For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

soymanue's avatar
soymanue
Icon for Nimbostratus rankNimbostratus
Oct 23, 2012

Edge Client Internal Certificate Authentication

Hello   Is it possible to make the BIG-IP work as an Internal CA to issue user certificates that we would use for user authentication with APM and Edge client?    
BIG-IP Access Policy Manager (APM)
remote access
security
Seth_Cooper's avatar
Seth_Cooper
Icon for Employee rankEmployee
Feb 06, 2013
Hi Manuel,

 

 

The F5 does support checking for machine certifcates. There is a "Machine Cert Auth" action in the VPE.

 

 

Do you just want to use the machine cert to authenticate a user to the VPN? If so just don't put in a logon page on the policy and do a check for the machine certificate, if it is valid give them the network access resource if it isn't valid then deny the session.

 

 

Seth