Forum Discussion
awan_m
Cirrostratus
CirrostratusDatagroup with address and value
Hi - want to do a check on F5 when ssl handshake - extract OU from certificate and validate it against client IP . so i created a data group with address and value Question how would i match the...
Paulius
MVP
MVPawan_m I believe the following link is a similar rule to what you're looking for.
Selective URL client cert authentication with OU check | DevCentral
To go a bit further, do you require an IP match first or an OU match first?
awan_mCirrostratus
Cirrostratusits a key pair match
ip and OU need to match as they are locked to each other
10.10.10.0/24 IPs must have Prod - else drop
20.20.20.0/24 Must have Staff - else drop
