This quick start guide will help Accenture MDR customers configure F5® BIG-IP Local Traffic Manager (LTM) to send logs to the Log collection Platform (LCP).
...
Table 1-1: Port requirements for LCP communication.
Source | Destination | Port | Description |
F5 BIG-IP LTM | LCP | 514 (UDP) | Default port |
Configuring F5 BIG-IP LTM
...
Table 1-2: The F5 BIG-IP LTM event collector (3371 – Syslog) properties to be configured by MDR are shown in the table.
Property | Default Value | Description |
Protocol | UDP | The default protocol for syslog. Note: F5 LTM does not support TCP. |
IP Address | F5 BIG-IP LTM Interface IP address | Logging device IP address mentioned in the Pre-Installation Questionnaire (PIQ). Note: If the device sends logs using multiple interfaces, contact the Accenture MDR onboarding team. |
Port Number | 514 | The default port for UDP. Note: The LCP can be configured to listen on a non-standard port, please advise the MDR onboarding team if this is a requirement. |