Forum Discussion

Lee_Sutcliffe_5's avatar
Lee_Sutcliffe_5
Icon for Nimbostratus rankNimbostratus
Jun 23, 2017

APM Deny ACL Blocking Portal Access Resources

I hoping this is an easy one.. I have added a deny all ACL to an access policy, ensuring that it is last in the ACL order. However it is blocking portal access resources - with configured resource items.

 

My understanding is that providing the user defined deny ACL is processed after the ACEs that make up the portal access resources, then access to these resources should be permitted.

 

Am I missing something??

 

Thanks MP

 

acl
application delivery
BIG-IP Access Policy Manager (APM)
  • Walter_Kacynski's avatar
    Walter_Kacynski
    Icon for Cirrostratus rankCirrostratus
    Dec 13, 2018

    Not sure that this helps, but if you are using Horizon View desktops with the HTML5 client, you also need to create a manual ACL to allow for 

    /view-client/* /portal* /d/*
    that precedes a default deny

  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Jun 26, 2017

    Can you post the ACL and relevant configuration, including the block page?

     

    By the default, everything is allowed until you put an ACL to block. As you said you have the ACL as last, it should allow anything that is listed before.