Hi, we've taken over the support for a Viprion 2400 that has 8 vCMPs Guests carved up on it. The guests are running LTMs and APMs. We've received a notification from the security folks asking us about the usage of the 2 user-id's that had been created specifically for the 2 factor authentication for the apps being load balanced on the vCPM Guests.
Is there a way to identify those 2 id's as we haven't been able to find them in access policies or any place else. We're also running Big-IQ, but have not found the way to search for these user-ids.
You can look in a few places; Overview>Active Sessions or Overview>Access Reports or in /var/log/apm. You will most likely need to set the APM logs to Informational to get the user ID logged.
