mike_55639
Nimbostratus
Jul 21, 2008Hardening
Are there any documents available on system hardening for the bigip? Does anyone have any experience in this area?
Thanks in advance.
-m
Changing system settings at this level is generally a Bad Idea, as it'll potentially break stuff. The best bet is to keep the management network segmented, trusted and secured, and optionally to allow only certain systems CLI or GUI access. As far as the control plane goes - your virtual servers - they're very secure, at least from the BigIP perspective.
10.1 has incorporated SE Linux, so I expect this will be come less and less of an issue on subsequent releases.
-Matt