For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Jun 02, 2015

2-factor authentication for mgmt

Hi,   I was reading articles and post related to implementing 2-factor authentication for access to applications served by BIG-IPs. Seems to be plenty options especially when using APM.   My qu...
application delivery
LTM
management
security
nitass_89166's avatar
nitass_89166
Icon for Noctilucent rankNoctilucent
Jun 03, 2015

No way to use iRules (or I am not aware of any)

 

not sure if it is a good idea but you can access configuration utilities via virtual server i.e. irule can be used.

 

Maybe at least there is a way to force certificate based client authentication?

 

sol13981: Restricting access to the Configuration utility using client certificates (11.x)

 

https://support.f5.com/kb/en-us/solutions/public/13000/900/sol13981

 

  • dragonflymr's avatar
    dragonflymr
    Icon for Cirrostratus rankCirrostratus
    Jun 03, 2015
    Hi, Well, I should be less lazy and use search :-), thanks for help. What do you mean by using VS for accessing GUI? Create VS that is pointing to SelfIP as pool member (on port 443)? That could be solution for GUI, but I guess there is none like that for SSH? Piotr