201 · Question #141
A BIG-IP Administrator discovers malicious brute-force attempts to access the BIG-IP device on the management interface via SSH. The BIG-IP Administrator needs to restrict SSH access to the management
The correct answer is D. System > Platform. To restrict SSH access to the BIG-IP management interface, an administrator should configure the allowed IP addresses within the System > Platform settings. This section provides options for managing management access restrictions and other platform-level security settings.
Question
A BIG-IP Administrator discovers malicious brute-force attempts to access the BIG-IP device on the management interface via SSH. The BIG-IP Administrator needs to restrict SSH access to the management interface. Where should this be accomplished?
Options
- ASystem > Configuration
- BNetwork > Interfaces
- CNetwork > Self IPs
- DSystem > Platform
How the community answered
(41 responses)- B5% (2)
- C2% (1)
- D93% (38)
Why each option
To restrict SSH access to the BIG-IP management interface, an administrator should configure the allowed IP addresses within the System > Platform settings. This section provides options for managing management access restrictions and other platform-level security settings.
System > Configuration is a general area and does not directly provide the specific granular controls for management interface access restrictions like SSH.
Network > Interfaces is used for configuring physical network interfaces, not for restricting management plane access services like SSH.
Network > Self IPs configures IP addresses on VLANs for data plane traffic and virtual server communication, not for securing the management interface.
The System > Platform menu in BIG-IP provides specific settings for managing the management interface, including allowed IP addresses for services like SSH and HTTPS. By configuring the "Management Port" settings within this section, an administrator can specify a list of IP addresses or networks that are permitted to access the device's management interface, thereby restricting unauthorized SSH attempts.
Concept tested: BIG-IP management interface access control
Source: https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-system-management/managing-access-to-the-management-interface.html
Topics
Community Discussion
No community discussion yet for this question.