Advisory: MySQL vulnerability CVE-2016-3492

Security Advisory: MySQL vulnerability CVE-2016-5627

Security Advisory: Oracle MySQL vulnerability CVE-2016-5635

Security Advisory: ImageMagick vulnerabilities CVE-2015-8897 and CVE-2016-5239

Manual: BIG-IP System: Folders Administration

Manual: BIG-IP System: iRules Concepts

Manual: BIG-IP System: Essentials

Manual: BIG-IP Digital Certificates: Administration

How-To: Using regular expressions in a health monitor Receive String

How-To: Creating SSL SAN certificates and CSRs using OpenSSL

How-To: Managing SSL certificates for BIG-IP systems using the Configuration utility

How-To: Configuring an IPv6 default route for the BIG-IP system

Security Advisory: ImageMagick vulnerabilities CVE-2015-8895 and CVE-2015-8896

Security Advisory: OpenSSL vulnerability CVE-2016-8610

Security Advisory: ImageMagick vulnerability CVE-2015-8898

How-To: Synchronizing DNS Express zones using a Sync-Only device group

How-To: Managing login failures for a local user account on the BIG-IP system