For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jinshu's avatar
Jinshu
Icon for Cirrus rankCirrus
Oct 30, 2015

F5 APM citrix webtop and portal access issue :(

Hello,

 

I have configured Citrix through APM (replacing Storefront server) and it works fine. Now i want to incluse a portal access created for a internal url. I have created the portal access and added in the advance resource allocation. But while testing F5 dropping the portal access connection. None of the packets are going out of F5 for portal acecess but same time citrix works fine.

 

Portal access is an internal url and able to resolve from F5.

 

Anyone faced this kind of issues?

 

-Jinshu

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
devops
iApps
iRules
performance
security

1 Reply

  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account
    Oct 30, 2015

    Portal Access (reverse proxy rewrite) is activated when the client requests something like "$$/yyyyy and there is a rewrite profile attached to the virtual server.

     

    Where xxxxx is the scheme, host, port, and hostname encoded in hex. yyyyy is the URI in plaintext.

     

    In order for this to work, BIG-IP must be able to:

     

    1. Resolve the hostname in the xxxxx part using the BIG-IP's DNS client.
    2. Negotiate serverside SSL, if applicable
    3. Route (SNAT basically) the traffic from a self-IP to the hostname.

    Make sure that the client is issuing such request by carefully looking at the network requests from the browser using HTTPWatch or Dev Tools on your browser, and that the BIG-IP conditions are met correctly.