Forum Discussion

NetWork's avatar
NetWork
Icon for Nimbostratus rankNimbostratus
Dec 09, 2020

F5 Device Administration/configuration - Vulnerabilities

Can someone help me to understand using self-signed certificate for BIGIP LTM box falls in non-compliant as long as our device will be accessed only by network administrators?

application delivery
BIG-IP
LTM
  • Dario_Garrido's avatar
    Dario_Garrido
    Icon for MVP rankMVP
    Dec 12, 2020

    Hello NetWork.

     

    Self-signed certificates cannot be used to authenticate sites.

    Base on this, someone accesing one specific device cannot be sure that the device which is accesing belong to the person/company that user thinks it belongs.

     

    To be more precise, someone could be performing a MITM attack in that communication and you couldn't be aware of that.

     

    Regards,

    Dario.

  • Former Member's avatar
    Former Member
    Dec 14, 2020

    Thanks

      I am going to close this question as duplicative with https://devcentral.f5.com/s/feed/0D51T00007xnOrhSAE - any further clarification or conversation can happen over there. As a reminder - if Dario or Lidev helped you out please help them out (and others) by upvoting or Selecting As Best.