Manual Chapter :
Discover and import IPS services
Applies To:
Show Versions
BIG-IQ Centralized Management
- 8.4.0
Discover and import IPS services
You must ensure that you have the proper licenses for
AFM and IPS on the managed BIG-IP device. You must have access to the BIG-IQ Advanced
Shell. If you do not have access, contact F5 support at support.f5.com.
To manage
IPS (Intrusion Prevention System)
within BIG-IQ CM (console node), you must first
change the default settings that block initial discovery for the host BIG-IP device.
This requires setting
protocolInspectionDisabled
to false
in the file /var/config/rest/config/restjavad.properties.json
. Once you have enabled IPS discovery, you need to re-discover and re-import
AFM services to the appropriate BIG-IP devices.If you have a standby console nodes, complete steps 2-3 of the following process for the standby node.
- Log into the BIG-IQ Advanced Shell (console node) using ssh.
- In therestjavad.properties.jsonfile, locate the"afm"property.
- In the"afm"property, locate the"ips"property.If the"ips"property does not exist, you can add this property using the example provided in step 4. Ensure that the "protocolInspectionDisabled" property is included within"ips".
- Ensure the value for "protocolInspectionDisabled" isfalse.The following example shows a possible configuration of the... "afm" : { ... "ips" : { "protocolInspectionDisabled": false } ... }, ...
- Restart the restjavad process using the following command:bigstart restart restjavad
- In the BIG-IQ UI, re-discover and re-import AFM services, for each licensed device by going to .To perform a bulk re-discovery and re-import for all services, on multiple devices, seeRe-discover and re-import services in bulk.
- Select the device name.
- On the left, clickSERVICES.
- In the Network Security (AFM) area, click theRe-discoverorDiscoverbutton.
- In the Network Security (AFM) area click theRe-importorDiscoverbutton.
After the services re-import/import, the BIG-IP Devices inventory list includes the AFM service (see ). You can now manage this BIG-IP device's IPS services from
BIG-IQ.
