For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

smilanko_261688's avatar
smilanko_261688
Icon for Cirrus rankCirrus
Jul 28, 2016

CRL vs Checking if account is disabled

When it comes to CAC authentication, is there a particular benefit in checking if certificates from the CAC were revoked using a CRL as opposed to parsing out the CN value(identifier in AD) to see if...
BIG-IP
BIG-IP Access Policy Manager (APM)
devops
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Jul 28, 2016

i agree with you, CRLs are more meant when there isn't another source to check. i mean an AD is not always involved and then CRLs are nice. but certainly the delay can be an issue.