OS/Software version does not match requirement-f5-all
Vendor: f5
OS: all
Description:
Indeni can verify that the OS/software version installed is a specific one.
Remediation Steps:
Install the OS/software version required.
How does this work?
This script uses the F5 iControl REST API to retrieve the version of the OS.
Why is this important?
Capture the device operating system version.
Without Indeni how would you find this?
An administrator could extract this data by logging in to the device, entering TMSH and issuing the command “show sys version”.
f5-rest-mgmt-tm-sys-version
name: f5-rest-mgmt-tm-sys-version
description: Determine end of software support
type: monitoring
monitoring_interval: 60 minutes
requires:
vendor: f5
product: load-balancer
rest-api: 'true'
comments:
software-eos-date:
why: |
Ensuring the software being used is always within the vendor's list of supported versions is critical. Otherwise, during a critical issue, the vendor may decline to provide technical support. F5 Networks posts the list of supported software on their website (https://support.f5.com/csp/article/K5903). indeni tracks that list and updates this script to match.
how: |
This script uses the F5 iControl REST API to retrieve the current software version (the equivalent of running "show sys version" in TMSH) and based on the software version and the F5 Networks provided information at https://support.f5.com/csp/article/K5903 the correct end of support date is used.
can-with-snmp: false
can-with-syslog: false
os-name:
why: |
Capture the device operating system name.
how: |
This script uses the F5 iControl REST API to retrieve the name of the OS.
can-with-snmp: true
can-with-syslog: false
os-version:
why: |
Capture the device operating system version.
how: |
This script uses the F5 iControl REST API to retrieve the version of the OS.
can-with-snmp: true
can-with-syslog: false
vendor:
why: |
Capture the device vendor name.
how: |
This script set the vendor value to F5.
can-with-snmp: true
can-with-syslog: false
steps:
- run:
type: HTTP
command: /mgmt/tm/sys/version?$select=Version
parse:
type: JSON
file: rest-mgmt-tm-sys-version.parser.1.json.yaml
crossvendor_compliance_check_os_version
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/templatebased/crossvendor/compliance/crossvendor_compliance_check_os_version.scala