For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Alexander_Jones's avatar
Alexander_Jones
Icon for Nimbostratus rankNimbostratus
Apr 24, 2006

auto init tunnel based on connectivity?

Is there any support in the win32client to actually force the tunnel if some criteria is true (in my case, machine is not present on internal network) to enforce policy that machine is only allowed to...
BIG-IP Access Policy Manager (APM)
remote access
security
Alexander_Jones's avatar
Alexander_Jones
Icon for Nimbostratus rankNimbostratus
Aug 29, 2007
We did this yes, but not within the f5 product api:s. Basically we coded a small app that registered with the NLA service to get updates when connectivity changes occur on the machine. Based on this and some custom logic here we trigger the app to start vpn. So this would be generic to any vpn solution really it has nothing to do with F5 only one demand and that is that you are able to start vpnclient in the way you want (this looks different in different software, some will allow a pass through auth based on a smartcard so its invisible to the user, others will pop up some sort of challenge, your mileage will vary).

 

 

/Alex