For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JHDUKE's avatar
JHDUKE
Icon for Altostratus rankAltostratus
Mar 27, 2024

Bypass Access Policy for EWS based on the user account

I'm looking to bypass APM for /EWS/* calls but only for a specific user. All other users will be denied access.    Assuming this will need to be done with an iRule similar to the 'NTLM Logger' wher...
devops
security
Lucas_Thompson's avatar
Lucas_Thompson
Icon for Employee rankEmployee
Apr 03, 2024

APM has a few different ways you could accomplish this. Probably the best way is to use the built-in ACL functionality to apply different ACLs to your different users. Since APM already has an ACL function, and it already knows the username, you just have to define the ACLs and then make your access policy assign those ACLs to the right users.