Original Publication Date: 06/05/2018
This release note documents version 6.0.0 of BIG-IQ Centralized Management.
There is no upgrade path from previous versions of BIG-IQ to version 6.0.0.
Auto-scaling in a VMware cloud environment
You can now securely manage traffic to applications in a VMware cloud environment, specifying the parameters in a service scaling group to dynamically deploy and delete BIG-IP devices as needed. BIG-IQ manages the BIG-IP devices that are load balancing to the BIG-IP VE devices in the cloud, as well as to the BIG-IP devices' application servers.
Auto-scaling in an AWS environment
You can now securely manage traffic to applications in a VMware cloud environment, specifying the parameters in a service scaling group to dynamically deploy and delete BIG-IP devices as needed. You can manage the BIG-IP VE devices from a BIG-IQ system on-premises, or in the cloud. You have the option to use an F5 AWS Marketplace license, or your own BIG-IP license.
BIG-IQ VE deployment in MS Azure
You can now deploy a BIG-IQ VE in a MS Azure cloud environment.
BIG-IQ now provides an overview of all managed applications with the option for a more detailed view of each application. Both the overview and detailed views provide information about the application's performance, Web Application Security status, and network statistics.
You can now enable enhanced analytics to view detailed application data in real-time, which allows you to isolate traffic characteristics that are affecting your application's performance and security status.Real-time notifications for monitored devices and applications
You can now receive real time alerts and events for BIG-IP devices and their connected applications. These notifications are integrated into the BIG-IQ UI charts and allow you to pinpoint activities that are currently affecting your application.Enhanced HTTP and Web Application Security visibility for all applications
You can use the HTTP and Web Application Security Dashboards to monitor all applications managed by BIG-IQ Centralized Management. These dashboards allow you to compare applications, pool members, and other aspects of traffic to your applications. In addition, the enhanced view includes real time events and alerts within the charts, and enhanced analytics data.
Added object and management support for DNS features
Creating, reading, updating, and deleting DNS GSLB objects, and listeners is now supported from the BIG-IQ user interface and the API.Visibility into managed service scaling groups
An automatically scalable environment of BIG-IP VE devices can be defined to provide services to a set of applications. System administrators of BIG-IQ Centralized Management can monitor performance data for these BIG-IP VE devices.Enhanced DNS visibility & configuration
BIG-IQ provides the ability to configure and have an enhanced view into DNS traffic, which now includes both peak traffic values and average traffic values over a selected period of time.
Security policies and profiles available in applications
You can now add security policies and profiles to applications, including Web Application Security policies, Network Security firewall policies, DoS profiles, and logging profiles.
Automatically deploy policy learning
You can now enable automatic deployment of policy learning using Web Application Security.
Enhanced AFM Management
Manage cookie protection
You can now manage cookie protection for BIG-IP devices using Web Application Security.
Monitoring dashboard for Web Application Security statistics
You can review Web Application Security policy statistics using a graphical dashboard.
Manage DataSafe profiles
You can now manage DataSafe profiles using Fraud Protection Security.
Enhanced support for NAT firewalls
You can now use the enhanced NAT firewall support in Network Security.
Subscriber support in firewall rules
You can now add subscriber IDs and groups to firewall rules in Network Security for BIG-IP devices that support them.
Firewall testing using packet flow reports
You can now create and view packet flow reports to test firewall configurations in Network Security.
Support for multiple BIG-IP devices with packet tester reports
You can now select multiple BIG-IP devices when generating packet tester reports in Network Security.
Renaming of firewall objects supported
You can now rename firewall objects, such as firewall policies in Network Security.
Enhanced support for DoS profiles, device DoS configurations, and scrubber profiles
You can now manage additional features of DoS profiles, device DoS configurations, and scrubber profiles that are found in BIG-IP version 13.1, such as new vectors, stress-based mitigation, DNS dynamic signatures, and VLAN support in scrubber profiles.
Copying device DoS configurations
You can now copy device DoS configurations from one BIG-IP device to multiple BIG-IP devices with the same version.
Viewing logs for DoS and firewall events in the user interface
You can now configure and view logging of DoS and firewall events, and for DoS events, see that information in a graphical format.
To properly display, the BIG-IQ system requires that your screen resolution is set to 1280x1024 or higher.
BIG-IQ version 6.0.0 supports the following browsers and versions:
Known Issue ID Number 722458: Chrome 67 is unsupported for BIG-IQ version 6.0.0. Chrome 67 will crash if you use it to try to view or modify an Application Services configuration (such as adding a pool or virtual server) or view or modify an Access Policy configuration. To work around this issue, use a supported browser: Chrome versions 65.x or 66.x, Firefox 59.x or 60.x, Microsoft Edge, or Microsoft Internet Explorer 11.x.
K34133507: BIG-IQ Centralized Management compatibility matrix provides a summary of version compatibility for specific features between the BIG-IQ system and BIG-IP releases.
This version of BIG-IQ Centralized Management is compatible only with BIG-IP version 18.104.22.168.
For updated information about troubleshooting specific use cases, go to: https://github.com/F5Networks/f5-aws-cloudformation/tree/master/supported/solutions/autoscale.
|Planning and Implementing an F5 BIG-IQ Centralized Management Deployment||Plan deployment, license, and set up the BIG-IQ system in your network.|
|F5 BIG-IQ Centralized Management: Core Concepts||Find out more about the concepts about the core functionality included with BIG-IQ Centralized Management.|
|F5 BIG-IQ Centralized Management DCD Sizing Guide||Determine the resources that are required to handle the data generated by the BIG-IP® devices you manage. Requirements vary according to the type and amount of data you generate.|
|F5 BIG-IQ Centralized Management: Authentication, Roles, and User Management||
|F5 BIG-IQ Centralized Management: Monitoring and Reports||
|F5 BIG-IQ Centralized Management: Device||
|F5 BIG-IQ Local Traffic & Network Implementations||Manage:
|F5 BIG-IQ Centralized Management: Security||Manage:
|F5 BIG-IQ Centralized Management: Access||
|F5 BIG-IQ Centralized Management: Fraud Protection Service||Set up, manage, and monitor alerts for fraud protection.|
|F5 BIG-IQ Centralized Management Use Case: Provide Role-Based User Access to an Application||Give role-based user access to a SharePoint application.|
|F5 BIG-IQ Centralized Management: Auto-Scale in a VMware Cloud||Start auto-scaling BIG-IP VE devices in a VMware cloud to manage applications.|
|F5 BIG-IQ Centralized Management: Auto-Scale in a AWS Cloud||Start auto-scaling BIG-IP VE devices in an AWS cloud to manage applications.|
|BIG-IQ Centralized Management: Monitoring and Managing Application Services||Monitor the health and statistics for your application services.|
This release note contains known issues found only in this release. It does not contain any known issues found in previous releases that are not yet fixed.
Fixes included in this release are for known issues found in previous releases.
For information about fixes and known issues for past releases, refer to the version-specific release notes.
|Phone - North America:||1-888-882-7535 or (206) 272-6500|
|Phone - Outside North America, Universal Toll-Free:||+800 11 ASK 4 F5 or (800 11275 435)|
|Fax:||See Regional Support for your area.|
For additional information, please visit http://www.f5.com.
You can find additional support resources and technical documentation through a variety of sources.
Free self-service tools give you 24x7 access to a wealth of knowledge and technical support. Whether it is providing quick answers to questions, training your staff, or handling entire implementations from design to deployment, F5 services teams are ready to ensure that you get the most from your F5 technology.
AskF5 is your storehouse for thousands of knowledgebase articles that help you manage your F5 products more effectively. Whether you want to browse periodically to research a solution, or you need the most recent news about your F5 products, AskF5 is your source.
The F5 DevCentral community helps you get more from F5 products and technologies. You can connect with user groups, learn about the latest F5 tools, and discuss F5 products and technology.
To subscribe, click AskF5 Publication Preference Center, enter your email address, select the publications you want, and click the Submit button. You will receive a confirmation email. You can unsubscribe at any time by clicking the Unsubscribe link at the bottom of the email, or on the AskF5 Publication Preference Center screen.