Forum Discussion

e_a's avatar
e_a
Icon for Nimbostratus rankNimbostratus
Jun 14, 2023

APM/SWG explicit-proxy with authentication bypass

Hello! We are setting up a small explicit Web-gateway using F5 BigIP APM and SWG. See link: https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-access-policy-manager-secure-web-gateway.html This is ...
security
e_a's avatar
e_a
Icon for Nimbostratus rankNimbostratus
Jun 14, 2023

Thanks for the reply. This kind of SSL-bypass is working fine for us.

We need to bypass the NTLM authentication though. The profile is found under this menu:

Access ›› Profiles / Policies : Access Profiles (Per-Session Policies)

  • whisperer's avatar
    whisperer
    Icon for MVP rankMVP
    Jun 14, 2023

    Checking the test session log, do you actually see the Allow branch of Client IP Address for Bypass being hit? Just want to rule out the issue is more complex than just a logic issue, or failure to match correct IP address.

    • e_a's avatar
      e_a
      Icon for Nimbostratus rankNimbostratus
      Jun 14, 2023

      Yes - we can confirm that this branch is being hit.