For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JimW_156953's avatar
JimW_156953
Icon for Nimbostratus rankNimbostratus
Aug 06, 2014

APM Edge Client - Hiding

In a bit of quandary:

 

We have rolled out full bigip edge client for windows, which includes web client as well. Now after 1000+ users deployed - all working fine, new demand is to hide the full client and not to launch even in disconnected mode. Plan is to use IE based client only.

 

Is there a registry hack or APM policy tweak - we can do to make this happen?

 

Thanks, Jim

 

BIG-IP Access Policy Manager (APM)
deployment
microsoft
security

2 Replies

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus
    Aug 07, 2014

    Have you tried Auto-connect, may with Reuse Windows Logon Credentials or password caching?

     

    http://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-client-configuration-11-4-0/1.html

     

  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account
    Aug 07, 2014
    Could you clarify your goal? You're trying to make it so that the Edge Client is an invisible system service, or something? Like so it has no GUI that the user can interact with? If you wanted, you could make a policy that checks the user agent and disallows Edge Client so that nobody could use it, but that seems counterproductive. They'd be disallowed from Edge Client but could use IE to start up the VPN. Or, are you trying to use clientless type functionality (no VPN)?