For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

eric_156978's avatar
eric_156978
Icon for Cirrus rankCirrus
Oct 30, 2015
Solved

Access Policy Not evaluating when using a VPN tunnel

Hi,   I'm having an issue with a VPN tunnel. The VPN itself is working fine, however, the problem I'm running into is when a VPN user tries to access a virtual server hosted on the same F5 they ar...
BIG-IP Access Policy Manager (APM)
deployment
security
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Oct 30, 2015

    The inside VPN tunnel traffic is automatically considered to be part of the user's already authenticated session. You can't run an APM VPN, then get another separate session to the same APM through the same tunnel.

     

    You'll have to think of another way to accomplish your use case. If you can describe it more fully, maybe we can come up with some suggestions.

     

Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Oct 30, 2015

The inside VPN tunnel traffic is automatically considered to be part of the user's already authenticated session. You can't run an APM VPN, then get another separate session to the same APM through the same tunnel.

 

You'll have to think of another way to accomplish your use case. If you can describe it more fully, maybe we can come up with some suggestions.

 

eric_156978's avatar
eric_156978
Icon for Cirrus rankCirrus
Nov 16, 2015
I got it working cleanly. The key point was that any part of the VPN access policy evaluated is available on any other browser session. Once I got that worked out, i created irules that set things up correctly based on the request type. Thanks for the tip!