Ensure External Users’ role is set to ‘No Access’ Details To set a default role for remote users Authentication and authorization for remote users are handled by third party...
Ensure redundant remote authentication servers are configured Details Having multiple points of authentication is important in the event that the primary remote authentication source goes down. Rationale:...
Ensure that ‘Fallback to local’ option is disabled for Remote Authentication Settings Details To prevent the system from checking local DB for remote users authentication Rationale: Impact: Though the impact might be...
Ensure that Remote Radius is used for Authentication Only Details To specify the authentication mechanism that F5 systems use for external (remote) users Rationale: Uncontrolled and illegitimate authentication could...