Forum Discussion

Deepu2017's avatar
Deepu2017
Icon for Altostratus rankAltostratus
Apr 17, 2019

DUO and F5 ASM integration

Hi All - We want to enable 2 factor authentication for our ASM devices using DUO, these do not have APM licenses enabled. I am only able to find documentation on enabling 2 factor using APM, how do i do it without APM. Please help.

 

I know that we can enter password, push or password, phone while logging in and that is what we are looking for. Please let me know what needs to be done on DUO end as well.

 

ASM Advanced WAF
security
  • Niels_van_Sluis's avatar
    Niels_van_Sluis
    Icon for MVP rankMVP
    Apr 24, 2019

    When you say you want to enable 2FA for your ASM devices using DUO, do you mean that you want to use this for administrative users? If so you can use the Duo Authentication Proxy (DAP). The DAP is basicly a RADIUS server. On the DAP you can configure for example AD authentication as the first factor and DUO push or sms for the second factor. I've tested this and it works. However the response (ack) for the second factor needs to be acknowleged pretty fast, otherwise the F5 will timeout. I've not yet found out if it's possible to increase this timeout.

     

    Also see: https://support.f5.com/csp/article/K17403