For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shiraz's avatar
Shiraz
Icon for Altostratus rankAltostratus
Dec 06, 2015

Bypass APM for specific User Agent

Dears, We want to bypass the Access Policy based on User Agent. Virtual Server has a default Pool and the Virtual Policy Editor is as follows. Start >> Logon >> AD...
BIG-IP Access Policy Manager (APM)
security
Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Dec 07, 2015

In order to get irules to fire on each request when APM is enabled on the vip, you have to use this irule command:

 

https://devcentral.f5.com/wiki/iRules.ACCESS__restrict_irule_events.ashx

 

Add more logging into your irule so you can understand what exactly is going on. Here's a good post that covers this topic:

 

https://devcentral.f5.com/articles/-the101-irules-101-logging-amp-comments

 

Also, most Microsoft Office clients prefer to use NTLM authentication, so the flows have to be kept keyed to the same virtual. BIG-IP has some specific settings for that. A good starting point may be this article:

 

https://support.f5.com/kb/en-us/solutions/public/10000/400/sol10477.html