Forum Discussion

e_a's avatar
e_a
Icon for Nimbostratus rankNimbostratus
Jun 14, 2023

APM/SWG explicit-proxy with authentication bypass

Hello! We are setting up a small explicit Web-gateway using F5 BigIP APM and SWG. See link: https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-access-policy-manager-secure-web-gateway.html This is ...
security
Ben_Novak's avatar
Ben_Novak
Icon for Employee rankEmployee
Jun 16, 2023

What is the authentication mechanism on the back end server/app?  Once the client gets through APM, the destination server may still be asking for authentication.  

Might need to look into SSO for the back end authentication.

  • e_a's avatar
    e_a
    Icon for Nimbostratus rankNimbostratus
    Jun 19, 2023

    Hi Ben_Novak!

    Thanks for your reply.

    This is used for internet access for these devices/Services. The customer has a dns-record set as Proxy on a lot of systems they don't have any person responsible for. The systems where someone is responsible has already migrated to Check Point. Some devices have been excluded from the Authentication-process in McAfee and we want to by-pass this in our F5-solotion aswell. 

    The plan is to move the dns-record to the F5-solotion and handle any problems as they come up. But a few exclusions is already known before the migration and need to be handled.

    Hope this clears things up - let me know if I can provide any more insight to our problem!