For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Renato1's avatar
Renato1
Icon for Nimbostratus rankNimbostratus
Jun 28, 2019

Force TACACS log on

Hi all   I've enabled Tacacs on the F5 BIG-IP version 12.1 and all is working, but people can still login as root account if they know the username and password. With Cisco you can have a local ...
BIG-IP
security
Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Jun 28, 2019

Hello Renato.

 

admin/root account are the only users available to use local DB authentication (when TACACS/RADIUS/... is enabled)

 

You can avoid this situation performing this procedure:

https://support.f5.com/csp/article/K15632

 

KR,

Dario.