For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ruggerfly1's avatar
Ruggerfly1
Icon for Nimbostratus rankNimbostratus
Jun 17, 2016

APM Certificate authentication - DENY for users who's cert subject does notmatch the regexp grab

Trying to restrict certificate authentication for specific users -   Certificate Subject CN=lab.username - the 'lab.' is the unique piece.   I'm using this to grab the username in a variable a...
application delivery
BIG-IP Access Policy Manager (APM)
Ruggerfly1's avatar
Ruggerfly1
Icon for Nimbostratus rankNimbostratus
Jun 19, 2016

Update - any feedback on this approach:

 

After the certificate Inspection I added an Empty box, it is using this expression: expr { [mcget {session.ssl.cert.subject}] contains "lab" }, which catches the lower case "lab" in the full username, seems to be working.

 

Has anyone used this approach?