Forum Discussion

Duncan_124777's avatar
Duncan_124777
Icon for Nimbostratus rankNimbostratus
Apr 14, 2013

Authenticate corporate Iphone with APM

Hello,   i study the possibility to authenticate users with Iphones who access to internet through internal proxy.   Users are connected with their Iphones by a wifi connection on the enterpris...
BIG-IP Access Policy Manager (APM)
remote access
security
Duncan_124777's avatar
Duncan_124777
Icon for Nimbostratus rankNimbostratus
Apr 22, 2013
Hello,

 

Thanks for this first answer :-).

 

Proxy is explicit.

 

If i well understand, i have to implement SSL client profile on the VS of the proxy in order that the F5 will be able to inspect the client certificate and obtain the identity of the user: First the F5 (VS) present its certificate and next the client (Iphone) present its certificate to the F5.

 

But i don't understand about to use a forward SSL proxy on the BIG-IP. Why use this fonctionality, the F5 link explain basically how it worksand how to configure it, but i don't really understand its utility in this context ? Can you explain a litle more please ?

 

I have an other question if the client send a first request which is an https request, how will it work ? Is BIG-IP will be able to authentify the user and to send the kerberos token to the proxy ?

 

Thnaks for your help