Forum Discussion

Deepu2017's avatar
Deepu2017
Icon for Altostratus rankAltostratus
Apr 17, 2019

DUO and F5 ASM integration

Hi All - We want to enable 2 factor authentication for our ASM devices using DUO, these do not have APM licenses enabled. I am only able to find documentation on enabling 2 factor using APM, how do i...
ASM Advanced WAF
security
Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Apr 24, 2019

When you say you want to enable 2FA for your ASM devices using DUO, do you mean that you want to use this for administrative users? If so you can use the Duo Authentication Proxy (DAP). The DAP is basicly a RADIUS server. On the DAP you can configure for example AD authentication as the first factor and DUO push or sms for the second factor. I've tested this and it works. However the response (ack) for the second factor needs to be acknowleged pretty fast, otherwise the F5 will timeout. I've not yet found out if it's possible to increase this timeout.

 

Also see: https://support.f5.com/csp/article/K17403