Check F5 reputation for a given IP

Feature request: check an IP reputation and Geo info through API (must have) and UI (nice to have)

Issue: Customers are configuring huge Service Policies (10K+ entries) for IPs that are covered by F5 IP reputation lists (webroot, threat intelligence) or/and ASNs.

Solution: the customer's SOAR could include to test if an IP is already detected as a threat (GET IP reputation categories and ASN number/name for an IP /32) and then decide to update the Service Policy or IP prefix liste

Benefit for F5: remove useless Service Policy computing

  • Alexis DA COSTA
  • Jul 15 2025
  • Attach files