Forum Discussion
NimbostratusSupport on 2 factor authentication
We are planning to decommission the ISA servers and instead replace F5 for the reverse (inbound) proxy functionality.
Current scenario
Users from internet access the webmail applications and it reaches the Firewall and Nat happens in firewall and hit F5 load balancer and F5 will direct the traffic to ISA servers (those are pool members ) . ISA is configured for 2 factor authentication certificate and RSA and the pass the traffic to real webmail server on successful authentication
And in new solution we are planning to decommission the ISA servers and replicate its functionality on load balancer.
Kindly advice and need your support to perform the two factor authentication RSA secure id and AD authentication in F5 LTM
Big Ip version : BIG-IP 9.4.3 Build 1.4 Final
5 Replies
Arnaud_LemaireEmployee
For authenticatio features and RSA OTP you will have to use APM module.This module is only available starting TMOS 10.X (X depending on your appliance model).
Rajendran2002_1Hi Arnaud
Thank you for your quick reply.
Whether below version supports APM and also kindly confirm APM need separate license or it comes with LTM
BIG-IP 11.2.1 Build 862.0 Hotfix HF2
amolariCirrostratus
APM is an additional Software module and requires a license
- Rajendran2002_1
Thank you, whether below version supports APM
BIG-IP 11.2.1 Build 862.0 Hotfix HF2
and also can you help me to provide procedure to configure RSA and AD authentication
- Arnaud_Lemaire
Hi,
ask.f5 is the place to go for configuration guides. here is the 11.2 link for authentication : https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-aaa-auth-config-11-2-0.html
note that APM is available in 11.2 in limited mode, meaning no more that 5 users connected through APM. But it can help you testing the configuration before purchasing the module.
