For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David__Pasch's avatar
David__Pasch
Icon for Altostratus rankAltostratus
Sep 27, 2018

BIGIP - How to disable HTTP Basic Auth for the GUI.

Guys, I am looking for a fix to disable Basic-Auth for access to the bigip GUI. I use TACACS currently, and only have the two default local accounts. I can find a ton of info on how to remove the accounts, how to use token auth for API calls, but nothing on simply disabling it. v13 box.

 

Any advice is appreciated.

 

David

 

application delivery
BIG-IP
security

2 Replies

  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    Sep 28, 2018

    Could you explain - what do you mean by removing it? Basic auth is not used for the GUI ( except iControl ) - it uses form-based login.

     

  • David__Pasch's avatar
    David__Pasch
    Icon for Altostratus rankAltostratus
    Sep 28, 2018

    That answers my question. Thanks. The plan is to implement token based auth for iControl, at this time.

     

    I was hoping for an easy way to simply toggle it off globally.

     

    Thanks again!

     

    David