For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vladimir_Budilo's avatar
Vladimir_Budilo
Icon for Nimbostratus rankNimbostratus
Feb 09, 2010

Mutual Authentication

I have created an application that utilizes the F5's webservice to query and manipulate the GTM setup (enabling/disabling a pool-member, etc).     During a security review at my company, a...
dev
devops
iControl
Joe_Pruitt's avatar
Joe_Pruitt
Feb 16, 2010
The Web Service utilizes the same connection/authentication mechanism as the Web admin GUI - same management port, same authorization layer. As far as I know, we don't support client side certificate verification in the GUI so it won't likely work with iControl. I'm not saying that it can't be done, just that as far as I know, we don't support it and we haven't tested it. I'd check on ask.f5.com to see if you find any solutions around setting up the Web GUI with client cert authentication. If so, then iControl should follow the same configuration.

 

 

-Joe