For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JMCalalang's avatar
JMCalalang
Icon for Employee rankEmployee
Jan 25, 2012

APM client check for IOS Profile

I was curious if anyone has found a way to have the APM query an IOS device for a client profile (an MDM profile), I've looked through what looks like all the session variables and dont see anything, but thought maybe someone had figured this out anyway.

 

 

If i knew the variable to grab i think i could modify the mcget from a random client side check to grab the name of the profile i want to look for, just not sure what it would be called in the session =/

 

 

OR

 

 

If someone has a writeup on how to have 2 certs in one clientssl profile, one for initial handshake and one for clientside cert check.

 

 

Cheers,

 

 

J. Calalang

 

 

 

BIG-IP Access Policy Manager (APM)
remote access
security

1 Reply

  • JMCalalang's avatar
    JMCalalang
    Icon for Employee rankEmployee
    Jan 25, 2012
    Here is an example of what the client knows about the IOS device:

     

     

    session.agent_info.unique_id:

     

     

    Indicates the unique ID of the mobile device.

     

    Sample string: %session.agent_info.unique_id%= '8ccaf965e51e3077'

     

     

    im looking for like:

     

     

    session.agent_info.PROFILE:

     

     

    Indicates the unique ID of the mobile device.

     

    Sample string: %session.agent_info.PROFILE%= 'PROFILE_NAME'

     

     

    this would do something like verify our MDM profile is installed on the IOS device if it was or wasnt i would then create the rules to allow / deny or redirect.

     

     

    Does anyone know a way to get the FULL list of what the client knows about the host? debug mode/maintence logging ect..