Forum Discussion

amolari's avatar
amolari
Icon for Cirrus rankCirrus
Jun 17, 2015

iControlRest: enforce access to the API from BIG-IQ only

BIGIP has poor RBAC. AFAIU, BIG-IQ much better. Is there a way to allow access to BIG-IP Restful API from BIG-IQ only? This way I would have a much more controlled environment.

 

application delivery
BIG-IQ
design
iControlREST
LTM
security

1 Reply

Sort By
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Jun 24, 2015

    not from an API perspective, but if you moved non-emergency access to the management tools (gui/cli/api) to a virtual server instead of the mgmt port, you could control access to the /mgmt/tm URI to a particular source IP (ie...your BIG-IQ device(s)).