For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Xpenno255's avatar
Xpenno255
Icon for Nimbostratus rankNimbostratus
Feb 13, 2020

Can APM be used to combine ACLs for a single session

Hi all,   I can't find the answer after a few hours of searching but can't believe that there's no solution to this.   Is it possible to combine multiple ACLs in a single APM session. This wo...
BIG-IP Access Policy Manager (APM)
security
Dave_W's avatar
Dave_W
Icon for Employee rankEmployee
Feb 14, 2020

Hello Spence,

 

Yes, should be able to do this with the AD Group Resource Assign. I tested this and when the user is in 2 groups with 2 different ACLs both ACLs will be assigned. You can verify this by looking at the session variable "session.assigned.acls." Keep in mind you with need and AD Query in the VPE for AD Group Resource Assign to function correctly.

 

https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-access-policy-manager-visual-policy-editor/access-policy-item-reference/about-assignment-items/about-ad-group-resource-assign.html