Forum Discussion
NimbostratusF5 APM monitor VPN user destinations
NimbostratusYes, we thought in enable logging option. this can be viewed by CLI only, and which log file?
AVR does not support in this?
What is the best practice in APM to have the traffic flow in the network by the IP assigned to the user from the pool or by F5 IP
as the wizard make the configuration to the required resources reached by F5 self IP not the user IP assigned from the pool
NacreousI think AVR cannot show this.
You can also see it in GUI under Access ›› Overview : Active Sessions and clicking each session id
for cli check /var/log/apm
For traffic flow the best is to let users flow with their assigned IPs and not do SNAT but this depends on your topology.
Wizards are for the ease of use do not just rely on wizards.
Moreover you could do some irule magic and integrate F5 VPN with your firewall, depends the FW, and push user info with API in order to map user with IP. In this case FW will be able to use user based rules instead of source IP.
