For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

NiHo_202842's avatar
NiHo_202842
Icon for Cirrostratus rankCirrostratus
Jul 03, 2015

Cannot setup Per-App-VPN with Airwatch

Hello,

 

We are trying to setup a per-app-vpn for safari via Airwatch. I configured a VS, enabled SOCKS (java/vdi support), setup APM to show an AD authentication portal and set a connectivity profile. The virtual server has a pool with the target node defined.

 

When trying to log in using the F5 EDGE client, we can put in our AD authentications (web logon disbled) but we always receive "Unable to retrieve network access configuration".

 

Has anyone here set this up before? Suggestions are welcome. Documentation is reaaally minimal.

 

We read the following tutorial.

 

There is only one other topic with this error.

 

Regards

 

availability
BIG-IP Access Policy Manager (APM)
cloud
security
TMOS

2 Replies

  • Matt_Dierick's avatar
    Matt_Dierick
    Icon for Employee rankEmployee
    Jul 03, 2015

    Have a look here : https://devcentral.f5.com/articles/per-app-vpn-airwatch-et-f5-bigip-apm-13032 Watch the video.

     

    For Per-App VPN, you don't have to start VPN manually from EDGE client. VPN starts automatically when you start the app wrapped by Airwatch with the F5 VPN profile inside.

     

    I think you misunderstand Per-APP usage. Per-APP VPN is a tunnel, so you can't use Pool in your VS. When tunnel is up, App will use Per-App VPN to join interval ressources.

     

    You have to :

     

    • Set a connectivity profile
    • Set a Network Access Profile with a Lease Pool IP
    • Set a APM policy with Logon page > AD auth > Ressource Assign
    • Assign webtop and Network access in your Ressource Assign
    • Assign everything below in you VS

    Hope this help.

     

    Matt