Forum Discussion

ThomasP's avatar
ThomasP
Icon for Altostratus rankAltostratus
Jan 16, 2024

Cisco Duo 2fa on F5 Big ip cluster with multiple partitions

Hello, We're currently deploying Cisco Duo as our 2-factor solution. Our F5 cluster has 3 partitions in addition to the common partition (which is quite empty and unused at the moment) : - interna...
BIG-IP Access Policy Manager (APM)
security
ThomasP's avatar
ThomasP
Icon for Altostratus rankAltostratus
Jan 16, 2024

We just read again the howto for the Radius configuration and eventually noticed that a radius configuration is still possible.

The iframe-based traditional Duo Prompt in F5 BIG-IP RADIUS configurations will reach end of life on March 30, 2024. Customers must migrate to a supported Duo Single Sign-On application with Universal Prompt or a RADIUS configuration without the iframe before that date for continued access
  • Michael_Saleem's avatar
    Michael_Saleem
    Icon for MVP rankMVP
    Jan 16, 2024

    Yep. So it looks like they are still supporting RADIUS Auto Push (as opposed to Duo Prompt w/ iFrame). If you wanted to go down this route, you would still need to setup a separate Duo Proxy server in your environment and edit the authproxy.cfg file as per the below article with a [radius_server_auto] heading:

    F5 BIG-IP APM with Duo RADIUS Auto Push | Duo Security