For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Brian_Mayer_841's avatar
Brian_Mayer_841
Icon for Nimbostratus rankNimbostratus
Nov 06, 2007

Client authentication bypass for internal IPs

Hi,     We are getting ready to implement the LTM Advanced Client Authentication module to authenticate some test users that will access our new sites behind the F5 LTMs. That should be pretty ...
application delivery
dev
devops
iRules
Brian_Mayer_841's avatar
Brian_Mayer_841
Icon for Nimbostratus rankNimbostratus
Nov 09, 2007
Do you think the cookie route is cleaner? The method setting the TMM_AUTH variable to 0 seemed okay too...just want to know which would have the least chance of impacting the users. Is injecting cookies for authentication potentially problematic?