Forum Discussion

blacksan_10396's avatar
blacksan_10396
Icon for Nimbostratus rankNimbostratus
Feb 02, 2012

APM - Dynamic Terminal / Application Tunnel

Hello Everyone,

 

 

I am trying to replicate the session variable available on the Firepass on the APM/Edge v11.1. On the Firepass we can change the host name of the Remote Desktop base on session variable %session%. On the APM, there is no option to change the host name or the ACL. If there is a way with a I-Rule that will be awesome but don't know how to trigger this via APM Policy or I-Rule event. Plus I don't know how to change the settings seen in tmsh via I-Rule. I know there is a way to trigger the Terminal Service via Network Access from another trend but that is not as locked down.

 

BIG-IP Access Policy Manager (APM)
remote access
security
  • Mike_61719's avatar
    Mike_61719
    Icon for Cirrus rankCirrus
    Feb 02, 2012
    I'm just as frustrated as you are. I added a bug ID into the Beta way way back and they still haven't addressed it. At least I haven't seen it in any release notes.

     

     

    I don't know about version 11.0 but are you sure it's not listed in the session variable field and just place the session variable in the host table field? If not, this is a huge oversight and should be addressed ASAP!
  • blacksan_10396's avatar
    blacksan_10396
    Icon for Nimbostratus rankNimbostratus
    Feb 03, 2012
    It was there the whole time but the devcentral "meta-data" didn't put it on the top of the search results.

     

     

    http://devcentral.f5.com/Tutorials/TechTips/tabid/63/articleType/ArticleView/articleId/1086493/v11-RDP-Access-via-BIG-IP-APMndashPart-2.aspx

     

     

    It works like a charm.

     

    %{session.x.x.x} is allowed in the remote desktop host field.

     

    so what are the next steps for F5?

     

    update the search engine to query "dynamic terminal / RDP" to show the correct article.

     

    update the APM help manual on the BIG-IP

     

    update the APM configuration guide
  • Mike_61719's avatar
    Mike_61719
    Icon for Cirrus rankCirrus
    Feb 06, 2012
    Posted By blacksan on 02/02/2012 08:47 PM

     

    It was there the whole time but the devcentral "meta-data" didn't put it on the top of the search results.

     

     

    http://devcentral.f5.com/Tutorials/TechTips/tabid/63/articleType/ArticleView/articleId/1086493/v11-RDP-Access-via-BIG-IP-APMndashPart-2.aspx

     

     

    It works like a charm.

     

    %{session.x.x.x} is allowed in the remote desktop host field.

     

    so what are the next steps for F5?

     

    update the search engine to query "dynamic terminal / RDP" to show the correct article.

     

    update the APM help manual on the BIG-IP

     

    update the APM configuration guide

     

    Thanks for the update. I was sitting here at 10.2 and disappointed it wasn't added. Thanks for updating the thread!

     

    • Chris_Byrne_103's avatar
      Chris_Byrne_103
      Historic F5 Account
      Aug 04, 2016

      New path / same material is https://devcentral.f5.com/s/articles/v11-rdp-access-via-big-ip-apmndashpart-2