For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Don_Ryles_52501's avatar
Don_Ryles_52501
Icon for Nimbostratus rankNimbostratus
Mar 10, 2010
Yes, you're right if I use http://myurl/admin then it does go to the standard admin login screen. Hmm...!

 

 

The URL that I use here is enabled for both user and admin access and so if I want to login for user functions then when I use my standard user credentials. If I use the inbuilt adminsitrator credentials at that same login screen then it takes me to the admin console view.

 

 

As you say it does still expose the FirePass infrmation if somebody is creative enough to put the /admin on the end of the URL.

 

 

How about not allowing any admin access from an externally accessible IP address and rely on having a separate IPSec VPN access to get to the management screen through the private management IP address?

 

 

Regards,

 

Kevin