For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

elav76_146879's avatar
elav76_146879
Icon for Nimbostratus rankNimbostratus
Mar 11, 2014

APM and Citrix secure gateway

Hi,

 

I've an LTM and doing APM with http profil.

 

All work fine for authentication, but If I want to use an ica application ssl embedded by the CSG it break because it wasn't http.

 

This is work if I want to make working citrix application in the portal :

 

when CLIENTSSL_HANDSHAKE {

 

SSL::collect 4

 

HTTP::disable

 

}

 

when CLIENTSSL_DATA {

 

if { ([SSL::payload 4] equals "GET" )} {

 

HTTP::enable

 

} else {

 

HTTP::disable

 

}

 

}

 

But I lose APM first ? How can I force my VS or my irules to first use the APM and then disable http profil?

 

Best regards Emmanuel

 

application delivery
BIG-IP Access Policy Manager (APM)
design
devops
iRules
security
virtualization

1 Reply

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Mar 11, 2014

    Not sure if this will help, but the following worked for me on a recent project:

    when CLIENTSSL_HANDSHAKE {
    SSL::collect
}
when CLIENTSSL_DATA {
     disable the HTTP profile for ICA/CGP traffic
    if { [SSL::payload] contains "CGP/" } {
        HTTP::disable
    }
    SSL::release
}