Forum Discussion

antec42's avatar
antec42
Icon for Altostratus rankAltostratus
Jul 17, 2019

Change Server SSL Profile within APM Policy based on Users group membership

Hi,   We have a situation where we need to present a specific client certificate to a server on the Internet depending on a users group membership in the AD. We are using SWG for outbound Interne...
application delivery
BIG-IP Access Policy Manager (APM)
Secure Web Gateway
iaine's avatar
iaine
Icon for Nacreous rankNacreous
Jul 19, 2019

Hi

Have you tried something like this

when SERVER_CONNECTED {
	if {[ACCESS::session data get "session.ad.last.attr.memberOf"] contains "some_group_name" }{
		SSL::profile "/Common/different_ssl_profile"
	}
	
}

I'm not aware of being able to do this within the APM policy but you can look up the Variable afterwards to make a profile decision