Is it possible to restrict access to iControl

Beats me, I don't know what that's an example of. I imagine one could reconfigure the Apache web server that runs the management interface and iControl to listen on clear-text ports as well. But our BigIPs only listen on port 443 by default.

 

 

Anyway, you could probably block any access to the BigIP self-addresses with iptables and be done with it.