For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_Glasgow_1's avatar
David_Glasgow_1
Icon for Nimbostratus rankNimbostratus
May 27, 2015

ASP.NET Forms based Login

Hi all   We are having an issue securing an web application secured using ASP.NET Forms based authentication.   If we publish the internal site via a Virtual Server everything works fine, howev...
BIG-IP Access Policy Manager (APM)
microsoft
security
David_Glasgow_1's avatar
David_Glasgow_1
Icon for Nimbostratus rankNimbostratus
May 27, 2015

Hi Michael

 

Im not currently using the Forms Profile. My concept here is that you can not access the IIS webserver, until you have successfully authenticated against the F5.

 

The approach we have taken here is:

 

We have an Access Policy | AAA Servers | HTTP configured as:

 

 

And an access Policy that looks like this:

 

 

The HTTP Auth in this Access Policy reference the AAA Server in the previous image.

 

I'm not sure how I would go about replacing the HTTP Auth with an SSO object? Any assistance you can provide would be greatly appreciated.

 

Thanks David