Forum Discussion

amolari's avatar
amolari
Icon for Cirrus rankCirrus
Jun 17, 2015

iControlRest: enforce access to the API from BIG-IQ only

BIGIP has poor RBAC. AFAIU, BIG-IQ much better. Is there a way to allow access to BIG-IP Restful API from BIG-IQ only? This way I would have a much more controlled environment.  
application delivery
BIG-IQ
design
iControlREST
LTM
security
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Jun 24, 2015

not from an API perspective, but if you moved non-emergency access to the management tools (gui/cli/api) to a virtual server instead of the mgmt port, you could control access to the /mgmt/tm URI to a particular source IP (ie...your BIG-IQ device(s)).