Using Cisco DUO as the MFA for LTM Logins

[Joven]

Hi DevC,

We currently have LTMs and GTMs which are authenticating via Cisco ISE. We wanted to use Cisco DUO to enable Multi-factor Authentication.

Do we have a way to do this without APM?

We specifically wanted to set a separate timeout for logins. (for example, I logged in and was not able to press accept on my DUO mobile, the cli/gui should close/disconnect automatically.) Do F5 BIG-IP have a separate timeout config aside from global-settings idle-timeout and sshd inactivity-timeout?


See diagram below

[Leslie_Hubertus]

Hi @Joven, I see nobody has replied yet, so I'm going to see if I can find a colleague who can answer this for you. 

[AubreyKingF5]

Here is a sample video on youtube:
https://www.youtube.com/watch?v=0IMcX58XHQ8