For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JustinH's avatar
JustinH
Icon for Nimbostratus rankNimbostratus
Jan 10, 2018

F5 APM - limiting use of client connect mode

Since I can not force Auto Connect mode to our users, I am trying to figure out a different approach. Our scenario is that we don't want our users using VPN when in the office as it uses up an IP add...
BIG-IP
BIG-IP Access Policy Manager (APM)
devops
security
Ryan77777's avatar
Ryan77777
Icon for Altocumulus rankAltocumulus
Jan 11, 2018

Not ideal... but quick and dirty... what about leveraging multi-view DNS? Have your DNS platform return NXDOMAIN when trying to resolve the name internally (and then the connection should fail). Externally, have it resolve to the normal publicly accessible address. When you need to fire-up/test/train with user in the office, the IT admin can enter a hosts file map temporarily and remove when done.