Hardening

Here are my two cents: I think of BigIP as having two very discrete systems: the control plane and the management plane. When most people talk about hardening, they're talking about hardening the mangement plane (that is, access via the management interface, CLI, etc.).

 

 

Changing system settings at this level is generally a Bad Idea, as it'll potentially break stuff. The best bet is to keep the management network segmented, trusted and secured, and optionally to allow only certain systems CLI or GUI access. As far as the control plane goes - your virtual servers - they're very secure, at least from the BigIP perspective.

 

 

10.1 has incorporated SE Linux, so I expect this will be come less and less of an issue on subsequent releases.

 

 

-Matt