For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JG's avatar
JG
Icon for Cumulonimbus rankCumulonimbus
Oct 16, 2015

Citrix XenApp with APM: How to set SSLProxyHost?

APM (re-)writes the launch.ica file, and within it, sets SSLProxyHost to be the name of the virtual server.

 

I have a weird, and challenging, case in which I need to set SSLProxyHost to be a different server. However, this does not seem to be manually configurable.

 

I tried an irule, but the HTTP_RESPONSE event does not capture the response for this file.

 

Any help is appreciated.

 

application delivery
availability
BIG-IP Access Policy Manager (APM)
deployment
devops
iRules
LTM
security

2 Replies

  • Andy_McGrath's avatar
    Andy_McGrath
    Icon for Cumulonimbus rankCumulonimbus
    Oct 18, 2015

    Not sure on the detail but would expect you need to use HTTP_RESPONSE_DATA event to capture the ica file and manipulate it. Useing HTTP::collect and HTTP::payload might help you.

     

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Nov 03, 2015

    I have got the solution from F5 support, and it turned out that the "remote desktop" was automatically configured to use the virtual server as the proxy, and we needed to customise this config:

    Step 1:

Access Policy  ››  Application Access : Remote Desktops : Remote Desktops List  ››  "name_of_my_remote_desktop"

Step 2:

In the field "Custom Parameters",  add:

    ProxyType=Auto

.