For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

EastCoast_16835's avatar
EastCoast_16835
Icon for Altostratus rankAltostratus
Aug 15, 2017

APM with ADFS + Extended Protection

Hello, I am trying to implement F5 as a load balancer for an ADFS server farm. It works well if SSL connections from clients to ADFS are tunneled thru F5 without decryption. However if I enable SSL b...
BIG-IP
BIG-IP Access Policy Manager (APM)
security
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Aug 15, 2017

Hi,

 

In our case, we are terminating SSL connections on the BIG-IP and the "ExtendedProtectionTokenCheck" is set to "none". I think It wont work otherwise !

 

Also we encounter another issue with the ADFS "protection" feature when it was enabled. Browsers other than IE, were unable to make SSO (Chrome) as described by this discussion

 

https://social.technet.microsoft.com/Forums/en-US/6948e92d-1789-480d-99c1-08ee94a522cd/adfs-3-server-2012-r2-and-chrome?forum=winserverDS

 

Regards