For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nickr_109107's avatar
nickr_109107
Icon for Nimbostratus rankNimbostratus
Jun 10, 2014

APM SSO for a downstream forward proxy

Does anyone know a way to make APM SSO work when presented with 407 pages?   I have a requirement to put APM in front of a 3rd party forward proxy server with APM. The proxy only supports au...
BIG-IP Access Policy Manager (APM)
design
security
Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Jun 11, 2014

Create a virtual, attach an iRule, map 407 responses to 401 responses. Point APM at the virtual, point the virtual at the proxy.

 

The iRule to map responses would be something similar to this

 

If there are protocol/payload differences it would be up to you to manage them in the iRule. I am not suggesting this would be simple. Click your heels together and check the RFC behaviour in both cases.