Is it possible to restrict access to iControl

There is no official way to restrict access to iControl. It's basically the same system as the management GUI and there is no way to restrict access to that either. With that said, there are a few options. You could:

 

 

1. Restrict access to usernames/passwords with admin access

 

2. Physically rename the iControlPortal.cgi in the file system

 

 

1 is preferrable, 2 most likely will violate support contracts since you are mucking with the filesystem. In fact, by doing 2, you will disable config sync between the devices as that and other services rely on iControl for communication.

 

 

I'm wondering why you are asking this question. Are you looking at restricting access to the Management GUI as well? If the end user has access to the iControl interfaces, they will be able to do the same things within the Management GUI as both are run on the Management interface.

 

 

-Joe