For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

antec42's avatar
antec42
Icon for Altostratus rankAltostratus
Jul 17, 2019

Change Server SSL Profile within APM Policy based on Users group membership

Hi,   We have a situation where we need to present a specific client certificate to a server on the Internet depending on a users group membership in the AD. We are using SWG for outbound Interne...
application delivery
BIG-IP Access Policy Manager (APM)
Secure Web Gateway
iaine's avatar
iaine
Icon for Nacreous rankNacreous
Jul 19, 2019

Hi

Have you tried something like this

when SERVER_CONNECTED {
	if {[ACCESS::session data get "session.ad.last.attr.memberOf"] contains "some_group_name" }{
		SSL::profile "/Common/different_ssl_profile"
	}
	
}

I'm not aware of being able to do this within the APM policy but you can look up the Variable afterwards to make a profile decision