Manual Chapter : Example: Create an SSH virtual server with SSH proxy security

Applies To:

  • BIG-IP AFM

    17.5.1, 17.5.0, 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.6, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0

Example: Create an SSH virtual server with SSH proxy security

When you enable protocol security for an HTTP virtual server, the system scans any incoming HTTP traffic for vulnerabilities before the traffic reaches the HTTP servers.

  1. On the Main tab, click Local Traffic > Virtual Servers.

    The Virtual Server List screen opens.

  2. Click Create.

    The New Virtual Server screen opens.

  3. In the Name field, type ssh_root.

  4. In the Destination Address/Mask field, type the IP address in CIDR format.

    For example, 10.1.1.20.

  5. In the Service Port field, type 22 or select SSH from the list.

  6. From the SSH Proxy Profile list, select ssh_no_scp_terminate_rexec.

  7. For the Default Pool setting, either select an existing pool from the list, or click the Create (+) button and create a new pool.

    The pool you create or select should contain your backend SSH server.

  8. Click Finished.

The SSH virtual server appears in the Virtual Servers list.