Forum Discussion

Angelo_Turetta1's avatar
Angelo_Turetta1
Icon for Nimbostratus rankNimbostratus
Aug 18, 2017

APM how to show a remote deny page

Working on a APM+LTM policy, I have a question What if I didn't want to show the fail page if the policy ends with 'Deny'?

 

Let me explain: my application is visible after a successful login, but the desired result in case of failure is to hit a different LTM pool, which implements a simple user manual.

 

I tried to assign the pool on the 'fail' branch, but if I keep the ending defined as 'Deny' APM will always show the built-in failure page. Defining the red ending as 'Allow' realizes the right behavior, but I cannot any more detect the policy failed status in my irule.

 

Is there a way to override the 'Deny' behavior of the APM policy? iRules are fine.

 

Thanks

 

application delivery
BIG-IP Access Policy Manager (APM)
iRules
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Aug 18, 2017

    Hi,

    You can create a redirect ending to redirect denied user to an URL hosting the web page. this url can be /mydenypage

    then, create an irule like:

    when HTTP_REQUEST {
    if {[HTTP::path] equals /mydenypage} {
        ACCESS::disable
        pool mydenypool
    }
}