For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gilles_from_Lux's avatar
Gilles_from_Lux
Icon for Nimbostratus rankNimbostratus
Aug 11, 2016

Activesync APM Client Certificate authentication - Basic authentication password prompts

Hi,   we are trying to implement a new MDM solution.   We configured Kerberos Constraint Delegation on F5 APM module and use the client certificate to extract from "UPN" the username and domai...
application delivery
BIG-IP Access Policy Manager (APM)
iRules
Ernesto_Mayol_2's avatar
Ernesto_Mayol_2
Icon for Nimbostratus rankNimbostratus
Nov 06, 2016

Hi Gilles,

 

Have you been able to resolve the password prompt issues with the above modifications to the iRule?

 

Did you try to use the Exchange 2013 iApp and get it to work with the Exchange Profile that the iApp creates. I have a similar problem and based on some reading it looks like the _sys_APM_activesync iRule is kept for backward compatibility, but is no longer recommended. The F5 recommended way to go for ActiveSync and other Exchange services (e.i. OWA, AutoDiscover, etc) is to attach an exchange profile to the Access Policy. Exchange profile is configured under Access Policy -> Application Access -> Microsoft Exchange. When doing it this way however I am forced to configure a password on the AirWatch ActiveSync profile that is deployed to iOS devices. If no pwd is entered in the profile users get prompted.4

 

Thanks

 

The-messenger's avatar
The-messenger
Icon for Cirrostratus rankCirrostratus
Sep 13, 2017

Bump on this. Have you, anyone else, been able to resolve. I'm also working on client cert auth for ActiveSync, getting the certificate from AD, via AirWatch. I haven't read clear information on how to edit the activesync irule for this.

 

Don't you need clientlessmode set to 1?