Security::ProfileIPIntelligence

Introduced : BIG-IP_v11.4.0
The ProfileIPIntelligence interface enables you to manipulate an IP Intelligence profile. Use this interface to configure IP Intelligence threat types and the corresponding actions that you want be taken, for connections with source IPs that are flagged as malicious in the IP Reputation Database.

Methods

Method Description Introduced
create Creates the specified IP Intelligence profiles. BIG-IP_v11.4.0
delete_all_profiles Deletes all IP Intelligence profiles. BIG-IP_v11.4.0
delete_profile Deletes the specified IP Intelligence profiles. BIG-IP_v11.4.0
get_all_statistics Gets the statistics for all the IP Intelligence profiles. BIG-IP_v11.4.0
get_botnets_action Gets the action for the Botnets IP Intelligence threat for the specified profiles. BIG-IP_v11.4.0
get_default_profile Gets the names of the default profiles from which the specified profiles will derive default values for its attributes. BIG-IP_v11.4.0
get_denial_of_service_action Gets the action for the Denial of Service IP Intelligence threat for the specified profiles. BIG-IP_v11.4.0
get_description Gets the descriptions for the specified profiles. BIG-IP_v11.4.0
get_infected_sources_action Gets the action for the Infected Sources IP Intelligence threat for the specified profiles. BIG-IP_v11.4.0
get_list Gets a list of all IP Intelligence profiles. BIG-IP_v11.4.0
get_phishing_action Gets the action for the Phishing IP Intelligence threat for the specified profiles. BIG-IP_v11.4.0
get_proxy_action Gets the action for the Proxy IP Intelligence threat for the specified profiles. BIG-IP_v11.4.0
get_scanners_action Gets the action for the Scanners IP Intelligence threat for the specified profiles. BIG-IP_v11.4.0
get_spam_sources_action Gets the action for the Spam Sources IP Intelligence threat for the specified profiles. BIG-IP_v11.4.0
get_statistics Gets the statistics for the specified IP Intelligence profiles. BIG-IP_v11.4.0
get_statistics_by_virtual Gets the statistics for the specified profiles, by virtual server. BIG-IP_v11.4.0
get_version Gets the version information for this interface. BIG-IP_v11.4.0
get_web_attacks_action Gets the action for the Web Attacks IP Intelligence threat for the specified profiles. BIG-IP_v11.4.0
get_windows_exploits_action Gets the action for the Windows Exploits IP Intelligence threat for the specified profiles. BIG-IP_v11.4.0
is_base_profile Determines whether the specified IP Intelligence profiles are base profiles. A base profile sits at the base of the profile&aposs inheritance tree, supplying the defaults for every profile derived from it. (See also is_system_profile). BIG-IP_v11.4.0
is_system_profile Determines whether the specified IP Intelligence profiles are system profiles. A system profile is a profile pre-configured on the system, ready for use. Non-system profiles are profiles created or modified by a user. Note that if a system profile is modified, it is no longer considered a system profile. BIG-IP_v11.4.0
reset_statistics Resets the statistics for the specified IP Intelligence profiles. BIG-IP_v11.4.0
reset_statistics_by_virtual Resets the statistics for the specified profiles, for specified virtual servers. BIG-IP_v11.4.0
set_botnets_action Sets the action for the Botnets IP Intelligence threat for the specified profiles. The action will be taken for the IP addresses of computers that are infected with malicious software and are controlled as a group, and are now part of a botnet. Hackers can exploit botnets to send spam messages, launch various attacks, or cause target systems to behave in other unpredictable ways. BIG-IP_v11.4.0
set_default_profile Sets the names of the default profiles from which the specified profiles will derive default values for its attributes. BIG-IP_v11.4.0
set_denial_of_service_action Sets the action for the Denial of Service IP Intelligence threat for the specified profiles. The action will be taken for the IP addresses that have launched Denial of Service (DoS) attacks. These attacks are usually requests for legitimate services, but occur at such a fast rate that targeted systems cannot respond and become bogged down or unable to service legitimate clients. BIG-IP_v11.4.0
set_description Sets the description for the specified profiles. This is an arbitrary field which can be used for any purpose. BIG-IP_v11.4.0
set_infected_sources_action Sets the action for the Infected Sources IP Intelligence threat for the specified profiles. The action will be taken for the IP addresses that issue HTTP requests with a low reputation index score, or are known malware sites. BIG-IP_v11.4.0
set_phishing_action Sets the action for the Phishing IP Intelligence threat for the specified profiles. The action will be taken for the IP addresses that are associated with phishing web sites that masquerade as legitimate web sites. BIG-IP_v11.4.0
set_proxy_action Sets the action for the Proxy IP Intelligence threat for the specified profiles. The action will be taken for the IP addresses that are associated with web proxies that shield the originator&aposs IP address (such as anonymous proxies). BIG-IP_v11.4.0
set_scanners_action Sets the action for the Scanners IP Intelligence threat for the specified profiles. The action will be taken for the IP addresses that have been observed to perform port scans or network scans, typically to identify vulnerabilities for later exploits. BIG-IP_v11.4.0
set_spam_sources_action Sets the action for the Spam Sources IP Intelligence threat for the specified profiles. The action will be taken for the IP addresses that have sent spam. BIG-IP_v11.4.0
set_web_attacks_action Sets the action for the Web Attacks IP Intelligence threat for the specified profiles. The action will be taken for the IP addresses that have launched web attacks of various forms. BIG-IP_v11.4.0
set_windows_exploits_action Sets the action for the Windows Exploits IP Intelligence threat for the specified profiles. The action will be taken for the IP addresses that have exercised various exploits against Windows resources using browser, program, downloaded file, script, or operating system vulnerabilities. BIG-IP_v11.4.0

Structures

Structure

Description

ProfileAction

A struct that describes Action settings and their default status.

ProfileIPIntelligenceStatisticEntry

A struct that describes statistics for a particular IPIntelligence profile.

ProfileIPIntelligenceStatistics

A struct that describes profile statistics and timestamp.


Enumerations

Enumeration Description
Action Specifies the action that will be taken if there is a match in the IP Reputation database for a type of threat, based on the source IP address of the connection.

Exceptions

Exception Description

Constants

Constant Type Value Description

Aliases

Alias Type Description
ProfileActionSequence ProfileAction [] A sequence of ProfileAction types.
ProfileActionSequenceSequence ProfileAction [] [] A sequence of a sequence of Profile Actions.
ProfileIPIntelligenceStatisticEntrySequence ProfileIPIntelligenceStatisticEntry [] A sequence of ProfileIPIntelligence statistics.

See Also

Warning

The links to the sample code below are remnants of the old DevCentral wiki and will result in a 404 error. For best results, please copy the link text and search the codeshare directly on DevCentral.

Sample Code


The BIG-IP API Reference documentation contains community-contributed content. F5 does not monitor or control community code contributions. We make no guarantees or warranties regarding the available code, and it may contain errors, defects, bugs, inaccuracies, or security vulnerabilities. Your access to and use of any code available in the BIG-IP API reference guides is solely at your own risk.