Up
Previous Next

Sheriff CSM™

F5 BIG-IP APM

When you configure F5 BIG-IP Access Policy Manager (APM, formerly FirePass) to send log data to Sheriff CSM, you can use the F5 FirePass plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin:

Plugin Information

Device	Details
Vendor	F5
Device Type	VPN Concentrator
Connection Type	Syslog
Data Source Name	f5-firepass
Data Source ID	1674

Integrating BIG-IP APM

Before you configure the integration, you must have the IP Address of the Sheriff CSM Sensor (Deputy).

To configure BIG-IP APM to send log data to Sheriff CSM

• Follow the AskF5 article, Configuring the BIG-IP system to log to a remote syslog server (10.x - 13.x), to forward logs to Sheriff CSM.

  Enter the IP address of the Sheriff CSM Sensor as the remote syslog server IP address.

Plugin Enablement

For plugin enablement information, see Enable Plugins.