Forum Discussion

Vladimir_Budilo's avatar
Vladimir_Budilo
Icon for Nimbostratus rankNimbostratus
Feb 09, 2010

Mutual Authentication

I have created an application that utilizes the F5's webservice to query and manipulate the GTM setup (enabling/disabling a pool-member, etc).

 

 

During a security review at my company, a question was raised: Can F5 provide mutual authentication (so that F5 knows that the client is valid)? But this is only required for the webservice, and not the GUI. Is this possible? If so, how?

 

 

Thanks!

 

Vladimir

 

 

dev
devops
iControl
  • Joe_Pruitt's avatar
    Joe_Pruitt
    Feb 16, 2010
    The Web Service utilizes the same connection/authentication mechanism as the Web admin GUI - same management port, same authorization layer. As far as I know, we don't support client side certificate verification in the GUI so it won't likely work with iControl. I'm not saying that it can't be done, just that as far as I know, we don't support it and we haven't tested it. I'd check on ask.f5.com to see if you find any solutions around setting up the Web GUI with client cert authentication. If so, then iControl should follow the same configuration.

     

     

    -Joe