Pinewood Security Bulletin – End of support F5 TMOS 14.1

Beschrijving

Dit bulletin heeft betrekking op de BIG-IP- en VIPRION-producten van F5 Networks.

Op 31 december 2023 bereikt de TMOS 14.1.x versie de ‘End-of-Technical-Support’ (EoTS) en ‘End-of-Software-Development’ (EoSD) fase. Dit geldt voor alle BIG-IP hardware appliances, de BIG-IP Virtual Editions (BIG-IP VE) en voor het VIPRION-platform.

Dit betekent dat:

• EoTS: F5 no longer provides technical support services, such as troubleshooting or configuration advice.
• EoSD: F5 no longer develops maintenance releases for a software product or software product version. F5 does not release any software product fixes, including fixes for bugs or CVEs, using maintenance or EHF releases.

Ondersteuning vanuit Pinewood voor EoTS- en EoSD-producten vindt plaats op basis van best effort voor klanten met een support contract.

Klanten met een Managed Security Services contract zijn inmiddels benaderd door Pinewood.

Advies

De meest recente versie van TMOS is 17.1. Deze versie is relatief nieuw en Pinewood is nog terughoudend met het inzetten van deze versie voor productie-omgevingen.

Deze versie heeft support vanuit F5 tot 31 maart 2027.

Pinewood adviseert te upgraden naar de meest recente versie van TMOS 16.1 (momenteel 16.1.4.1).

Deze versie heeft support vanuit F5 tot 31 juli 2025.

Voor BIG-IP VE geldt dat deze licenties geldig zijn voor een bepaalde reeks van TMOS-versies. Met name de wat oudere ‘V13’-licenties kunnen ingezet worden tot maximaal TMOS 15.1. In dat geval adviseert Pinewood te upgraden naar de meest recente versie van TMOS 15.1 (momenteel 15.1.10.2).

Deze versie heeft support vanuit F5 tot 31 december 2014.

In alle gevallen geldt dat een geldig F5 support contact nodig is.

Meer informatie

• K5903: BIG-IP software support policy (https://my.f5.com/manage/s/article/K5903)
• K8986: F5 product support policies (https://my.f5.com/manage/s/article/K8986)

Managed Security Services (MSS) klanten

Als u een Pinewood Managed Security Services contract heeft is er geen actie nodig. Pinewood neemt de benodigde maatregelen om uw omgeving te beschermen tegen deze kwetsbaarheden.

Vragen

Voor vragen over deze security bulletin kunt u contact opnemen met de Pinewood Servicedesk. De servicedesk is bereikbaar via +31 15 251 36 33 en via support@pinewood.nl.

===== ENGLISH =====

Description

This bulletin concerns the F5 Network products: BIG-IP hardware appliances, BIG-IP Virtual Editions (VE), and the VIPRION chassis hardware.

TMOS 14.1.x will reach both ‘End-of-Technical-Support’ (EoTS) and ‘End-of-Software-Development’ (EoSD) on December 31, 2023. This applies to all BIG-IP hardware appliances, the BIG-IP Virtual Editions (BIG-IP VE) and the VIPRION chassis-based blades.

This implies that:

• EoTS: F5 no longer provides technical support services, such as troubleshooting or configuration advice.
• EoSD: F5 no longer develops maintenance releases for a software product or software product version. F5 does not release any software product fixes, including fixes for bugs or CVEs, using maintenance or EHF releases.

Support by Pinewood for customers with a valid support contact, regarding EoTS and EoSD products, can only be supplied on a best effort basis.

Pinewood has already informed customers with a Managed Security Services contract.

Recommendations

TMOS 17.1 is the most recent version of TMOS. However, this version is relatively new. Pinewood is still hesitant to use this version for production environments.

Support for TMOS 17.1 ends on March 31, 2027.

Pinewood recommends upgrading to the most recent version of TMOS 16.1 (currently: 16.1.4.1).

Support for TMOS 16.1 ends on July 31, 2025.

BIG-IP VE licenses are only valid for a fixed range of TMOS versions. In particular the older ‘V13’ VE licenses support TMOS 15.1 as the highest version. In this case Pinewood recommends upgrading to the most recent version of TMOS 15.1 (currently: 15.1.10.2).

Support for TMOS 15.1 ends on December 31, 2024.

A valid F5 support contract is required to obtain support from F5 Networks.

More information

• K5903: BIG-IP software support policy (https://my.f5.com/manage/s/article/K5903)
• K8986: F5 product support policies (https://my.f5.com/manage/s/article/K8986)

Managed Security Services (MSS) customers

If you have a Pinewood Managed Security Services contract, no action is required. Pinewood takes the necessary measures to protect your environment from these vulnerabilities.

Questions

For questions about this security bulletin, please contact the Pinewood Service desk. The service desk can be contacted at +31 15 251 36 33 and via support@pinewood.nl.