For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Techgeeeg_28888's avatar
Techgeeeg_28888
Icon for Nimbostratus rankNimbostratus
Nov 07, 2017

Limiting the no. of User Session for GUI Access

Dear Experts,   I have a requirement on the F5-LTM units where I have to limit the no. of sessions for the users who can access the Administrative WEB GUI. How can I achieve this.   Regards, ...
AFM
application delivery
BIG-IP
security
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Nov 07, 2017

Strictly theoretically speaking...if you prevent 443 on mgmt interface and self IPs and force all connections to an clientssl-enabled vip with an iRule like...

when HTTP_REQUEST {
  node 127.0.0.1 80
}

You could add logic to limit sessions. But that requires you open up management access on data paths which is a no-no in some security deployments.

The better more supported solution is to use the built-in tmsh command to do so:

modify sys httpd max-clients

where is the number of max-clients you desire (default: 10)