For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

DareDevil's avatar
DareDevil
Icon for Nimbostratus rankNimbostratus
Feb 07, 2020

F5 Horizon Client 2FA fails

Hello we have deployed VMware VDI with F5 APM and LTM by using the iAPP v1.5.8 with DUO 2 Factor Authentication. When we launch the connections to the VDI machines from the F5 Webtop we are able to authenticate without issue and connect either using HTML5 or Blast. The problem is when we try to connect directly from the Horizon Client. The authentication fails. We are prompted for Username/Passcode we enter the AD username, AD cred then we are prompted for DUO and when we enter the code we received an error stating that "A RADIUS challenge failure occurred. Please try again". Please let me know if somebody has experienced the issue and found a solution. I would really appreciate the help.

application delivery
BIG-IP Access Policy Manager (APM)
Horizon-Client
security

4 Replies

  • Vladimir_Akhmarov's avatar
    Vladimir_Akhmarov
    Icon for Cirrus rankCirrus
    Feb 07, 2020

    Hello! If your VPE is using ACCESS_POLICY_AGENT_EVENT it is not possible. Currently this event is not supported under Horizon View client + APM. We have to reconfigure our policy to use HTTP Auth + Virtual Server with appropriate iRule

      • Vladimir_Akhmarov's avatar
        Vladimir_Akhmarov
        Icon for Cirrus rankCirrus
        Feb 07, 2020

        Hello DareDevil

         

        We are using custom 2FA based on Google Authenticator

        Take a look at this article https://devcentral.f5.com/s/articles/apm-google-authenticator-http-api-914