For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Carl_20170911's avatar
Carl_20170911
Icon for Nimbostratus rankNimbostratus
Jan 18, 2020

Restrict access to virtual server by IP address and client certificate authentication

I am currently implementing F5 LTM. I want to restrict access to virtual server by IP address and  client certificate authentication.   If the client's IP is not in the address list, then the cl...
application delivery
BIG-IP
LTM
nolipineda's avatar
nolipineda
Icon for Altostratus rankAltostratus
Nov 30, 2020

Is it possible to extend this solution to restrict access to specific client certificates?

boneyard's avatar
boneyard
Icon for MVP rankMVP
Dec 13, 2020

with iRules everything is possible :)

 

if your client certificates contain a certain CN your can request that and compare it with a list of allowed ones.

 

there should be enough examples around how to do this.