Forum Discussion
NimbostratusAPM with missing User-Agent header
Is it normal that the Access Policy does not execute when there is no User-Agent header? I am trying to configure a Video Unit to connect in through a Big-IP however I see only the following in the APM log:
e1c55625: User-Agent header is absent or empty
e1c55625: New session from client IP x.x.x.x at VIP y.y.y.y Listener xxx_virtual (Reputation=Unknown)
e1c55625: Session deleted due to user inactivity.
e1c55625: Session statistics - bytes in: 0, bytes out: 0
The device is configured to connect to an IP address and a specific URI. I am trying to bring this in through APM so that I can use an Access Policy to lock down the device by source IP and/or certificate and/or URI, etc... The problem is that the Access Policy does not kick in at all whereas it works fine for anyone using a browser, Edge Client, etc. The only difference I see is the lack of User-Agent header.
Is there a workaround for this?
APM 12.1.2
David_GillCirrus
The solution was to set clientless mode - problem solved.
when HTTP_REQUEST { HTTP::header insert "clientless-mode" 1 }
MARI_MUNEESWARAe1c55625: New session from client IP x.x.x.x at VIP y.y.y.y Listener xxx_virtual (Reputation=Unknown)
From the above event, I have a doubt.
What is meant by Client IP & VIP ?
Client IP -> Destination IP && VIP -> Source IP
Please clarify my doubt.
Thanks in advance.
- boneyard
MVP
better to ask a new question then jump on an old one.
Client IP is the IP address of the client that connects to the BIG-IP, the VIP IP address is the virtual server on BIG-IP.
