Forum Discussion

Jerome_CARRIER's avatar
Jerome_CARRIER
Icon for Nimbostratus rankNimbostratus
Nov 22, 2020

APM VPE - Group of computers

Hello,

 

I deployed a policy for our VPN via Edge Client. The client check several parameters on the computer and currently, to be able to connect the VPN, the user must be member of a specific Active Directory group. But, is-it possible to change that and not check if user is member of an AD group but check if the computer is member of a specific group ?

 

BR

BIG-IP
BIG-IP Access Policy Manager (APM)
security
  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Nov 23, 2020

    there isn't an easy way, you will have to look up your computername in LDAP, this earlier question shows how to handle that, mainly the sections at the bottom

     

    https://devcentral.f5.com/s/question/0D51T00006i7WjL/ldap-query-for-machine-account

     

    give it a go, if you get stuck let me know, i can give it a try also.