Forum Discussion

ppltam_183867's avatar
ppltam_183867
Icon for Cirrus rankCirrus
Sep 04, 2018

F5 Access client for IOS v3.0.x

We have used latest F5 Access Client for IOS v3.0.1 to logon to our F5 APM vpn gateway. We are using a simple redirection function and associate with our entry point Virtual Server as follows:

 

when CLIENT_ACCEPTED { ACCESS::restrict_irule_events disable } when HTTP_REQUEST { HTTP::respond 302 Location "https://vpn1.mcms.gov.hk[HTTP::uri]" }

 

As we have dual active-active site, and by doing redirection we could ensure the traffic can be retained for disconnection and re-connection scenarios.

 

Due to a known bug on the new F5 Access client, "Unable to process server profile ..." is prompted when logon to the VPN gateway which cannot redirect the traffic. Wonder of F5 DevCentral has anyone come across this issue and suggest a mitigation to get round the error or any alternative suggestions.

 

Greatly appreciate your kind advice in advice.

 

Thanks & Regards Patrick

 

BIG-IP Access Policy Manager (APM)
f5 access client 2018
http redirect
irule
security
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Sep 04, 2018

    Hi Patrick,

     

    Can you add known bug reference? may be a description can help to understand.

     

    Can you try with 307 response code instead of 302?

     

    when HTTP_REQUEST { 
    HTTP::respond 307 Location "https://vpn1.mcms.gov.hk[HTTP::uri]" 
}