For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

fwendlandt's avatar
fwendlandt
Icon for Nimbostratus rankNimbostratus
May 17, 2022

APM - How to configure logging of snat addresses for network access and app tunnels

Hello everyone, we are using BIG-IP Access Policy Manager to enable administrative access to systems via App Tunnel and Network Access resources. For security reasons, we need to be able to map req...
BIG-IP Access Policy Manager (APM)
log
logging
nat
security
snat
lnxgeek's avatar
lnxgeek
Icon for MVP rankMVP
Sep 28, 2023

If you turn up logging of the access profile you will be able to log the user and which lease ip it gets assigned and the actions performed. I have only used debug, but it migth be possible to go lower than that. All the lines are prefixed with the session id, so you should be able to correlate on that to identify a user.

You can also look here: https://community.f5.com/t5/technical-forum/userid-to-leasepool-ip-mapping/td-p/60728

for inspiration regarding the actual logging with an iRule.