101 · Question #143
Which of the following protocol protections is not provided by the Protocol Security Manager?
The correct answer is B. SSH. BIG-IP Protocol Security Manager provides deep protocol inspection for FTP, HTTP, SMTP, and several other protocols, but SSH is not among the supported protocols.
Question
Which of the following protocol protections is not provided by the Protocol Security Manager?
Options
- AFTP
- BSSH
- CHTTP
- DSMTP
How the community answered
(50 responses)- A2% (1)
- B92% (46)
- C2% (1)
- D4% (2)
Why each option
BIG-IP Protocol Security Manager provides deep protocol inspection for FTP, HTTP, SMTP, and several other protocols, but SSH is not among the supported protocols.
FTP protocol security is explicitly supported by Protocol Security Manager, providing inspection of FTP commands and responses.
SSH traffic is encrypted at the transport layer, making deep protocol inspection by an application-layer security module infeasible without acting as an SSH proxy. Protocol Security Manager focuses on cleartext or application-layer-inspectable protocols and does not include an SSH compliance engine.
HTTP is a core focus of Protocol Security Manager, covering header validation, method enforcement, and RFC compliance checks.
SMTP protocol protection is supported, allowing enforcement of SMTP command sequences and detection of protocol abuse.
Concept tested: Protocol Security Manager supported protocol coverage
Source: https://techdocs.f5.com/en-us/bigip-asm-implementations/protocol-security-manager-overview.html
Topics
Community Discussion
No community discussion yet for this question.