Forum Discussion

Tom_Schaefer's avatar
Tom_Schaefer
Icon for Cirrus rankCirrus
Jun 10, 2020

Supported way to use MFA to BIG-IP GUI and shell

I have read on DevCentral various mechanisms to implement 2FA (MFA) using APM and even some packages to change the PAM and implement this on the SSH shell.   Are there any supported mechanisms t...
BIG-IP Access Policy Manager (APM)
security
TMSH
cjunior's avatar
cjunior
Icon for Nacreous rankNacreous

Hi Tom,

Curious to me, I pray for the security, but I never thought about MFA on GUI since BIG-IP is out-of-band traffic management and the access should be in a private and secure network.

 

Kind regards

Tom_Schaefer's avatar
Tom_Schaefer
Icon for Cirrus rankCirrus
Jun 10, 2020

Our security requirements do not differentiate where the device resides in the network. If a sysadmin/netadmin accesses the system, it requires MFA to login.

  • liborj's avatar
    liborj
    Icon for Nimbostratus rankNimbostratus
    Nov 29, 2023

    we have the same requirements. Even though access to our BigIPs are on a protected and access restricted network we still need to implement MFA.