Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

theXfactor82_91's avatar
theXfactor82_91
Icon for Nimbostratus rankNimbostratus
Aug 11, 2015

APM App Tunnel Remote Desktop Setup

I'm trying to get our old Firepass solution working on our LTM right now. Client logs in via two factor auth and is presented with a full webtop. The RDP access is setup as an App Tunnel. The client ...
BIG-IP Access Policy Manager (APM)
design
security
theXfactor82_91's avatar
theXfactor82_91
Icon for Nimbostratus rankNimbostratus
Aug 12, 2015

I believe what you suggested in the first post is what I'm looking for. I want to launch mstsc.exe and give the client the option of connecting to any PC on the network via RDP.

 

I do not have an ACL applied to the APM so I don't know why it's not working.

 

If I understand you correctly I should just have to...

 

  1. Put a dummy IP into the destination field
  2. Leave the Parameters field empty
  3. Apply ACL to APM policy to restrict access to subnet (10.10.0.0/24)

Does this sound correct? The dummy IP in the destination field is confusing to me as when I put my laptop destination IP in this field I am success at connecting to it remotely. I just want to be able to connect to all the laptops and not just mine.