Forum Discussion
amolari
Cirrostratus
CirrostratusiControlRest: enforce access to the API from BIG-IQ only
BIGIP has poor RBAC. AFAIU, BIG-IQ much better. Is there a way to allow access to BIG-IP Restful API from BIG-IQ only? This way I would have a much more controlled environment.
1 Reply
- JRahm
Admin
not from an API perspective, but if you moved non-emergency access to the management tools (gui/cli/api) to a virtual server instead of the mgmt port, you could control access to the /mgmt/tm URI to a particular source IP (ie...your BIG-IQ device(s)).
